$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft File: U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json) Hash identifier: c7l/9FEotCvSgaOM5DEpxZSQJU51QE1lruB2G8QIrK8= Subject key identifier: 1E:78:62:1B:87:7D:86:EA:B3:F0:6B:3D:FB:A4:8D:4F:48:A6:78:F7 Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF Certificate issuer: /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft Manifest number: 04F1 Signing time: Tue 04 Nov 2025 23:48:11 +0000 Manifest this update: Tue 04 Nov 2025 23:48:11 +0000 Manifest next update: Tue 11 Nov 2025 23:48:11 +0000 Files and hashes: 1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: Cz4ED2cokY/gpxT/S60Cq34sfKaqDzwg5bvK8I5dflA=) 2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: zuaM96z3jhp+fAEf2SKv65O5x2n5mX1/wYZc1QfKJIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF Validity Not Before: Nov 4 23:48:11 2025 GMT Not After : Nov 11 23:48:11 2025 GMT Subject: CN=690a90bb-2b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:e5:db:ac:b5:35:cc:86:a7:a6:1e:c4:cb: 2e:0f:05:7d:0e:1f:55:5a:51:ce:d2:af:f3:67:ec: 58:cd:2d:20:fc:40:c4:ab:99:11:f7:f2:a0:1e:ce: 44:07:d2:a7:cf:c8:21:fb:c2:69:00:cd:19:b9:64: d9:a9:ce:74:5a:f6:7c:07:db:ea:64:46:e7:95:b6: 16:95:b1:95:e1:a5:45:94:01:4c:2a:64:e4:25:31: 8a:65:19:13:88:96:04:87:c7:34:f4:f3:71:c9:72: 33:df:e1:6e:4b:e3:96:6e:57:1e:d5:66:98:b3:f1: 10:4f:ad:e6:54:41:7d:d8:18:97:9a:a2:52:a2:e8: 75:18:37:d3:b9:3d:25:8e:b8:79:d0:07:19:86:fb: 72:46:7c:a0:e8:37:40:aa:b8:dc:bd:e9:10:af:3c: 84:cd:59:17:14:5b:94:39:74:5f:29:7a:b0:23:dc: ea:0f:14:9c:4f:30:8f:5d:04:7d:55:1f:b2:b1:7a: 4a:60:8b:86:26:fe:0a:a5:b1:df:8e:f9:0d:bc:7f: 16:e6:98:23:1d:de:40:6a:94:8d:30:d5:12:5e:79: 1d:0b:d6:a6:54:ac:88:98:eb:dc:18:de:8f:d9:3b: 52:8c:1a:64:8d:00:c1:ae:46:f5:ab:b7:a5:c4:79: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:78:62:1B:87:7D:86:EA:B3:F0:6B:3D:FB:A4:8D:4F:48:A6:78:F7 X509v3 Authority Key Identifier: keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e9:a1:88:d7:05:fe:9e:0c:da:79:c5:38:c0:c1:78:df:35: 6f:38:22:d8:14:95:1e:f4:64:dd:31:aa:14:d7:6b:bc:5a:32: bd:f9:41:61:b9:1b:39:08:c2:ec:83:c3:ce:d2:dc:07:fe:0d: bc:b0:51:4e:61:47:5e:20:11:7d:57:11:91:3d:c3:86:42:7c: d3:ca:c7:27:05:9b:49:fb:87:6c:50:e4:de:fb:54:81:6f:b3: 09:50:54:38:d2:f1:82:ca:0d:73:5c:66:45:c2:45:b2:13:d1: d2:96:8b:d0:89:ad:1d:5b:5f:55:d4:ff:f2:2a:2d:87:ba:e2: 6e:67:56:0e:1f:3c:4f:2a:6d:13:6c:d1:a9:1e:34:e2:ef:a0: 8d:54:08:12:c3:69:f8:64:49:08:3d:5b:71:6c:e0:ea:8f:c3: 5b:1c:e3:dd:6a:55:1c:06:d3:4d:16:72:d1:70:58:f3:f2:98: 56:1a:29:96:8b:29:e6:88:17:32:c3:33:47:7d:22:8d:46:81: d9:43:ef:44:c5:9c:61:ee:e1:97:3c:d6:e1:6c:d7:68:ef:b7: 8a:41:82:3a:ca:5f:f6:7a:ca:2f:8e:8c:a3:c3:e4:f4:70:7b: 68:f0:66:1e:9e:5f:b2:da:0d:2a:3b:36:84:fe:9c:bf:8a:cc: 15:0c:e4:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MzcxMTAvBgNVBAUTKDUzNjhCOEM4RDY5NjNFQUQ4Mzk5MDVBNDg2RjUzQzQ0 QjA0MUE1RUYwHhcNMjUxMTA0MjM0ODExWhcNMjUxMTExMjM0ODExWjAYMRYwFAYD VQQDEw02OTBhOTBiYi0yYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5/l26y1NcyGp6YexMsuDwV9Dh9VWlHO0q/zZ+xYzS0g/EDEq5kR9/KgHs5E B9Knz8gh+8JpAM0ZuWTZqc50WvZ8B9vqZEbnlbYWlbGV4aVFlAFMKmTkJTGKZRkT iJYEh8c09PNxyXIz3+FuS+OWblce1WaYs/EQT63mVEF92BiXmqJSouh1GDfTuT0l jrh50AcZhvtyRnyg6DdAqrjcvekQrzyEzVkXFFuUOXRfKXqwI9zqDxScTzCPXQR9 VR+ysXpKYIuGJv4KpbHfjvkNvH8W5pgjHd5AapSNMNUSXnkdC9amVKyImOvcGN6P 2TtSjBpkjQDBrkb1q7elxHkanQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB54YhuH fYbqs/BrPfukjU9Ipnj3MB8GA1UdIwQYMBaAFFNouMjWlj6tg5kFpIb1PESwQaXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgzNy9FM0Y4N0NCMjM2 RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1BxMkRtUVdraHZVOFJMQkJw ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UyaTR5TmFXUHEyRG1RV2todlU4UkxCQnBlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgzNy9FM0Y4N0NCMjM2RTMxMUVDQkM4Q0MyNTBDNEY5QUUwMi9VMmk0eU5hV1Bx MkRtUVdraHZVOFJMQkJwZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH6aGI1wX+ngzaecU4wMF43zVvOCLYFJUe9GTdMaoU12u8WjK9+UFh uRs5CMLsg8PO0twH/g28sFFOYUdeIBF9VxGRPcOGQnzTyscnBZtJ+4dsUOTe+1SB b7MJUFQ40vGCyg1zXGZFwkWyE9HSlovQia0dW19V1P/yKi2HuuJuZ1YOHzxPKm0T bNGpHjTi76CNVAgSw2n4ZEkIPVtxbODqj8NbHOPdalUcBtNNFnLRcFjz8phWGimW iynmiBcywzNHfSKNRoHZQ+9ExZxh7uGXPNbhbNdo77eKQYI6yl/2esovjoyjw+T0 cHto8GYenl+y2g0qOzaE/py/iswVDORy -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:51 2025 by rpki-client