$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: s7GyixDo1O+K5glSQZGXu92+tEGX4RX0oHzzMYXqr2g= Subject key identifier: 6E:E6:15:05:8A:9D:DF:1F:18:A8:70:19:B5:AD:5B:1B:FF:AF:24:2C Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 57 Signing time: Wed 05 Nov 2025 07:22:02 +0000 Manifest this update: Wed 05 Nov 2025 07:22:01 +0000 Manifest next update: Wed 12 Nov 2025 07:22:01 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: ZXSD515yb1w3ZBX4AaVJYaZf98JNA7WUVJN0pwWnh8o=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Nov 5 07:22:01 2025 GMT Not After : Nov 12 07:22:01 2025 GMT Subject: CN=690afb1a-c016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:44:ce:eb:91:5c:04:87:08:ea:7e:aa:a3: 05:16:7f:6c:5b:ab:f3:ed:8d:56:51:0e:e2:f9:38: b7:27:7f:af:79:8f:74:dc:06:1d:5c:ce:c9:8f:38: 8b:d1:9c:d5:5a:74:d1:38:59:5f:0d:ea:40:5d:b8: a5:a3:b0:9e:d8:a0:61:a1:ef:5b:93:9c:3e:30:f6: 02:29:e1:e0:44:7d:b6:70:87:db:52:65:c8:e6:96: e8:8e:12:2b:88:1e:49:09:fa:54:94:0e:c3:bb:d2: c3:66:63:4f:67:6a:d7:5e:88:25:15:cd:c0:2a:d8: f3:47:14:8b:3e:4a:62:e1:f0:36:c7:db:19:b2:2f: 81:b5:a9:9b:7f:3b:75:b0:a8:43:1b:08:20:46:be: 08:e3:c0:6f:74:e8:07:e9:aa:27:1f:4f:3c:e8:b0: 60:77:7e:9b:9b:60:95:8a:c8:6a:de:82:bb:5d:61: c8:a3:6a:df:ab:d2:f6:2b:95:dd:3b:7b:d8:6e:2d: be:18:d5:6f:f9:34:05:d3:09:42:71:75:69:d9:24: e7:a7:01:c3:c8:e2:98:b5:78:0e:c1:dd:e6:6c:8b: 70:a8:e6:67:d5:31:04:da:c9:b3:b6:97:f3:f7:a2: 70:97:bd:5c:d5:5f:9b:ac:9e:47:a0:7e:45:d4:ec: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E6:15:05:8A:9D:DF:1F:18:A8:70:19:B5:AD:5B:1B:FF:AF:24:2C X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:83:fa:3b:c8:5a:6c:0d:6e:38:ad:1b:e6:fb:79:e5:24: 63:e3:d7:a9:88:c0:5c:d2:b1:80:79:8d:1f:9f:fa:fa:e2:bd: 1a:0d:90:eb:d9:b6:1f:12:4d:81:f2:38:d9:09:c8:90:79:b6: e2:cf:94:0b:bb:e7:97:82:cc:8f:d4:6d:18:13:9f:e8:0c:13: cf:b0:8f:51:43:94:ef:d6:f7:7f:40:72:f1:dc:af:3d:d0:08: 2a:41:89:9f:ca:64:17:40:bb:88:f1:d3:bf:6a:a1:41:de:08: 44:c1:1d:cd:a5:d7:e8:f0:d2:c6:84:39:00:ec:6d:fa:12:0f: 76:c1:7d:85:80:79:a0:fb:25:ba:dc:31:97:85:60:49:86:3b: f2:21:b5:c2:22:ef:33:90:02:be:53:3c:3b:d2:9c:9c:77:ae: 35:4a:fb:3e:3d:1c:e2:07:e6:e2:64:5c:6c:d0:45:27:48:35: 0e:26:ee:8e:1b:9c:25:35:59:af:d0:0e:03:c6:30:1d:44:87: d1:80:80:da:2b:50:0e:68:e0:80:86:19:91:2c:0d:d2:2d:4c: ab:52:55:ea:10:15:fd:e6:e5:2d:cf:70:fc:2e:a4:17:12:d8: e2:8a:32:d1:2b:14:e5:d7:f1:5b:fc:8a:93:20:45:3a:6e:d4: a6:16:62:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTExMDUwNzIyMDFaFw0yNTExMTIwNzIyMDFaMBgxFjAUBgNV BAMTDTY5MGFmYjFhLWMwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeUkTO65FcBIcI6n6qowUWf2xbq/PtjVZRDuL5OLcnf695j3TcBh1czsmPOIvR nNVadNE4WV8N6kBduKWjsJ7YoGGh71uTnD4w9gIp4eBEfbZwh9tSZcjmluiOEiuI HkkJ+lSUDsO70sNmY09natdeiCUVzcAq2PNHFIs+SmLh8DbH2xmyL4G1qZt/O3Ww qEMbCCBGvgjjwG906AfpqicfTzzosGB3fpubYJWKyGregrtdYcijat+r0vYrld07 e9huLb4Y1W/5NAXTCUJxdWnZJOenAcPI4pi1eA7B3eZsi3Co5mfVMQTaybO2l/P3 onCXvVzVX5usnkegfkXU7G87AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbuYVBYqd 3x8YqHAZta1bG/+vJCwwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACvFg/o7yFpsDW44rRvm+3nlJGPj16mIwFzSsYB5jR+f+vrivRoNkOvZ th8STYHyONkJyJB5tuLPlAu755eCzI/UbRgTn+gME8+wj1FDlO/W939AcvHcrz3Q CCpBiZ/KZBdAu4jx079qoUHeCETBHc2l1+jw0saEOQDsbfoSD3bBfYWAeaD7Jbrc MZeFYEmGO/IhtcIi7zOQAr5TPDvSnJx3rjVK+z49HOIH5uJkXGzQRSdINQ4m7o4b nCU1Wa/QDgPGMB1Eh9GAgNorUA5o4ICGGZEsDdItTKtSVeoQFf3m5S3PcPwupBcS 2OKKMtErFOXX8Vv8ipMgRTpu1KYWYqY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:54 2025 by rpki-client