$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: SeYTAa/sGm85NCItKNCUbeicVZfxLqNfZ7djQIuWLbE= Subject key identifier: CC:20:A1:A7:0A:A2:22:B6:1C:95:5E:BC:D0:0D:86:F0:25:4B:26:FD Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0B88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0B82 Signing time: Tue 04 Nov 2025 19:08:08 +0000 Manifest this update: Tue 04 Nov 2025 19:08:07 +0000 Manifest next update: Tue 11 Nov 2025 19:08:07 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: jML3ikjkTHC9Uf/berd4cv09w/1YfMLtftexZBr7mTM=) 2: B6EF8F5E3A9011EA957A6A34C4F9AE02.roa (hash: MMg6miblGYwiWs8actEKJcMi2SqNBUoJuKwgQQDzl38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: Nov 4 19:08:07 2025 GMT Not After : Nov 11 19:08:07 2025 GMT Subject: CN=690a4f17-f1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:b2:83:ff:47:48:9d:05:e0:20:43:57:f0: b1:05:5e:24:98:4b:49:8d:0d:3d:e8:b3:23:3f:d3: 09:c8:c6:7c:e4:f3:65:53:ca:5a:35:b9:64:bd:b4: de:53:25:2a:7e:8a:9b:f4:d1:46:87:ab:dc:6c:23: 01:c4:ca:c4:39:d9:b8:26:f4:54:fd:28:ba:ec:15: 3b:3a:f9:dc:73:78:e8:3b:c9:54:6e:b7:e6:43:1e: fc:08:44:36:19:9d:ed:77:85:cf:5f:3c:d1:39:91: 06:79:30:03:ec:a7:00:a3:bb:fc:e5:06:de:7b:74: ac:bc:2d:ad:e2:aa:fb:e8:b1:7b:d5:07:ab:be:14: 56:d0:19:06:d9:3d:a6:8b:f8:dd:a4:19:49:2d:fe: 63:6c:d3:bc:4a:a6:94:9f:0f:94:5d:9a:f0:28:29: ae:ea:41:43:fa:21:4d:f1:a3:bf:8e:8d:3b:22:c4: 33:30:dc:ae:63:d0:8a:66:9f:57:3e:fc:3d:79:a2: 26:75:36:e2:c5:c6:6f:4b:ab:09:77:6d:45:6e:b4: 3b:e8:21:f0:5c:87:5a:8d:81:58:fc:53:94:58:80: a6:22:08:75:2b:36:ac:7d:b3:23:8a:01:02:dc:b4: 53:aa:5b:91:5d:b0:cf:c3:2d:b8:19:d5:09:b8:05: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:20:A1:A7:0A:A2:22:B6:1C:95:5E:BC:D0:0D:86:F0:25:4B:26:FD X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2b:e0:78:4d:2c:f7:57:d8:6c:f6:27:e1:22:44:d3:d6:fa: a0:c4:e9:0e:52:3f:39:43:0d:fe:86:1b:79:b6:51:3a:a7:7e: 43:4c:92:29:99:84:3e:ee:38:2d:ef:fb:e5:61:fd:f8:5a:38: 1f:f7:67:87:71:88:d6:59:9a:b1:b0:78:9e:61:42:1b:55:a3: 8f:02:21:83:e8:0f:cc:6f:57:a4:57:88:50:5b:83:91:c8:e1: a5:a7:e0:b6:f5:b3:b0:ff:4d:45:2b:ee:80:df:4a:da:9e:cb: 9f:39:a5:d4:1c:0e:0f:1d:4d:7b:8e:60:b2:69:c2:46:f2:e2: 78:56:36:1a:e8:7b:09:4f:b5:8b:70:45:e1:5a:f8:c1:19:28: 38:84:c0:6a:00:5c:4c:c1:df:76:bf:06:30:13:f4:b9:bd:7b: 96:b2:38:8f:a5:9f:f0:1b:ef:87:3c:ab:93:77:50:06:62:da: 61:9c:9a:38:21:0f:39:89:76:3f:da:a7:34:29:be:d4:6c:af: 12:5a:d1:82:56:0d:d3:26:eb:9c:3f:58:96:46:83:be:19:23: 5d:9d:1b:98:20:e2:d6:e9:d9:5d:d7:e9:35:12:70:f7:6b:c1: 5e:ec:51:52:28:21:d7:98:19:9e:98:ab:1e:c4:e9:35:49:d0: 41:ef:a3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjUxMTA0MTkwODA3WhcNMjUxMTExMTkwODA3WjAYMRYwFAYD VQQDEw02OTBhNGYxNy1mMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSqyg/9HSJ0F4CBDV/CxBV4kmEtJjQ096LMjP9MJyMZ85PNlU8paNblkvbTe UyUqfoqb9NFGh6vcbCMBxMrEOdm4JvRU/Si67BU7Ovncc3joO8lUbrfmQx78CEQ2 GZ3td4XPXzzROZEGeTAD7KcAo7v85Qbee3SsvC2t4qr76LF71QervhRW0BkG2T2m i/jdpBlJLf5jbNO8SqaUnw+UXZrwKCmu6kFD+iFN8aO/jo07IsQzMNyuY9CKZp9X Pvw9eaImdTbixcZvS6sJd21FbrQ76CHwXIdajYFY/FOUWICmIgh1KzasfbMjigEC 3LRTqluRXbDPwy24GdUJuAXTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwgoacK oiK2HJVevNANhvAlSyb9MB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwK+B4TSz3V9hs9ifhIkTT1vqgxOkOUj85Qw3+hht5tlE6p35DTJIp mYQ+7jgt7/vlYf34Wjgf92eHcYjWWZqxsHieYUIbVaOPAiGD6A/Mb1ekV4hQW4OR yOGlp+C29bOw/01FK+6A30ransufOaXUHA4PHU17jmCyacJG8uJ4VjYa6HsJT7WL cEXhWvjBGSg4hMBqAFxMwd92vwYwE/S5vXuWsjiPpZ/wG++HPKuTd1AGYtphnJo4 IQ85iXY/2qc0Kb7UbK8SWtGCVg3TJuucP1iWRoO+GSNdnRuYIOLW6dld1+k1EnD3 a8Fe7FFSKCHXmBmemKsexOk1SdBB76Mt -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:01 2025 by rpki-client