$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: NSOyLccxGOSdGRNMgdXlFrm2cQM5zwvRHIk+ONmP0Yo= Subject key identifier: 9E:D2:C9:A3:7E:43:65:14:FF:09:60:1B:31:5D:F4:36:6E:5B:6F:99 Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 02EE Signing time: Mon 03 Nov 2025 01:14:49 +0000 Manifest this update: Mon 03 Nov 2025 01:14:48 +0000 Manifest next update: Mon 10 Nov 2025 01:14:48 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: /2HbpPbbu+nKLM9EfkUT67764Tu3XGz3aPSBG/MaaHk=) 2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 4: DC7E1FA0474711F0A918DB1FC4F9AE02.roa (hash: 4bDhz9z6ALt8Xj1QOxpjNw3dHLuvC3V7JTihZYe86q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Nov 3 01:14:48 2025 GMT Not After : Nov 10 01:14:48 2025 GMT Subject: CN=69080208-fe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:21:38:c3:45:f8:38:b0:19:d3:7f:b7:10:7a: 06:95:c6:2b:b6:e2:66:f9:a7:79:04:75:6a:23:21: c9:f1:05:5a:ce:2a:ed:dc:c4:ef:8b:45:78:6f:5d: f9:41:b3:12:8a:d3:cd:53:fd:a5:2f:60:f4:3a:4c: 0c:ed:cb:66:1b:36:11:28:32:5f:17:d4:6a:14:52: 90:af:8e:b2:fd:88:20:7d:35:71:24:fe:21:ac:c0: 91:22:fa:14:b9:de:9b:88:b1:48:21:fe:df:e6:84: 6c:cb:02:33:a8:0c:2d:54:c8:2b:fa:c7:55:b0:6a: 2f:66:d0:0e:47:5b:c9:0a:c1:21:fe:42:bb:37:73: b6:ac:54:92:96:fc:32:40:6d:12:67:0a:f3:46:36: 0f:85:d5:80:f9:07:f6:f9:4e:81:d9:ab:b2:74:57: 1e:8f:44:85:2a:99:7f:63:3f:b3:f7:f8:3d:6f:6e: 99:fe:ea:42:10:b0:51:f6:db:54:8d:68:86:40:e1: 9a:92:74:f4:2f:5a:ea:6f:87:2b:2f:0d:cd:46:44: 91:e5:c0:67:ec:4a:9c:82:fa:26:60:54:90:dc:ee: 20:1a:b8:cf:ad:90:86:0f:4f:7b:a2:72:1e:bf:e6: 15:de:16:de:65:76:42:95:32:42:64:2a:ee:3c:88: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D2:C9:A3:7E:43:65:14:FF:09:60:1B:31:5D:F4:36:6E:5B:6F:99 X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:eb:db:90:fc:d0:af:f2:aa:a6:50:e2:ad:e0:f0:5a:1c:2c: 2f:d0:c4:de:7f:69:2b:c1:43:96:10:bf:51:a7:d7:c9:fe:73: b6:68:28:c2:16:26:74:71:b4:22:69:46:68:5e:b5:50:cb:25: 17:79:57:fc:b7:25:0a:e0:e0:f3:a3:85:e6:34:f6:18:41:56: 8e:d6:33:f3:73:ed:28:90:b7:fb:f5:db:99:3b:26:42:f6:98: db:e8:a2:8a:5c:28:ca:08:1a:33:22:a2:c6:a2:b3:da:d1:c6: b7:1a:e7:a0:84:3f:56:72:ac:f4:09:77:a4:fa:9e:5f:6a:79: f0:15:f9:d2:ba:ac:1b:3c:a3:16:69:82:67:de:32:bc:16:fe: 7b:80:1c:60:ec:c9:37:0b:f9:e8:93:a5:7a:00:16:b1:5d:18: 59:70:f1:b3:42:ac:ad:ea:80:81:86:3b:c4:09:0e:1a:a6:a8: 22:fb:49:83:df:9c:e0:37:22:fe:32:c8:68:83:37:ea:d4:5e: 31:a4:37:fc:bd:ed:42:44:f9:af:b1:50:22:09:47:14:ac:b6: ad:a2:35:84:54:f5:12:27:68:a8:14:30:c2:cb:24:30:99:e7: bd:8b:70:7f:07:49:62:e7:6b:2d:f7:a6:d1:f7:5d:25:2e:c8: 29:6d:27:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUxMTAzMDExNDQ4WhcNMjUxMTEwMDExNDQ4WjAYMRYwFAYD VQQDEw02OTA4MDIwOC1mZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/iE4w0X4OLAZ03+3EHoGlcYrtuJm+ad5BHVqIyHJ8QVazirt3MTvi0V4b135 QbMSitPNU/2lL2D0OkwM7ctmGzYRKDJfF9RqFFKQr46y/YggfTVxJP4hrMCRIvoU ud6biLFIIf7f5oRsywIzqAwtVMgr+sdVsGovZtAOR1vJCsEh/kK7N3O2rFSSlvwy QG0SZwrzRjYPhdWA+Qf2+U6B2auydFcej0SFKpl/Yz+z9/g9b26Z/upCELBR9ttU jWiGQOGaknT0L1rqb4crLw3NRkSR5cBn7EqcgvomYFSQ3O4gGrjPrZCGD097onIe v+YV3hbeZXZClTJCZCruPIj1CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7SyaN+ Q2UU/wlgGzFd9DZuW2+ZMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD69uQ/NCv8qqmUOKt4PBaHCwv0MTef2krwUOWEL9Rp9fJ/nO2aCjC FiZ0cbQiaUZoXrVQyyUXeVf8tyUK4ODzo4XmNPYYQVaO1jPzc+0okLf79duZOyZC 9pjb6KKKXCjKCBozIqLGorPa0ca3GueghD9Wcqz0CXek+p5fannwFfnSuqwbPKMW aYJn3jK8Fv57gBxg7Mk3C/nok6V6ABaxXRhZcPGzQqyt6oCBhjvECQ4apqgi+0mD 35zgNyL+Mshogzfq1F4xpDf8ve1CRPmvsVAiCUcUrLatojWEVPUSJ2ioFDDCyyQw mee9i3B/B0li52st96bR910lLsgpbSd2 -----END CERTIFICATE-----Generated at Tue Nov 4 20:07:02 2025 by rpki-client