$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: pOMNOa+/f0PNb64JADJfLYbWLVTnnUdJVcr0oPErlX8= Subject key identifier: D3:35:94:DF:B4:B1:6F:0A:A2:1F:30:0C:D4:35:21:59:33:C2:20:5B Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 06D7 Signing time: Tue 04 Nov 2025 22:35:25 +0000 Manifest this update: Tue 04 Nov 2025 22:35:25 +0000 Manifest next update: Tue 11 Nov 2025 22:35:25 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: 0hnoPyeEMGAVYMPnoMPtmKx0eD4p8nT0NMTL6CLUeNo=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: y4GtwygNXHOsgApCazrA1K5LMWjkg33ysXo8KtVSOnk=) 3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: UwSCk8PiXVxxp/HUKiEsKMP9QLxahaMhhaVASnsqLPY=) 4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: H9Y3DaflkrUF1wxbldqrT+3B0vj/ROqeiUXQ97YC1aw=) 5: 671FC40EE29211EE94348874C4F9AE02.roa (hash: 8z6xDKhwld/+PqMlkxmQW4jjFgb0KSjTx84Nej4v1h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: Nov 4 22:35:25 2025 GMT Not After : Nov 11 22:35:25 2025 GMT Subject: CN=690a7fad-9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:e3:32:52:d6:d8:06:65:57:3a:35:57:4d: 8d:4d:44:b1:e1:f0:74:5f:63:95:e8:4c:d7:98:d7: f6:e8:1e:fd:9f:9e:f6:96:5c:6d:e6:db:55:16:56: 7b:3b:99:61:c2:d0:3e:8c:0f:6d:40:40:d5:bd:cf: bb:70:1f:87:0a:6c:93:cc:f7:1c:81:4b:ac:5a:38: c1:c4:ab:e7:78:54:6b:55:0b:80:ba:5a:8e:77:a7: ad:28:2c:3d:c2:2b:a2:16:0b:28:d7:89:7b:51:2c: 44:e1:83:ac:53:32:ce:a7:81:e7:72:93:df:8f:3f: 4f:85:9b:93:57:9a:0d:d1:ab:ab:66:6f:ed:ca:52: 8e:24:c5:f4:84:cb:f6:1e:ca:17:48:34:c2:f0:35: 22:6e:de:54:be:ab:70:c9:b6:3a:71:88:73:f9:06: 90:fe:89:30:5c:62:d3:4d:55:0e:90:d0:0f:34:93: 6e:5f:36:01:75:b3:70:67:de:46:8e:f5:75:0a:e3: 46:f4:d8:ec:60:14:9c:1e:9a:f8:c5:34:09:93:db: a0:28:d1:0f:fb:c2:59:ce:a8:5a:13:92:53:3a:17: 3b:58:0b:a6:e3:2b:f6:66:fe:bb:0f:40:a5:9a:76: 9e:cc:8b:06:c5:55:b3:33:b8:2c:3b:63:4e:cc:a6: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:94:DF:B4:B1:6F:0A:A2:1F:30:0C:D4:35:21:59:33:C2:20:5B X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:09:03:25:63:ec:e4:3f:85:f4:34:4d:1f:2a:0d:58:05:c5: 0e:38:45:9f:6a:67:9b:d6:5b:8d:74:79:ee:68:f9:99:6b:e8: e1:fa:af:9b:4d:3b:a6:83:cb:b3:c0:5b:e4:9f:fe:b4:4c:dd: c3:49:4b:a2:ae:ea:62:8f:c4:63:18:ee:c2:1a:76:3d:de:0a: 33:cf:02:75:c9:80:48:82:64:1c:2a:a5:18:d4:8d:57:87:c4: 3a:3a:fe:19:72:7f:7f:a3:d2:f6:1f:bb:2b:c2:b1:a1:38:23: 05:75:81:f3:13:bf:14:ed:f2:66:7a:fc:6e:7a:f9:b6:34:1f: ca:5d:26:be:cb:ef:fc:ac:89:71:74:8b:0e:35:b7:27:ab:c4: aa:66:63:63:fc:ba:2e:00:9c:94:10:9b:3d:27:b4:1f:13:c4: e7:fc:77:ac:d6:a1:7e:54:f2:f6:09:fc:88:87:91:01:66:eb: 27:e0:4b:70:fb:e3:0e:b4:d8:d6:ed:ae:62:db:f8:9d:72:3f: 82:b8:52:36:5d:f1:58:7d:a6:b3:67:8d:a9:4b:0f:57:c1:09: 78:fa:e3:4e:6b:9d:92:d4:51:cd:cb:ec:24:b3:bc:85:77:04: 25:1a:50:27:3a:11:8d:60:71:6b:89:a3:b5:0e:71:86:75:68: bc:c8:e8:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUxMTA0MjIzNTI1WhcNMjUxMTExMjIzNTI1WjAYMRYwFAYD VQQDEw02OTBhN2ZhZC05OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqffjMlLW2AZlVzo1V02NTUSx4fB0X2OV6EzXmNf26B79n572llxt5ttVFlZ7 O5lhwtA+jA9tQEDVvc+7cB+HCmyTzPccgUusWjjBxKvneFRrVQuAulqOd6etKCw9 wiuiFgso14l7USxE4YOsUzLOp4HncpPfjz9PhZuTV5oN0aurZm/tylKOJMX0hMv2 HsoXSDTC8DUibt5UvqtwybY6cYhz+QaQ/okwXGLTTVUOkNAPNJNuXzYBdbNwZ95G jvV1CuNG9NjsYBScHpr4xTQJk9ugKNEP+8JZzqhaE5JTOhc7WAum4yv2Zv67D0Cl mnaezIsGxVWzM7gsO2NOzKZ21QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM1lN+0 sW8Koh8wDNQ1IVkzwiBbMB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqCQMlY+zkP4X0NE0fKg1YBcUOOEWfameb1luNdHnuaPmZa+jh+q+b TTumg8uzwFvkn/60TN3DSUuirupij8RjGO7CGnY93gozzwJ1yYBIgmQcKqUY1I1X h8Q6Ov4Zcn9/o9L2H7srwrGhOCMFdYHzE78U7fJmevxuevm2NB/KXSa+y+/8rIlx dIsONbcnq8SqZmNj/LouAJyUEJs9J7QfE8Tn/Hes1qF+VPL2CfyIh5EBZusn4Etw ++MOtNjW7a5i2/idcj+CuFI2XfFYfaazZ42pSw9XwQl4+uNOa52S1FHNy+wks7yF dwQlGlAnOhGNYHFriaO1DnGGdWi8yOjs -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:21 2025 by rpki-client