$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: 0C/L+lyiSrCe3aKUI1xXqsRsG+xmsdHGfrwDvDoKy1A= Subject key identifier: CF:A3:87:00:A2:E9:9C:34:A2:07:0F:45:2F:69:5C:29:BB:B7:5B:65 Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 02A1 Signing time: Wed 05 Nov 2025 01:38:28 +0000 Manifest this update: Wed 05 Nov 2025 01:38:28 +0000 Manifest next update: Wed 12 Nov 2025 01:38:28 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: 28G20XzLJQf24PM50Tmao2jb1gNeETRNhWxPmDmanMU=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: DtjpfqyjZlakf0xzeut64F+fX426PqMmTFhB5bn8kYo=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: 2lVEchIIIWrHWS+cmiuyzbX+n0oNOZ7725nW2r5ai80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Nov 5 01:38:28 2025 GMT Not After : Nov 12 01:38:28 2025 GMT Subject: CN=690aaa94-020c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:19:50:d1:a7:69:90:86:6d:ed:5b:33:55: b1:41:f7:23:94:3e:db:33:be:b1:e7:43:73:b9:50: 21:8a:88:47:f7:3a:27:e2:89:bb:94:91:da:66:da: da:80:5d:9f:36:c4:89:e8:ec:db:f9:18:c9:1d:52: b8:7a:67:ec:c7:7a:ed:36:ee:e3:47:e1:14:6c:e4: 57:b8:c6:05:50:7c:76:04:cd:1d:00:08:e9:a1:48: 7b:af:99:28:f7:b3:99:bd:36:bc:6d:30:83:c4:7f: 22:43:cc:8c:1f:f8:52:f9:83:37:7b:be:e2:a2:ed: e0:60:93:d3:cf:81:83:fe:c6:ac:c8:61:c9:16:5f: 80:5a:72:b8:ed:b5:bb:cf:a0:d6:e1:2a:bd:62:83: 49:a4:a9:78:73:03:7a:27:68:80:53:d7:ae:d8:b1: af:c7:dd:4e:09:06:0b:e5:1d:b5:dd:77:82:09:f2: 6b:92:c9:4e:68:16:fd:f4:bc:00:7a:c7:20:91:73: 49:ba:3d:7b:cf:9c:d8:5d:62:60:b1:20:32:71:88: de:33:e8:14:17:83:d7:e2:59:c8:43:8c:3f:79:80: e4:46:1a:ea:3a:76:c4:3f:b8:c3:bf:25:dd:6f:bd: d4:52:bb:4e:c9:22:a9:41:b8:dc:f4:1f:98:ab:45: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A3:87:00:A2:E9:9C:34:A2:07:0F:45:2F:69:5C:29:BB:B7:5B:65 X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a0:57:68:e0:a3:02:11:29:95:88:c8:9b:bf:91:04:59:b6: 56:dd:01:ef:98:80:12:07:4e:40:26:72:6a:9f:ba:25:b6:25: d4:b8:53:e3:1d:5b:53:a9:00:46:79:07:87:18:cf:b4:35:2c: 16:ee:c0:49:f1:a1:03:ab:b1:78:8b:8c:db:09:25:7e:c2:c0: e3:19:cc:cd:b1:eb:7e:14:55:55:4a:80:f2:3c:c6:cb:27:62: e7:b7:62:f7:0a:32:f5:cc:5c:8c:97:a7:96:76:44:38:dc:48: 88:f1:81:8d:f5:97:7c:c2:be:70:8d:2a:25:42:26:7f:6b:06: 63:ef:72:7d:c6:ff:ba:61:23:21:df:28:24:0e:67:fe:d7:97: 7a:bc:5b:29:f0:26:0b:0c:a9:3f:2d:8b:ca:de:7e:6b:d7:1f: 9f:68:4a:9c:c3:f0:05:55:2c:52:48:74:f0:4c:93:e6:a7:a2: 55:77:b7:82:d8:c4:87:64:ba:ce:db:12:0b:08:bb:9b:4d:a4: 99:da:11:51:25:51:5c:31:08:f5:37:83:02:7d:0a:c5:39:ac: 64:73:ba:81:31:87:18:2c:54:da:00:04:be:50:af:07:75:24: 40:46:03:d6:ca:68:56:0c:d2:5c:ab:88:ea:0d:d0:f2:6f:30: 09:cb:6e:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUxMTA1MDEzODI4WhcNMjUxMTEyMDEzODI4WjAYMRYwFAYD VQQDEw02OTBhYWE5NC0wMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt8ZUNGnaZCGbe1bM1WxQfcjlD7bM76x50NzuVAhiohH9zon4om7lJHaZtra gF2fNsSJ6Ozb+RjJHVK4emfsx3rtNu7jR+EUbORXuMYFUHx2BM0dAAjpoUh7r5ko 97OZvTa8bTCDxH8iQ8yMH/hS+YM3e77iou3gYJPTz4GD/sasyGHJFl+AWnK47bW7 z6DW4Sq9YoNJpKl4cwN6J2iAU9eu2LGvx91OCQYL5R213XeCCfJrkslOaBb99LwA escgkXNJuj17z5zYXWJgsSAycYjeM+gUF4PX4lnIQ4w/eYDkRhrqOnbEP7jDvyXd b73UUrtOySKpQbjc9B+Yq0XTUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+jhwCi 6Zw0ogcPRS9pXCm7t1tlMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEoFdo4KMCESmViMibv5EEWbZW3QHvmIASB05AJnJqn7oltiXUuFPj HVtTqQBGeQeHGM+0NSwW7sBJ8aEDq7F4i4zbCSV+wsDjGczNset+FFVVSoDyPMbL J2Lnt2L3CjL1zFyMl6eWdkQ43EiI8YGN9Zd8wr5wjSolQiZ/awZj73J9xv+6YSMh 3ygkDmf+15d6vFsp8CYLDKk/LYvK3n5r1x+faEqcw/AFVSxSSHTwTJPmp6JVd7eC 2MSHZLrO2xILCLubTaSZ2hFRJVFcMQj1N4MCfQrFOaxkc7qBMYcYLFTaAAS+UK8H dSRARgPWymhWDNJcq4jqDdDybzAJy269 -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:23 2025 by rpki-client