$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: 4vEonkuMNM+CAAJkCTrXcrQFz6XfVMp3DYJ+9KezPqE= Subject key identifier: 41:28:9F:58:71:85:85:EA:1C:5F:44:02:07:5B:52:1F:AE:F7:C5:1F Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0809 Signing time: Tue 04 Nov 2025 21:01:10 +0000 Manifest this update: Tue 04 Nov 2025 21:01:09 +0000 Manifest next update: Tue 11 Nov 2025 21:01:09 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: Kwe23vxJmvT+M76RLulbIcqq3x6svgBg6M4J5jaK4S4=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Nov 4 21:01:09 2025 GMT Not After : Nov 11 21:01:09 2025 GMT Subject: CN=690a6996-81d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2b:c2:19:93:01:f0:0d:c2:62:14:72:43:07: f1:4e:74:0d:47:b8:05:a2:cc:34:2c:65:7f:3a:e2: 83:74:c6:74:e8:c8:96:8a:ca:ef:92:7b:5d:c4:07: eb:0b:fb:a8:0f:ee:a0:e8:66:b1:97:2c:6f:d1:0d: eb:bc:b4:f2:b5:07:ce:37:ef:d8:f8:52:cf:63:8b: 76:5a:02:f7:a7:bb:58:e1:b8:51:06:22:fe:f2:1e: a7:04:18:e5:12:b8:f9:bd:a6:59:d4:b7:9a:39:9c: a9:c8:dd:95:6b:86:eb:94:ef:79:59:de:0d:fe:7d: 63:d2:e2:48:17:25:19:3e:17:e6:e1:01:78:33:f4: 7d:05:02:02:32:7a:49:ac:7d:76:db:ab:0a:f5:a0: ae:cc:9d:bb:ea:08:35:74:05:dc:1f:3e:8f:41:e0: 06:5b:d2:fd:5e:c0:5c:66:7b:5b:37:43:5b:20:8f: a3:65:3b:11:f7:33:64:d1:23:38:67:59:15:8c:26: 14:86:d7:cc:9b:86:0b:79:8d:2b:26:67:bc:71:52: 3f:6b:cb:25:40:29:a6:6a:21:e0:40:e1:21:b2:32: 7b:50:2b:61:b4:98:2e:14:78:b2:43:c9:37:03:98: 48:a9:be:09:69:72:fd:e7:ab:70:06:60:80:9a:13: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:28:9F:58:71:85:85:EA:1C:5F:44:02:07:5B:52:1F:AE:F7:C5:1F X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c9:c6:52:d1:f0:b6:f3:fe:f5:51:56:5d:bb:17:98:dc:fb: 73:81:ba:e4:e9:11:dd:fd:b8:42:7c:22:0d:08:b2:4f:d0:a6: 4e:51:bb:6b:ac:36:87:ae:34:86:cd:1b:17:0a:ce:8e:46:3b: 9b:e4:a0:f3:36:e8:80:00:bd:8d:3c:25:69:d7:f8:47:e5:60: 9a:05:81:5f:22:cc:83:ef:b1:06:fa:47:e2:38:eb:86:f1:5e: 58:06:70:2a:9a:05:ee:a0:ba:2d:00:a9:63:80:43:54:97:5b: 8a:9e:26:0d:48:2e:0f:c5:0d:62:49:1b:f3:68:f1:83:8c:f7: a0:b2:67:9c:86:1b:6a:38:90:c7:11:4c:25:9d:12:1f:a3:bc: 49:1c:79:4c:eb:33:c6:5b:24:b0:27:17:cd:2e:9e:aa:20:c2: 2f:78:a4:da:7a:61:f0:71:88:d5:c3:a4:15:05:0a:da:39:d4: 37:ea:64:c1:f7:48:fd:6b:52:e5:db:81:dd:d4:de:85:cc:78: 04:37:35:56:b9:66:6a:fb:f2:c6:03:85:e9:df:66:31:6c:d7: 84:78:1b:dc:27:86:aa:ac:a8:a2:ed:50:df:28:b9:06:5e:e5: f1:a3:60:f1:cb:92:94:90:40:39:bf:a3:14:b4:05:03:1f:c4: 08:a5:e1:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUxMTA0MjEwMTA5WhcNMjUxMTExMjEwMTA5WjAYMRYwFAYD VQQDEw02OTBhNjk5Ni04MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SvCGZMB8A3CYhRyQwfxTnQNR7gFosw0LGV/OuKDdMZ06MiWisrvkntdxAfr C/uoD+6g6Gaxlyxv0Q3rvLTytQfON+/Y+FLPY4t2WgL3p7tY4bhRBiL+8h6nBBjl Erj5vaZZ1LeaOZypyN2Va4brlO95Wd4N/n1j0uJIFyUZPhfm4QF4M/R9BQICMnpJ rH1226sK9aCuzJ276gg1dAXcHz6PQeAGW9L9XsBcZntbN0NbII+jZTsR9zNk0SM4 Z1kVjCYUhtfMm4YLeY0rJme8cVI/a8slQCmmaiHgQOEhsjJ7UCthtJguFHiyQ8k3 A5hIqb4JaXL956twBmCAmhMNpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEon1hx hYXqHF9EAgdbUh+u98UfMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLycZS0fC28/71UVZduxeY3Ptzgbrk6RHd/bhCfCINCLJP0KZOUbtr rDaHrjSGzRsXCs6ORjub5KDzNuiAAL2NPCVp1/hH5WCaBYFfIsyD77EG+kfiOOuG 8V5YBnAqmgXuoLotAKljgENUl1uKniYNSC4PxQ1iSRvzaPGDjPegsmechhtqOJDH EUwlnRIfo7xJHHlM6zPGWySwJxfNLp6qIMIveKTaemHwcYjVw6QVBQraOdQ36mTB 90j9a1Ll24Hd1N6FzHgENzVWuWZq+/LGA4Xp32YxbNeEeBvcJ4aqrKii7VDfKLkG XuXxo2Dxy5KUkEA5v6MUtAUDH8QIpeED -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:00 2025 by rpki-client