$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: 57aE4eRD1niW15SqTcY6AMuhataTUmBYwTFXh9NwVgw= Subject key identifier: F1:D2:97:36:60:AA:9C:2C:CE:A2:6E:DA:16:B8:08:4A:56:56:13:C3 Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: F1 Signing time: Wed 05 Nov 2025 05:27:34 +0000 Manifest this update: Wed 05 Nov 2025 05:27:34 +0000 Manifest next update: Wed 12 Nov 2025 05:27:34 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: 3os0CWvwqE5EEzKWIzH9rxXLOMv+0A2/v6Uds1yghtk=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: Nov 5 05:27:34 2025 GMT Not After : Nov 12 05:27:34 2025 GMT Subject: CN=690ae046-a0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:08:59:32:f4:08:7a:b7:e7:4c:e4:dd:95: 0e:56:72:2b:25:85:4e:1b:bb:57:30:de:8f:ad:06: e1:47:30:20:d0:8b:e5:5f:fd:e3:74:f5:1a:b5:82: 9b:b6:4d:d1:80:66:3a:84:d8:fe:79:17:66:e4:23: 8a:be:dd:3c:69:06:06:68:69:56:99:a3:de:1f:a7: 84:78:01:23:36:9b:13:6f:df:86:db:9e:be:6b:bc: b0:fb:7b:9d:5a:8d:d5:96:ca:6b:2a:20:68:6b:ca: 79:d9:19:b3:05:91:75:02:1f:5f:42:0c:32:b4:29: 84:f2:45:26:d8:6d:5a:09:28:26:07:74:b8:c0:53: f4:c0:c0:d5:7f:5a:f2:13:b2:31:7c:62:3e:7b:86: 8b:d9:7b:af:70:18:ae:0c:b7:39:57:a9:51:3a:99: 3e:b0:86:a8:fb:bc:22:cf:19:cf:da:64:fc:2f:48: 35:7a:87:88:d9:b1:90:ad:3c:8f:12:b6:4f:29:c4: 7f:12:70:dd:9b:57:b4:be:a3:57:f8:79:cf:71:4a: de:d9:e7:e7:7a:72:6d:f5:01:99:42:38:d9:de:fb: 2b:da:82:38:48:33:3c:b7:87:41:64:d2:c3:63:c5: b8:50:aa:00:89:21:78:5e:c4:73:47:86:a5:b5:bc: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:97:36:60:AA:9C:2C:CE:A2:6E:DA:16:B8:08:4A:56:56:13:C3 X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a1:b9:8b:87:4b:22:32:d8:30:17:83:92:d5:d0:d4:d7:6d: 9c:b8:60:01:70:b6:15:a0:19:25:d5:51:7a:15:4a:cf:22:79: 41:6c:63:e1:21:b2:1f:9c:ce:82:e1:ef:f1:ad:85:3a:30:7a: ac:82:13:d6:e3:ef:21:18:84:3a:31:33:b6:80:37:85:75:f9: 17:7f:c8:ff:53:8b:37:2d:a1:f6:d3:ab:81:42:b9:e8:d2:d5: ef:75:05:24:13:25:30:fd:67:81:68:10:40:2e:bd:e9:49:b8: 75:f4:55:dc:13:50:1b:58:0f:48:80:5a:dd:68:ad:03:95:a3: 6c:ec:b0:a3:fc:3b:46:99:7e:41:f1:84:9a:71:14:c7:ec:14: 6b:ce:c1:a3:09:dd:c1:cd:1c:5c:5c:43:1c:56:31:4b:c4:93: 13:3d:84:e4:53:c0:41:d7:b0:09:2e:f3:ac:69:ba:ff:14:74: 39:76:94:e6:84:1d:0f:4a:ab:b2:85:03:84:eb:6c:77:6f:f1: 6d:27:9b:6f:a4:6d:fc:56:1f:e6:12:00:8b:0b:96:89:a6:f0: 00:95:3d:29:40:96:66:93:10:aa:ec:ad:43:18:ff:d5:cf:46: 2e:5c:6a:3b:a3:af:0a:aa:fa:ff:d0:ea:4c:da:b7:ff:63:29: 76:45:05:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUxMTA1MDUyNzM0WhcNMjUxMTEyMDUyNzM0WjAYMRYwFAYD VQQDEw02OTBhZTA0Ni1hMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY4IWTL0CHq350zk3ZUOVnIrJYVOG7tXMN6PrQbhRzAg0IvlX/3jdPUatYKb tk3RgGY6hNj+eRdm5COKvt08aQYGaGlWmaPeH6eEeAEjNpsTb9+G256+a7yw+3ud Wo3VlsprKiBoa8p52RmzBZF1Ah9fQgwytCmE8kUm2G1aCSgmB3S4wFP0wMDVf1ry E7IxfGI+e4aL2XuvcBiuDLc5V6lROpk+sIao+7wizxnP2mT8L0g1eoeI2bGQrTyP ErZPKcR/EnDdm1e0vqNX+HnPcUre2efnenJt9QGZQjjZ3vsr2oI4SDM8t4dBZNLD Y8W4UKoAiSF4XsRzR4altbwLAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHSlzZg qpwszqJu2ha4CEpWVhPDMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClobmLh0siMtgwF4OS1dDU122cuGABcLYVoBkl1VF6FUrPInlBbGPh IbIfnM6C4e/xrYU6MHqsghPW4+8hGIQ6MTO2gDeFdfkXf8j/U4s3LaH206uBQrno 0tXvdQUkEyUw/WeBaBBALr3pSbh19FXcE1AbWA9IgFrdaK0DlaNs7LCj/DtGmX5B 8YSacRTH7BRrzsGjCd3BzRxcXEMcVjFLxJMTPYTkU8BB17AJLvOsabr/FHQ5dpTm hB0PSquyhQOE62x3b/FtJ5tvpG38Vh/mEgCLC5aJpvAAlT0pQJZmkxCq7K1DGP/V z0YuXGo7o68Kqvr/0OpM2rf/Yyl2RQXd -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:23 2025 by rpki-client