$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft File: peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json) Hash identifier: 2uWu42yOeSfxDQtcaSktmAkH8HlonMVLnxBnvMcu7r8= Subject key identifier: AD:F4:99:DA:1E:8B:4F:33:F9:21:DB:6B:1F:C9:45:ED:43:7E:BF:F5 Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 Certificate issuer: /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft Manifest number: 1500 Signing time: Tue 04 Nov 2025 18:47:32 +0000 Manifest this update: Tue 04 Nov 2025 18:47:32 +0000 Manifest next update: Tue 11 Nov 2025 18:47:32 +0000 Files and hashes: 1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: lPm6RP1aq1LeSgXGnK4lbJXidW7dyVimIvg/NJOhGQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Validity Not Before: Nov 4 18:47:32 2025 GMT Not After : Nov 11 18:47:32 2025 GMT Subject: CN=690a4a44-0c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:46:23:9d:3a:f9:08:b3:40:d0:8c:c4:86: 57:ae:de:fc:e7:c0:13:dc:90:56:d1:a5:ed:5a:c5: 63:de:56:3e:84:9c:25:e2:92:3d:6a:7e:d2:ad:c2: c7:c6:20:a8:26:8c:e7:38:5c:2f:9d:12:98:13:82: 67:ad:a4:9e:59:28:d5:76:10:49:da:1d:fe:33:f9: c0:c9:00:17:9f:76:c5:71:4d:ba:11:ff:30:fd:87: 26:b1:54:01:be:1e:96:2a:8f:5d:6a:d9:69:32:17: 3d:ac:e9:0a:db:64:07:07:b9:73:6b:7e:b7:16:f3: 77:ca:d3:ba:a5:11:64:68:e3:51:60:15:2b:c4:f1: 4e:2d:51:3f:43:fc:35:a0:6d:6e:f8:2c:c9:01:97: 79:0d:64:83:49:9c:2c:ab:39:ac:e9:87:9f:58:8b: c4:00:38:f3:f2:6f:aa:7f:7e:46:a4:69:b6:a2:c4: be:a0:0a:4f:fa:9f:1b:75:f4:2b:e1:70:d3:a1:df: 59:c0:66:3f:fd:26:94:ea:18:07:4c:2b:86:6c:68: 27:a7:ea:59:db:07:0d:92:9b:48:7a:2b:8a:5d:ee: 23:1e:ca:b5:70:dd:e2:e3:62:f2:63:df:54:92:fb: b4:da:8a:11:65:5b:c5:bc:31:da:9e:1a:33:be:2d: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:99:DA:1E:8B:4F:33:F9:21:DB:6B:1F:C9:45:ED:43:7E:BF:F5 X509v3 Authority Key Identifier: keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bf:e4:9f:b5:03:da:09:c8:bf:7c:e1:73:12:70:11:a2:78: 70:a3:4b:ad:96:04:0f:d5:0d:12:31:57:9a:ac:38:f4:a2:8c: 46:9c:7f:17:72:e4:4c:04:88:a5:d6:40:f1:c9:04:f8:1a:8e: 34:20:bb:92:4c:22:97:81:48:1e:5c:64:d1:81:cf:6c:fa:30: 69:91:45:7f:64:37:54:82:29:10:74:f6:f4:99:45:56:1a:34: d6:6f:bb:2c:e2:7d:b4:8b:ae:d8:59:ff:6d:15:06:e9:51:4c: b6:06:05:e7:36:68:7c:b3:e6:91:3e:34:d6:0c:1c:fb:8f:ae: 54:a4:bc:ef:55:8d:e9:69:c0:5b:b4:b4:0d:35:bf:13:32:1b: 4c:27:4f:8c:55:09:7b:fd:c3:8a:79:a2:07:3a:a8:47:b4:83: a4:b5:bb:62:9d:ef:fe:27:9f:96:42:e0:40:22:0a:ef:a9:7a: 76:db:72:d1:a5:95:7b:1d:34:f8:12:0a:74:e7:09:02:d2:b4: 26:81:81:19:33:d6:3f:a3:05:bf:f1:59:d8:26:c7:58:37:d9: b0:50:a5:9c:2f:fe:3a:ac:dd:0c:92:3a:14:51:99:78:99:c5: ad:95:3c:37:a3:fa:1d:db:07:e6:bc:46:77:31:27:66:d4:8b: ef:f5:27:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy NDE3OTA5QjEwHhcNMjUxMTA0MTg0NzMyWhcNMjUxMTExMTg0NzMyWjAYMRYwFAYD VQQDEw02OTBhNGE0NC0wYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugNGI506+QizQNCMxIZXrt7858AT3JBW0aXtWsVj3lY+hJwl4pI9an7SrcLH xiCoJoznOFwvnRKYE4JnraSeWSjVdhBJ2h3+M/nAyQAXn3bFcU26Ef8w/YcmsVQB vh6WKo9datlpMhc9rOkK22QHB7lza363FvN3ytO6pRFkaONRYBUrxPFOLVE/Q/w1 oG1u+CzJAZd5DWSDSZwsqzms6YefWIvEADjz8m+qf35GpGm2osS+oApP+p8bdfQr 4XDTod9ZwGY//SaU6hgHTCuGbGgnp+pZ2wcNkptIeiuKXe4jHsq1cN3i42LyY99U kvu02ooRZVvFvDHanhozvi12NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK30mdoe i08z+SHbax/JRe1Dfr/1MB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/v+SftQPaCci/fOFzEnARonhwo0utlgQP1Q0SMVearDj0ooxGnH8X cuRMBIil1kDxyQT4Go40ILuSTCKXgUgeXGTRgc9s+jBpkUV/ZDdUgikQdPb0mUVW GjTWb7ss4n20i67YWf9tFQbpUUy2BgXnNmh8s+aRPjTWDBz7j65UpLzvVY3pacBb tLQNNb8TMhtMJ0+MVQl7/cOKeaIHOqhHtIOktbtine/+J5+WQuBAIgrvqXp223LR pZV7HTT4Egp05wkC0rQmgYEZM9Y/owW/8VnYJsdYN9mwUKWcL/46rN0MkjoUUZl4 mcWtlTw3o/od2wfmvEZ3MSdm1Ivv9SdC -----END CERTIFICATE-----Generated at Wed Nov 5 17:57:02 2025 by rpki-client