$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: G2zd81QtgA3+oZuwl8PeSOQUaLIvNlhUp+0yGMKs+FY= Subject key identifier: 16:94:47:AD:82:64:DF:47:D4:6F:A4:96:A5:71:FB:C9:90:DA:D4:54 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: C2 Signing time: Wed 05 Nov 2025 06:07:04 +0000 Manifest this update: Wed 05 Nov 2025 06:07:03 +0000 Manifest next update: Wed 12 Nov 2025 06:07:03 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: yaL5rqlRneQGJcZrw380pWI5tlcfLxIGDeWs667AtX4=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Nov 5 06:07:03 2025 GMT Not After : Nov 12 06:07:03 2025 GMT Subject: CN=690ae988-a6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:48:cb:82:5c:23:67:59:30:6d:f2:ff:92: d1:9b:43:a3:24:72:1a:9d:7d:20:f0:09:c0:27:08: 5a:e7:54:fe:fc:6a:9b:f4:1f:47:5e:f4:01:92:89: 70:2d:2f:2e:43:bf:5c:6d:27:15:90:03:b7:d8:0a: de:c3:1f:29:eb:d0:cf:d4:26:e3:f6:0f:20:33:12: ce:b0:dd:68:09:c9:7b:65:58:0d:3d:8e:b0:cb:9d: 7e:d9:9e:c3:98:69:bf:d0:0f:a2:27:45:a2:56:a9: 64:12:d3:66:95:83:d0:b9:5b:5a:f9:37:ab:a2:e2: ee:de:e1:d3:8a:14:d1:bc:fd:2a:4d:17:4a:af:0e: 31:5c:d4:59:12:41:19:92:cb:d7:b6:86:bc:bd:2a: 43:1e:53:b6:fb:69:a8:ed:9e:72:2d:63:8a:47:9a: 56:98:1d:bc:39:5a:e2:6b:d1:90:75:22:45:48:e1: a1:1a:44:e4:a4:98:59:6d:c6:14:fa:4d:fe:3b:ec: 91:97:ca:1c:83:5f:2c:14:29:34:31:d1:00:8b:28: e4:b7:52:c0:d5:e6:c0:2b:54:fc:79:40:fa:0f:7c: 44:5a:b5:88:9d:77:59:93:a9:e1:7b:09:72:94:c7: e8:b6:25:fa:db:b3:5f:2a:90:72:dd:f5:3c:e5:ce: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:94:47:AD:82:64:DF:47:D4:6F:A4:96:A5:71:FB:C9:90:DA:D4:54 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:35:e2:c7:ba:26:15:56:1a:81:0d:6c:f8:df:9e:22:0a:e1: 67:63:69:29:17:05:7f:57:33:20:ca:b8:4c:b5:52:a3:3f:36: 2c:41:2a:4b:8d:0c:33:97:94:f9:53:69:fd:1a:62:09:36:a5: 4b:de:6b:93:cb:74:d5:c7:74:39:26:8d:b6:d4:94:58:51:7f: f7:33:bd:3c:7d:09:02:eb:15:8d:9e:bd:6f:52:1b:f2:e5:01: c2:f7:1e:77:7b:1e:29:98:d3:01:12:c0:04:52:1d:e4:de:dc: 2d:a1:a4:bd:99:a4:44:13:0f:13:fe:60:b6:88:12:74:a8:db: e2:9b:d1:64:71:d6:64:8b:02:5d:34:32:af:5e:fe:f2:b2:f0: c6:3c:18:dd:82:b1:66:4e:77:92:c5:bc:21:ae:cc:ae:9e:8a: fd:cf:6a:e8:62:d7:39:f9:bd:0f:ec:72:e4:95:b9:39:b0:ed: 99:c0:30:f3:cf:39:a3:21:e4:a7:72:fa:b1:8d:5f:95:cc:f8: a8:cb:e0:f3:13:99:99:6c:68:4b:f7:d3:80:2d:48:b3:d2:61: 4a:3b:ec:f3:d3:55:c7:65:2a:89:27:d1:05:2c:c1:fe:65:a8: 94:82:00:ee:3b:66:01:6a:d5:51:78:3c:dc:e8:34:e4:01:43: 26:7a:44:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUxMTA1MDYwNzAzWhcNMjUxMTEyMDYwNzAzWjAYMRYwFAYD VQQDEw02OTBhZTk4OC1hNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuspIy4JcI2dZMG3y/5LRm0OjJHIanX0g8AnAJwha51T+/Gqb9B9HXvQBkolw LS8uQ79cbScVkAO32Arewx8p69DP1Cbj9g8gMxLOsN1oCcl7ZVgNPY6wy51+2Z7D mGm/0A+iJ0WiVqlkEtNmlYPQuVta+TerouLu3uHTihTRvP0qTRdKrw4xXNRZEkEZ ksvXtoa8vSpDHlO2+2mo7Z5yLWOKR5pWmB28OVria9GQdSJFSOGhGkTkpJhZbcYU +k3+O+yRl8ocg18sFCk0MdEAiyjkt1LA1ebAK1T8eUD6D3xEWrWInXdZk6nhewly lMfotiX627NfKpBy3fU85c5IFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaUR62C ZN9H1G+klqVx+8mQ2tRUMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATNeLHuiYVVhqBDWz4354iCuFnY2kpFwV/VzMgyrhMtVKjPzYsQSpL jQwzl5T5U2n9GmIJNqVL3muTy3TVx3Q5Jo221JRYUX/3M708fQkC6xWNnr1vUhvy 5QHC9x53ex4pmNMBEsAEUh3k3twtoaS9maREEw8T/mC2iBJ0qNvim9FkcdZkiwJd NDKvXv7ysvDGPBjdgrFmTneSxbwhrsyunor9z2roYtc5+b0P7HLklbk5sO2ZwDDz zzmjIeSncvqxjV+VzPioy+DzE5mZbGhL99OALUiz0mFKO+zz01XHZSqJJ9EFLMH+ ZaiUggDuO2YBatVReDzc6DTkAUMmekSt -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:59 2025 by rpki-client