$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: mNptDcCqulYpwPY3laM8pUGqSqHtm3pFpXKCDlO2TVI= Subject key identifier: B9:16:ED:8E:13:1C:D6:36:15:99:11:3D:53:88:F7:8A:4A:79:E7:49 Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 01EE Signing time: Mon 03 Nov 2025 02:35:35 +0000 Manifest this update: Mon 03 Nov 2025 02:35:34 +0000 Manifest next update: Mon 10 Nov 2025 02:35:34 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: qi0BYrRgRIY3sqn1PX0Ffc7YU2uEcDhM/XyS7mcrErE=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: frHxqt/yG7rr6fCbelfcQdfPa8QFjBnwgHPUnZu57so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Nov 3 02:35:34 2025 GMT Not After : Nov 10 02:35:34 2025 GMT Subject: CN=690814f6-e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:03:62:d2:d4:f7:db:69:b5:0b:eb:8c:6b: c9:4b:3c:7a:bc:38:2d:0d:eb:18:60:cc:aa:75:e0: 14:bf:9c:55:81:bf:30:66:46:9f:8d:17:a8:cd:f3: 6a:2b:28:c5:95:72:6f:9e:2c:57:0a:89:db:bf:3b: 51:6d:7d:c0:ad:f5:18:da:d0:3c:ef:6c:27:0c:9b: ef:16:da:f0:fa:3c:08:88:f7:c6:90:88:c6:c8:84: 71:8c:18:b8:47:96:d2:79:70:75:3b:11:e3:7b:05: 5f:c9:5c:cd:97:1e:12:b4:9a:cd:92:29:a1:7f:89: 53:35:71:63:4a:0d:96:dd:1d:df:62:64:15:18:39: 2a:08:20:d3:57:02:3a:65:c3:c9:de:09:bd:17:b6: f1:8f:9f:95:5b:ec:3c:f7:c8:ca:68:8b:b0:f0:58: f4:42:03:4c:96:fa:78:69:aa:e0:40:cd:d2:e0:e6: 95:9d:91:60:94:b5:35:4d:a9:1d:f3:15:89:c8:6b: 4e:f7:23:2c:10:0a:fd:9d:c9:d1:21:26:cb:f1:71: 42:0e:ca:d1:0f:e1:71:5e:8e:a6:ba:ca:9f:93:4e: 66:8a:fd:57:ad:c5:a3:bf:86:ce:41:0c:36:9f:16: 8a:e8:7e:7e:75:d3:9b:0d:fc:c3:13:5c:8c:eb:ed: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:16:ED:8E:13:1C:D6:36:15:99:11:3D:53:88:F7:8A:4A:79:E7:49 X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:36:61:d2:3c:11:77:46:49:53:93:78:15:08:e5:58:e2:c3: 60:fd:9f:5f:4e:2b:5e:f0:60:cf:c0:08:87:1f:c2:17:f9:f6: 0c:f6:cc:0b:ff:f2:50:91:7f:fc:6b:18:b6:2b:56:fc:1d:47: bc:e3:38:bd:d3:ea:38:ad:19:2f:90:73:20:d8:06:94:94:fc: 84:f3:03:31:9d:a4:67:ed:3d:ac:1b:0d:e4:79:31:f0:ec:36: d3:ee:72:92:70:79:cb:6c:be:df:9c:61:a9:c9:a1:bc:12:b3: 69:1d:11:51:aa:e9:35:df:ec:d2:75:03:9d:d7:3a:aa:d9:a1: f9:e2:6b:58:14:7b:f9:59:4f:0d:cf:a9:5d:74:53:06:3c:21: a9:71:7e:fe:64:46:0e:c7:86:ee:e1:aa:0a:6d:52:e9:ac:a7: e8:0b:6f:ca:3a:7d:10:7c:31:66:e8:a5:f2:04:9d:af:ab:d2: e5:65:c8:6b:6c:58:68:11:b8:be:c4:b0:0e:79:0c:2f:19:bc: c7:e8:d6:d5:3b:86:78:a0:e1:39:41:1b:26:4b:71:40:7c:3c: 38:d9:07:bf:9b:5e:ae:3c:2f:40:64:bf:2d:f8:c5:90:4e:79: 55:ad:14:74:5b:5d:23:d1:cd:ff:0e:7c:3d:10:bb:f3:17:ac: ea:60:19:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjUxMTAzMDIzNTM0WhcNMjUxMTEwMDIzNTM0WjAYMRYwFAYD VQQDEw02OTA4MTRmNi1lNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvigDYtLU99tptQvrjGvJSzx6vDgtDesYYMyqdeAUv5xVgb8wZkafjReozfNq KyjFlXJvnixXConbvztRbX3ArfUY2tA872wnDJvvFtrw+jwIiPfGkIjGyIRxjBi4 R5bSeXB1OxHjewVfyVzNlx4StJrNkimhf4lTNXFjSg2W3R3fYmQVGDkqCCDTVwI6 ZcPJ3gm9F7bxj5+VW+w898jKaIuw8Fj0QgNMlvp4aargQM3S4OaVnZFglLU1Takd 8xWJyGtO9yMsEAr9ncnRISbL8XFCDsrRD+FxXo6musqfk05miv1XrcWjv4bOQQw2 nxaK6H5+ddObDfzDE1yM6+1L8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkW7Y4T HNY2FZkRPVOI94pKeedJMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaNmHSPBF3RklTk3gVCOVY4sNg/Z9fTite8GDPwAiHH8IX+fYM9swL //JQkX/8axi2K1b8HUe84zi90+o4rRkvkHMg2AaUlPyE8wMxnaRn7T2sGw3keTHw 7DbT7nKScHnLbL7fnGGpyaG8ErNpHRFRquk13+zSdQOd1zqq2aH54mtYFHv5WU8N z6lddFMGPCGpcX7+ZEYOx4bu4aoKbVLprKfoC2/KOn0QfDFm6KXyBJ2vq9LlZchr bFhoEbi+xLAOeQwvGbzH6NbVO4Z4oOE5QRsmS3FAfDw42Qe/m16uPC9AZL8t+MWQ TnlVrRR0W10j0c3/Dnw9ELvzF6zqYBm+ -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:03 2025 by rpki-client