$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json) Hash identifier: kqpwKaC56NGmyde3PvEtanlV8PWTGH2h5cN7Q3AIms8= Subject key identifier: 98:CB:50:6F:89:F8:FE:5C:AB:0E:BF:9F:CF:EA:27:51:CE:71:76:F4 Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft Manifest number: 02B6 Signing time: Wed 05 Nov 2025 01:33:28 +0000 Manifest this update: Wed 05 Nov 2025 01:33:27 +0000 Manifest next update: Wed 12 Nov 2025 01:33:27 +0000 Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: 40SmoUaf1loVYCscFpUagvYGe8UkoafB7dUnQM/pZu0=) 2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: YZYraaTW4N+SBvMTqXTfavIL9Ycht4bd0iE5EB0Igv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Validity Not Before: Nov 5 01:33:27 2025 GMT Not After : Nov 12 01:33:27 2025 GMT Subject: CN=690aa968-433d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:d2:cb:36:d9:09:a6:73:5d:20:8f:57:92: f6:44:3b:8c:cb:89:73:eb:ed:20:aa:cd:18:5b:1b: 53:eb:f9:88:26:49:9e:ca:24:a6:6e:f2:b1:a6:59: 19:08:c8:6d:4e:aa:f8:7c:a5:16:13:88:47:bd:be: 1f:00:44:73:00:a7:e5:61:07:c5:1e:e8:b0:1c:ad: 16:99:b6:8e:61:41:37:9d:bb:be:56:bf:5d:ed:a9: c5:ae:46:a2:38:8d:05:c7:33:ac:93:c9:3e:10:3d: 8f:ba:3f:08:ec:26:49:4c:12:8f:ac:65:77:ae:39: 05:aa:7d:15:ef:1b:82:3f:8b:f8:3a:f9:1c:58:0f: 9a:8b:46:dd:c8:b0:15:4a:45:4a:8c:ed:e3:d0:56: 18:13:63:c9:fe:64:d9:40:ee:3e:c7:92:e4:f4:6c: 11:6c:3b:31:d0:a1:f8:20:c3:b4:a2:18:e8:45:19: 1b:d8:e9:58:c6:89:87:de:1e:37:6e:ca:d7:b3:20: 70:d0:03:ac:e8:f4:dc:ba:30:33:ab:23:97:b9:bc: 3f:df:4c:a8:20:40:b1:66:70:cd:ea:2c:c6:56:11: e3:9a:dc:28:d2:df:cb:a0:44:f4:c4:24:b1:ac:ae: c0:3d:eb:47:70:7a:ca:d9:57:b3:14:38:60:01:07: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CB:50:6F:89:F8:FE:5C:AB:0E:BF:9F:CF:EA:27:51:CE:71:76:F4 X509v3 Authority Key Identifier: keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:69:0d:29:70:44:11:2f:4e:b4:0c:f9:c4:39:c0:6a:76:c4: ab:b6:d3:c2:0e:f6:97:34:a1:f1:63:4e:88:a9:12:bc:09:44: 7b:66:44:7a:ec:bb:39:2d:b4:4d:f2:71:49:21:3e:3f:98:8d: b1:6b:d0:c6:b1:9d:7a:82:a9:de:ab:ff:e1:69:88:18:ce:75: c8:59:5c:c8:dc:75:7f:46:e6:38:e2:3c:42:66:13:81:cd:72: 89:9a:d8:76:0d:85:33:73:5c:3f:58:e0:c2:d7:da:16:fa:27: e5:96:08:78:5d:41:ad:62:da:95:e9:ec:6a:81:2e:0f:2c:1d: 7c:37:e3:9e:b3:3e:9e:7f:bb:3a:f8:d5:b3:42:3b:57:64:68: 5e:10:28:9b:a5:52:9e:f0:a6:0b:31:1f:39:85:c2:00:61:f6: 67:df:7d:e1:2a:1d:ce:f1:6f:2e:09:39:f3:ed:23:e4:04:c7: c0:36:b7:3c:6c:8e:ff:1c:84:cb:1c:25:ec:d6:38:c3:ae:96: f5:1f:46:87:1e:d1:3c:ae:85:bb:bf:99:ab:43:75:9e:7f:9a: 1c:09:a0:fb:4d:f8:9d:44:98:92:ff:c0:1c:68:87:5a:ba:70: 4d:c8:c4:9b:0d:d0:ef:44:28:35:c0:40:dc:c1:8a:4f:f3:ad: 90:f6:17:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZGNkYxMTAvBgNVBAUTKEZCMTFBMkQ4MzY4QzE1MDIxQTVCRjMxMkY1MUQ0NENF NThGRDQ0NTEwHhcNMjUxMTA1MDEzMzI3WhcNMjUxMTEyMDEzMzI3WjAYMRYwFAYD VQQDEw02OTBhYTk2OC00MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxurSyzbZCaZzXSCPV5L2RDuMy4lz6+0gqs0YWxtT6/mIJkmeyiSmbvKxplkZ CMhtTqr4fKUWE4hHvb4fAERzAKflYQfFHuiwHK0WmbaOYUE3nbu+Vr9d7anFrkai OI0FxzOsk8k+ED2Puj8I7CZJTBKPrGV3rjkFqn0V7xuCP4v4OvkcWA+ai0bdyLAV SkVKjO3j0FYYE2PJ/mTZQO4+x5Lk9GwRbDsx0KH4IMO0ohjoRRkb2OlYxomH3h43 bsrXsyBw0AOs6PTcujAzqyOXubw/30yoIECxZnDN6izGVhHjmtwo0t/LoET0xCSx rK7APetHcHrK2VezFDhgAQdzCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjLUG+J +P5cqw6/n8/qJ1HOcXb0MB8GA1UdIwQYMBaAFPsRotg2jBUCGlvzEvUdRM5Y/URR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkY2Ri8xMkUyNTE3QzE0 NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZRSWFXX01TOVIxRXpsajlS RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14R2kyRGFNRlFJYVdfTVM5UjFFemxqOVJGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkY2Ri8xMkUyNTE3QzE0NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZR SWFXX01TOVIxRXpsajlSRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmaQ0pcEQRL060DPnEOcBqdsSrttPCDvaXNKHxY06IqRK8CUR7ZkR6 7Ls5LbRN8nFJIT4/mI2xa9DGsZ16gqneq//haYgYznXIWVzI3HV/RuY44jxCZhOB zXKJmth2DYUzc1w/WODC19oW+ifllgh4XUGtYtqV6exqgS4PLB18N+Oesz6ef7s6 +NWzQjtXZGheECibpVKe8KYLMR85hcIAYfZn333hKh3O8W8uCTnz7SPkBMfANrc8 bI7/HITLHCXs1jjDrpb1H0aHHtE8roW7v5mrQ3Wef5ocCaD7TfidRJiS/8AcaIda unBNyMSbDdDvRCg1wEDcwYpP862Q9heG -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:05 2025 by rpki-client