$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: ZNcleK7UeIALw4Qqp3hocemhNtjFIoEOHbARfAewvAs= Subject key identifier: 09:A0:F5:68:52:3B:3F:CF:4D:15:B0:4D:91:6A:64:A4:48:B2:A5:FC Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0DB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D74 Signing time: Tue 04 Nov 2025 18:07:31 +0000 Manifest this update: Tue 04 Nov 2025 18:07:31 +0000 Manifest next update: Tue 11 Nov 2025 18:07:31 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: IBtXFkj7ubpUvbTqRMgziTr0GH2xH77wEtA4DHxFfsI=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Nov 4 18:07:31 2025 GMT Not After : Nov 11 18:07:31 2025 GMT Subject: CN=690a40e3-803e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:94:e2:0d:0b:44:95:16:99:48:a6:4f:9a: ba:d1:da:67:fe:af:84:8a:7c:ad:10:a7:1f:2d:e0: 68:c1:9e:c9:fc:8e:95:81:0c:76:90:28:ce:24:26: b9:e9:a1:85:63:a1:52:40:dd:16:c3:cf:7f:19:09: 35:5f:91:50:19:96:c0:6c:cd:a9:06:f8:ba:34:62: 76:07:d2:1a:f0:69:c1:41:45:89:5c:b3:af:4b:17: b6:19:1d:a4:3f:be:cd:fd:c7:f9:4f:ef:57:34:8c: 3e:a2:62:b1:32:71:54:9a:f5:1b:dc:6e:fb:68:fb: 3a:e5:ca:f7:a4:c6:1f:cf:a0:af:bd:98:03:d3:13: 0f:44:11:28:b0:8c:cd:27:cc:1b:dd:68:a9:db:a7: 27:74:42:d4:8a:fd:e5:22:a7:3d:c7:c9:ed:c6:80: ca:02:fd:8a:7c:6e:5e:e9:4a:34:7c:c2:19:2d:4d: 1b:27:f8:0a:04:d7:4a:98:2f:08:c2:28:1d:ee:06: ad:5b:1d:46:ec:af:8d:83:51:bc:21:9b:65:1a:8d: 24:fc:d7:0a:36:92:e6:dc:4e:54:f0:75:70:d0:26: 3f:92:6f:81:54:04:41:09:13:68:d2:df:f1:92:b4: 45:63:05:68:1f:35:d7:94:06:f4:1d:bc:3e:9f:93: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:F5:68:52:3B:3F:CF:4D:15:B0:4D:91:6A:64:A4:48:B2:A5:FC X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b5:00:e8:f0:d2:3d:f7:06:45:ba:57:06:e7:a1:5b:cf:0b: 71:92:f8:27:f9:6f:97:07:d6:3a:45:98:64:2e:25:6a:ce:14: 5b:55:1e:02:74:e9:85:d1:87:18:78:9c:9c:5c:02:60:97:77: d5:d8:f2:79:7c:2b:38:63:59:3a:11:db:03:f6:0a:03:d8:f7: e4:e4:fd:58:ec:62:db:17:17:e5:18:3c:00:2e:f4:17:1f:4d: 0a:5d:58:80:06:2d:fb:42:1d:c1:a0:82:62:cc:ba:e3:4f:81: 30:6d:17:c8:4e:69:33:a9:12:1d:b7:3a:3a:a1:23:25:5c:1f: ec:f6:44:09:f9:f4:09:fb:de:b5:7e:b9:a1:a7:94:c2:13:26: f5:df:6b:8c:26:d8:83:7e:f5:b6:4d:28:23:ac:ca:50:17:73: 85:2b:f6:f5:21:2d:87:f4:6d:83:21:42:82:3f:29:ff:de:ec: b7:d6:16:1c:f2:e8:84:9b:85:00:0f:97:fd:05:f2:61:aa:23: 77:45:37:cd:68:f3:40:aa:50:a5:fe:e8:86:03:80:95:fd:06: e4:66:a9:15:0a:6f:8c:28:4c:e0:ff:52:15:fb:9f:cf:7e:d0: 68:95:77:67:80:b9:6e:9f:e5:8e:9f:f9:d9:68:0a:0c:50:89: 08:9c:75:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUxMTA0MTgwNzMxWhcNMjUxMTExMTgwNzMxWjAYMRYwFAYD VQQDEw02OTBhNDBlMy04MDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEqU4g0LRJUWmUimT5q60dpn/q+EinytEKcfLeBowZ7J/I6VgQx2kCjOJCa5 6aGFY6FSQN0Ww89/GQk1X5FQGZbAbM2pBvi6NGJ2B9Ia8GnBQUWJXLOvSxe2GR2k P77N/cf5T+9XNIw+omKxMnFUmvUb3G77aPs65cr3pMYfz6CvvZgD0xMPRBEosIzN J8wb3Wip26cndELUiv3lIqc9x8ntxoDKAv2KfG5e6Uo0fMIZLU0bJ/gKBNdKmC8I wigd7gatWx1G7K+Ng1G8IZtlGo0k/NcKNpLm3E5U8HVw0CY/km+BVARBCRNo0t/x krRFYwVoHzXXlAb0Hbw+n5PTWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmg9WhS Oz/PTRWwTZFqZKRIsqX8MB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAutQDo8NI99wZFulcG56Fbzwtxkvgn+W+XB9Y6RZhkLiVqzhRbVR4C dOmF0YcYeJycXAJgl3fV2PJ5fCs4Y1k6EdsD9goD2Pfk5P1Y7GLbFxflGDwALvQX H00KXViABi37Qh3BoIJizLrjT4EwbRfITmkzqRIdtzo6oSMlXB/s9kQJ+fQJ+961 frmhp5TCEyb132uMJtiDfvW2TSgjrMpQF3OFK/b1IS2H9G2DIUKCPyn/3uy31hYc 8uiEm4UAD5f9BfJhqiN3RTfNaPNAqlCl/uiGA4CV/QbkZqkVCm+MKEzg/1IV+5/P ftBolXdngLlun+WOn/nZaAoMUIkInHWn -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:47 2025 by rpki-client