$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: m9GGnAvHoMKHWSUjgpsCtmcZyEOD4EpMCTPnctBPJhE= Subject key identifier: C9:0E:51:60:48:BC:CD:E2:A3:08:B7:78:EC:9D:7E:5E:D2:F3:B3:AB Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 3506 Signing time: Tue 04 Nov 2025 14:51:26 +0000 Manifest this update: Tue 04 Nov 2025 14:51:25 +0000 Manifest next update: Tue 11 Nov 2025 14:51:25 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: 6XGdwc1BtIV0vv80gokBwkg5OEP6s1g9G0DNJ5feYaQ=) 2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: y1aP2xpWM5Z9p4X69/I0EqD92yLEHPJ0HdxDyd7A8wI=) 3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: aTe2/qHECp604MTOZNBT11/TWC/3VIpR1RLRNWUq1YA=) 4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: 059V5evvVlwvqhYmAH8RCR6WncgUFs2g2N8S+IGfKUE=) 5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: jtNYB2wRKxdcsyRMOMGrPRMxmPYLg6mXDKTfhKPhrtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: Nov 4 14:51:25 2025 GMT Not After : Nov 11 14:51:25 2025 GMT Subject: CN=690a12ed-52d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:dc:6e:8c:c9:42:2a:af:2f:b1:49:9f:e6: 3e:8c:6e:07:8e:ae:12:4e:bf:65:0d:6a:7d:55:90: 57:28:fe:b9:65:a0:bc:30:f0:ae:41:c0:e8:19:27: e1:e1:fd:1f:af:58:1d:6f:83:b5:52:e6:10:ec:0c: 2e:81:ad:74:a5:61:3f:fc:bc:58:d6:38:db:77:62: b1:ab:ed:26:a1:54:95:e9:5b:ae:92:74:61:29:73: 6b:22:c7:6b:33:a0:a3:58:3f:5a:4a:66:fb:6f:04: b4:89:72:66:e8:db:ae:90:77:7a:61:47:50:1e:c0: 1e:a2:dc:5a:ae:37:32:0e:5f:f9:b8:a5:6c:45:51: f9:10:63:50:ed:e1:44:39:ac:c1:3d:ac:a7:3e:59: d3:c7:cc:57:32:da:90:83:8a:1d:ba:89:5c:5e:01: b6:fe:a0:b9:41:c5:70:b8:8a:b0:8c:b1:ed:38:81: 64:27:2e:99:9f:12:05:f3:11:f9:78:c9:bd:bf:ed: 03:ed:7a:05:f4:76:ff:be:4f:1b:2c:e2:d2:50:fa: 58:5c:0f:c4:2f:d7:a1:aa:86:3d:36:b8:3d:61:66: 23:7e:2a:58:65:21:a8:51:8c:42:c3:ab:70:aa:e5: 3f:b6:d6:04:62:01:63:65:b0:0c:b2:36:0c:24:87: bf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:51:60:48:BC:CD:E2:A3:08:B7:78:EC:9D:7E:5E:D2:F3:B3:AB X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1e:e6:70:42:27:0a:d9:56:fa:ed:aa:57:2d:db:92:3d:bc: 93:10:89:6c:75:2a:6f:c3:17:65:61:ef:5b:37:2c:a8:a4:b4: cb:f9:20:40:44:06:8f:11:36:a9:02:3a:4b:2f:68:b2:5f:84: 4e:ee:90:d0:56:74:c5:3d:4d:e3:09:c8:93:79:97:1b:3b:d4: 7d:e1:54:d4:83:90:fc:dd:65:29:eb:96:3e:12:5d:1b:dc:8f: 25:88:b8:00:24:4d:46:c7:10:3f:f6:fb:bf:a7:ec:df:97:13: 04:30:39:6c:87:7c:e2:a8:4d:df:07:ab:d1:d6:59:80:1b:ca: 7e:df:f5:8c:5f:5d:52:4d:1e:1f:3f:72:ca:7a:71:79:00:ab: de:22:4a:42:7d:d1:f1:51:ea:e3:41:51:16:8a:38:ab:6d:80: 8c:9b:b0:0c:e4:3f:29:93:c4:86:65:e5:68:2a:00:62:4d:d3: 51:42:65:80:45:66:8b:34:a8:0b:52:ec:0a:f5:8d:fa:71:a3: 43:8a:f7:5b:0b:4f:f7:7a:27:34:07:7f:3d:ed:85:24:8b:f3: 1a:60:1b:9c:ee:62:97:1d:69:5a:fd:d7:78:08:d8:18:d5:49: f5:d2:ad:cc:a6:8f:bf:23:f7:a5:20:bb:82:75:8f:e8:66:1a: 7e:2b:fb:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjUxMTA0MTQ1MTI1WhcNMjUxMTExMTQ1MTI1WjAYMRYwFAYD VQQDEw02OTBhMTJlZC01MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAponcbozJQiqvL7FJn+Y+jG4Hjq4STr9lDWp9VZBXKP65ZaC8MPCuQcDoGSfh 4f0fr1gdb4O1UuYQ7Awuga10pWE//LxY1jjbd2Kxq+0moVSV6VuuknRhKXNrIsdr M6CjWD9aSmb7bwS0iXJm6NuukHd6YUdQHsAeotxarjcyDl/5uKVsRVH5EGNQ7eFE OazBPaynPlnTx8xXMtqQg4oduolcXgG2/qC5QcVwuIqwjLHtOIFkJy6ZnxIF8xH5 eMm9v+0D7XoF9Hb/vk8bLOLSUPpYXA/EL9ehqoY9Nrg9YWYjfipYZSGoUYxCw6tw quU/ttYEYgFjZbAMsjYMJIe/iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkOUWBI vM3iowi3eOydfl7S87OrMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZHuZwQicK2Vb67apXLduSPbyTEIlsdSpvwxdlYe9bNyyopLTL+SBA RAaPETapAjpLL2iyX4RO7pDQVnTFPU3jCciTeZcbO9R94VTUg5D83WUp65Y+El0b 3I8liLgAJE1GxxA/9vu/p+zflxMEMDlsh3ziqE3fB6vR1lmAG8p+3/WMX11STR4f P3LKenF5AKveIkpCfdHxUerjQVEWijirbYCMm7AM5D8pk8SGZeVoKgBiTdNRQmWA RWaLNKgLUuwK9Y36caNDivdbC0/3eic0B3897YUki/MaYBuc7mKXHWla/dd4CNgY 1Un10q3Mpo+/I/elILuCdY/oZhp+K/uI -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:18 2025 by rpki-client