$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: sK91l//mc1ao+y7pKA4LLDopal7gY0vg3YDkbb51ODk= Subject key identifier: A8:36:05:13:ED:4E:45:1B:EE:A1:97:45:71:A9:2E:38:1B:17:20:6B Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 085F Signing time: Tue 04 Nov 2025 20:42:47 +0000 Manifest this update: Tue 04 Nov 2025 20:42:47 +0000 Manifest next update: Tue 11 Nov 2025 20:42:47 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: OXRmhWq1hCYvhW+PaxHBuKNG0/ocBzAuz6OH1JBrUAA=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: uybnkX1k8gPyTR5CU7p1ceux1tCfl8jTIgkNDS2MSjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Nov 4 20:42:47 2025 GMT Not After : Nov 11 20:42:47 2025 GMT Subject: CN=690a6547-6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:5b:51:0a:f6:f4:cc:fc:cc:b1:44:ff:af: 90:d4:ec:43:74:ca:f4:b1:67:37:9d:05:55:91:c9: d4:70:70:17:f9:a5:40:55:98:b7:cc:c1:64:42:ec: e2:fc:97:f4:1a:86:03:16:90:ef:2c:c1:ad:b5:f3: 42:04:a5:97:79:ca:cd:be:1c:74:b3:d7:e0:c2:25: 71:bb:76:5f:db:46:87:0a:54:04:cf:97:5e:99:29: 8f:0d:f1:b4:f6:18:a3:22:f0:32:99:67:3f:b5:de: 7a:9e:7e:86:30:01:f6:5e:67:95:e9:36:1d:78:ee: 5f:7c:6b:65:32:a4:0b:97:70:02:75:91:51:16:9a: a8:d5:ca:59:40:01:2e:0a:0d:bb:ee:44:0e:41:1b: 52:c1:eb:1d:0f:32:71:d1:37:7b:ba:a6:ba:bc:95: f8:b7:26:aa:7d:53:52:10:96:4e:84:86:67:d0:af: c7:e1:10:51:8d:79:2f:99:c6:54:83:37:de:8a:0b: fe:1c:d6:7d:4b:b9:55:61:38:be:64:b1:37:be:7a: ac:4d:06:69:e1:2a:ed:93:1d:1b:b6:d1:42:02:eb: 9a:a7:6f:c2:ad:19:64:f4:35:10:bd:1e:db:48:4e: 74:d7:2d:30:1e:72:74:b4:e7:aa:17:70:dc:34:9e: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:05:13:ED:4E:45:1B:EE:A1:97:45:71:A9:2E:38:1B:17:20:6B X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:58:11:f8:27:69:44:dd:46:38:fb:68:bf:67:5c:67:98:be: d0:f3:06:81:59:d6:76:a2:fa:9a:41:91:ed:88:46:5e:1f:2d: 3a:7b:f1:eb:a0:18:65:eb:3e:9d:81:d0:02:db:76:84:21:75: 4e:f0:10:51:ae:ec:af:34:91:47:43:a5:61:50:1e:5f:a0:66: 0d:c1:e1:02:36:fb:a6:bf:c5:94:98:c1:59:61:79:b8:d9:e9: 3c:7c:df:2c:66:36:27:ee:85:04:bf:74:4b:f2:5b:70:5b:95: 3a:45:e7:12:19:b1:04:6f:2d:86:cc:10:66:6a:36:1c:a2:02: 0a:3c:9f:09:cc:dc:79:60:b7:e0:2b:d7:d8:7e:bc:9b:d5:97: 13:61:2b:b7:fe:46:15:02:42:e6:c7:92:38:8e:0b:b7:4f:5d: dd:c4:eb:a9:32:31:8d:b7:19:33:bb:89:48:28:c5:31:20:a8: 4f:75:28:c6:8b:81:ac:f7:0c:a2:4f:0b:b7:2e:38:89:74:07: 2c:32:72:7f:44:4a:64:ea:ab:91:d3:86:ae:1f:44:86:e3:75: fa:65:c6:c2:76:0b:9e:6f:74:fd:99:7a:e5:2f:03:76:ed:e8: 51:32:d6:ee:d0:11:86:09:b4:a5:6a:99:50:26:3b:0a:97:3a: 41:63:e6:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUxMTA0MjA0MjQ3WhcNMjUxMTExMjA0MjQ3WjAYMRYwFAYD VQQDEw02OTBhNjU0Ny02MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2flbUQr29Mz8zLFE/6+Q1OxDdMr0sWc3nQVVkcnUcHAX+aVAVZi3zMFkQuzi /Jf0GoYDFpDvLMGttfNCBKWXecrNvhx0s9fgwiVxu3Zf20aHClQEz5demSmPDfG0 9hijIvAymWc/td56nn6GMAH2XmeV6TYdeO5ffGtlMqQLl3ACdZFRFpqo1cpZQAEu Cg277kQOQRtSwesdDzJx0Td7uqa6vJX4tyaqfVNSEJZOhIZn0K/H4RBRjXkvmcZU gzfeigv+HNZ9S7lVYTi+ZLE3vnqsTQZp4Srtkx0bttFCAuuap2/CrRlk9DUQvR7b SE501y0wHnJ0tOeqF3DcNJ5wEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg2BRPt TkUb7qGXRXGpLjgbFyBrMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6WBH4J2lE3UY4+2i/Z1xnmL7Q8waBWdZ2ovqaQZHtiEZeHy06e/Hr oBhl6z6dgdAC23aEIXVO8BBRruyvNJFHQ6VhUB5foGYNweECNvumv8WUmMFZYXm4 2ek8fN8sZjYn7oUEv3RL8ltwW5U6RecSGbEEby2GzBBmajYcogIKPJ8JzNx5YLfg K9fYfryb1ZcTYSu3/kYVAkLmx5I4jgu3T13dxOupMjGNtxkzu4lIKMUxIKhPdSjG i4Gs9wyiTwu3LjiJdAcsMnJ/REpk6quR04auH0SG43X6ZcbCdgueb3T9mXrlLwN2 7ehRMtbu0BGGCbSlaplQJjsKlzpBY+Y5 -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:18 2025 by rpki-client