$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: 1Q/5az3ym89PhC5GAtCM5vo7Sp6ruSN46FSQGEKxiZ4= Subject key identifier: 26:F3:D5:49:ED:05:FB:B6:31:78:1B:9B:20:6F:32:62:F9:AF:F0:07 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: CB Signing time: Wed 05 Nov 2025 05:57:12 +0000 Manifest this update: Wed 05 Nov 2025 05:57:12 +0000 Manifest next update: Wed 12 Nov 2025 05:57:12 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: Xpq3vSx84KLdGWHYvwsxZAUMZiByasJdF9czdDRkfko=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Nov 5 05:57:12 2025 GMT Not After : Nov 12 05:57:12 2025 GMT Subject: CN=690ae738-d10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:cd:34:cf:54:9f:44:07:66:9f:b8:1c:d2: d0:e5:e5:1f:91:fe:88:66:d4:53:49:94:c4:1b:00: 37:09:75:5e:5f:2a:fc:f9:bf:77:67:8e:7d:63:db: f4:b1:6f:bc:24:c1:60:b5:cf:1a:ba:8b:b0:d0:a6: ab:28:d4:7b:91:a1:82:a3:d8:2b:2e:60:e2:e7:b7: c3:09:22:aa:18:7d:df:30:7e:73:52:aa:27:6d:3d: c5:ed:9d:f1:f9:4c:2e:5b:8b:f8:5e:73:d3:35:7e: 4b:f4:e2:6b:16:a1:66:32:17:e9:56:a5:1d:aa:09: d5:66:ef:c5:b7:dd:f8:2c:90:2d:0b:f5:3d:54:f4: bc:b4:77:73:e7:62:ac:7e:bc:37:19:b8:46:41:48: eb:3a:88:d6:fe:d4:4e:fe:80:46:ec:e3:f4:e1:e1: ca:1b:ba:69:74:36:40:51:98:4a:03:be:21:ed:77: 62:b2:b8:8b:cd:e9:bf:1d:04:56:07:13:c8:f8:f4: 68:1e:61:ef:64:69:cc:3f:b2:5e:22:30:9a:7f:6d: ef:cb:4e:da:68:83:b8:69:96:fd:50:80:2e:e1:aa: c8:36:25:8f:5c:53:e0:47:cd:89:56:89:09:7c:92: 8e:81:0c:c9:53:05:53:b7:09:0c:7f:94:84:ac:fd: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F3:D5:49:ED:05:FB:B6:31:78:1B:9B:20:6F:32:62:F9:AF:F0:07 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:10:10:7e:9f:ff:47:90:8e:39:dc:96:9a:d1:cf:bd:c9:0b: 8d:f0:f1:21:0a:bc:59:2a:c8:06:4f:2a:d2:d6:2a:ca:9d:6c: 8a:24:2a:c4:36:19:cf:36:e6:ad:ae:31:21:49:4d:64:57:cb: d2:c2:9d:1a:e8:b5:a1:b3:40:b9:2a:fe:db:4c:88:77:04:7e: 60:83:03:e0:2d:ae:87:06:f5:5c:6c:2d:86:7f:ba:a4:f2:95: ba:c6:11:ad:78:47:2a:ef:e0:2b:9e:be:33:9f:0f:d7:39:db: 73:92:c2:aa:7e:ff:18:3f:38:57:33:fc:0a:d6:d2:c4:9c:17: ac:89:65:de:cb:62:4c:6f:b7:37:29:58:5f:dd:11:6c:44:93: 03:a0:cf:d0:18:7f:f2:ed:e8:6d:3f:d4:c9:18:4a:db:ab:d2: 0e:30:e9:a8:7c:f3:24:75:5e:47:56:32:3c:04:97:55:2f:8a: e6:29:c5:e5:27:41:4f:4d:5a:68:9b:f6:b8:6f:96:ef:79:fe: 07:71:27:23:2a:35:96:ff:37:03:a7:51:8c:ec:8d:f2:f9:d1: 24:93:26:39:f4:a0:59:f7:80:22:f8:a0:c3:72:31:5a:d7:3b: e3:9f:fa:d3:dc:0c:7b:b2:b1:b6:da:a3:a5:73:fe:9b:eb:8c: f2:56:ae:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUxMTA1MDU1NzEyWhcNMjUxMTEyMDU1NzEyWjAYMRYwFAYD VQQDEw02OTBhZTczOC1kMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRvNNM9Un0QHZp+4HNLQ5eUfkf6IZtRTSZTEGwA3CXVeXyr8+b93Z459Y9v0 sW+8JMFgtc8auouw0KarKNR7kaGCo9grLmDi57fDCSKqGH3fMH5zUqonbT3F7Z3x +UwuW4v4XnPTNX5L9OJrFqFmMhfpVqUdqgnVZu/Ft934LJAtC/U9VPS8tHdz52Ks frw3GbhGQUjrOojW/tRO/oBG7OP04eHKG7ppdDZAUZhKA74h7XdisriLzem/HQRW BxPI+PRoHmHvZGnMP7JeIjCaf23vy07aaIO4aZb9UIAu4arINiWPXFPgR82JVokJ fJKOgQzJUwVTtwkMf5SErP3i+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbz1Unt Bfu2MXgbmyBvMmL5r/AHMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBEBB+n/9HkI453Jaa0c+9yQuN8PEhCrxZKsgGTyrS1irKnWyKJCrE NhnPNuatrjEhSU1kV8vSwp0a6LWhs0C5Kv7bTIh3BH5ggwPgLa6HBvVcbC2Gf7qk 8pW6xhGteEcq7+Arnr4znw/XOdtzksKqfv8YPzhXM/wK1tLEnBesiWXey2JMb7c3 KVhf3RFsRJMDoM/QGH/y7ehtP9TJGErbq9IOMOmofPMkdV5HVjI8BJdVL4rmKcXl J0FPTVpom/a4b5bvef4HcScjKjWW/zcDp1GM7I3y+dEkkyY59KBZ94Ai+KDDcjFa 1zvjn/rT3Ax7srG22qOlc/6b64zyVq5q -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:46 2025 by rpki-client