$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: 5kuVLnePEbys7okCExRcLTQbPGciWBWofCOryeEgl54= Subject key identifier: BB:AA:CA:9B:A4:7A:DF:58:C0:0A:79:D2:BF:ED:73:D3:DA:52:40:2C Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 6D Signing time: Wed 05 Nov 2025 07:08:45 +0000 Manifest this update: Wed 05 Nov 2025 07:08:44 +0000 Manifest next update: Wed 12 Nov 2025 07:08:44 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: H9wozPhUKN0qvjKTyJECNyCN43335CLU+abQFMH7Vqo=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: SIbGv61TK6nlTBlpPzTxiHyFUxN8Qwjf/RzPAJKF8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Nov 5 07:08:44 2025 GMT Not After : Nov 12 07:08:44 2025 GMT Subject: CN=690af7fd-d14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d7:e9:a4:7e:cb:95:63:e2:a5:87:fb:61:b4: 8b:12:d8:11:b6:29:a1:41:14:a1:23:f2:7a:cd:29: d3:dc:55:b4:0c:6a:0c:b2:cd:0a:ae:51:a1:59:56: 9f:d6:b8:c6:5a:b2:dc:ae:4b:ba:d4:7f:b0:a1:a8: 4c:79:32:85:5f:43:75:77:e3:e5:5f:e6:6a:a5:ac: 60:fb:c1:14:5c:f2:9a:22:f3:68:b1:21:1a:9b:f2: 9d:3c:2f:8a:d1:3e:0a:80:48:b8:77:29:ee:07:41: 38:f9:20:8c:f6:77:a3:31:97:20:a8:cb:eb:0e:96: f1:3e:f7:0d:34:12:74:9e:b1:70:33:b5:76:8d:1d: 96:9b:54:52:df:2f:13:dd:93:51:e1:2f:56:8d:01: 32:69:72:35:a9:ff:a5:86:96:f0:bf:89:58:55:e1: d2:db:f0:e2:92:54:2a:f4:90:d9:a1:5b:cb:b1:ad: 6c:59:53:de:1b:71:ed:44:0e:b0:97:3d:10:4f:52: e0:2a:07:e5:14:9a:e1:ec:f2:72:90:05:e3:9f:70: 80:81:f1:d7:9b:ea:0b:a5:db:8b:5b:d6:96:5d:11: 5c:2b:5b:05:f9:1c:08:6e:ac:88:66:b1:ee:55:cd: 8e:c1:38:cf:b5:3c:50:51:3d:dc:b0:71:04:ce:6b: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:CA:9B:A4:7A:DF:58:C0:0A:79:D2:BF:ED:73:D3:DA:52:40:2C X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f9:6e:75:a3:99:d3:98:fd:83:92:13:a8:ba:7d:11:03:53: 35:7b:e6:29:bf:bf:ba:4c:12:10:76:a4:3d:a8:05:d3:15:20: 48:1a:34:77:d0:50:f2:b3:51:78:f2:44:8e:b1:84:e7:bc:83: 99:4c:f8:3f:6c:fe:eb:f7:1d:62:23:64:5b:88:bf:6c:bf:8d: f7:d4:46:f8:d5:d8:44:a9:60:23:34:a6:77:28:25:3e:97:70: d9:e3:0b:bf:06:d2:df:6d:b9:d4:1d:f6:ba:ac:3c:3c:7e:de: 48:36:d3:cf:6f:16:dc:f5:3f:d2:b1:76:97:60:87:6d:cd:88: 43:5e:08:d3:53:ea:56:0d:7f:1d:ec:8d:24:a9:05:58:c2:e0: b2:37:fb:21:a7:da:13:15:27:10:37:2a:35:59:5b:df:91:ec: e0:fb:da:b0:6c:0d:ad:93:25:1b:7f:6d:61:08:0c:63:e7:d3: e1:87:95:93:a7:7a:e2:13:71:17:a4:9a:b8:d8:cd:d5:72:91: 04:2a:51:7d:35:74:96:8b:b1:18:fa:12:69:b4:4f:1e:43:18: 74:45:5f:9a:fa:72:63:cc:a8:32:43:ea:77:b9:0d:f7:dc:5e: 8d:b4:d2:65:db:dc:fc:81:e8:4b:dc:01:14:06:b8:48:c6:6b: d0:75:67:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTExMDUwNzA4NDRaFw0yNTExMTIwNzA4NDRaMBgxFjAUBgNV BAMTDTY5MGFmN2ZkLWQxNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy1+mkfsuVY+Klh/thtIsS2BG2KaFBFKEj8nrNKdPcVbQMagyyzQquUaFZVp/W uMZastyuS7rUf7ChqEx5MoVfQ3V34+Vf5mqlrGD7wRRc8poi82ixIRqb8p08L4rR PgqASLh3Ke4HQTj5IIz2d6MxlyCoy+sOlvE+9w00EnSesXAztXaNHZabVFLfLxPd k1HhL1aNATJpcjWp/6WGlvC/iVhV4dLb8OKSVCr0kNmhW8uxrWxZU94bce1EDrCX PRBPUuAqB+UUmuHs8nKQBeOfcICB8deb6gul24tb1pZdEVwrWwX5HAhurIhmse5V zY7BOM+1PFBRPdywcQTOa5pfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu6rKm6R6 31jACnnSv+1z09pSQCwwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHX5bnWjmdOY/YOSE6i6fREDUzV75im/v7pMEhB2pD2oBdMVIEgaNHfQ UPKzUXjyRI6xhOe8g5lM+D9s/uv3HWIjZFuIv2y/jffURvjV2ESpYCM0pncoJT6X cNnjC78G0t9tudQd9rqsPDx+3kg2089vFtz1P9Kxdpdgh23NiENeCNNT6lYNfx3s jSSpBVjC4LI3+yGn2hMVJxA3KjVZW9+R7OD72rBsDa2TJRt/bWEIDGPn0+GHlZOn euITcRekmrjYzdVykQQqUX01dJaLsRj6Emm0Tx5DGHRFX5r6cmPMqDJD6ne5Dffc Xo200mXb3PyB6EvcARQGuEjGa9B1Z0E= -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:39 2025 by rpki-client