$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft File: usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json) Hash identifier: DcKBXQPbsi9kHpNzGE7F58bROB9/eAUhwh5yzM7ocSs= Subject key identifier: BA:CD:35:62:2F:EE:F5:8D:94:9F:E6:83:31:1C:0B:F9:C0:84:95:C2 Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3 Certificate issuer: /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft Manifest number: 4D Signing time: Mon 03 Nov 2025 07:19:23 +0000 Manifest this update: Mon 03 Nov 2025 07:19:22 +0000 Manifest next update: Mon 10 Nov 2025 07:19:22 +0000 Files and hashes: 1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: VxXo5DiAKaixUyQ1ff5p8Ye3XCUoTYF5HDbm8nH8Qck=) 2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: PHW92SRejl/mbnatTD1r3a2U+gvK6WAe5C24ZUPT5mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3 Validity Not Before: Nov 3 07:19:22 2025 GMT Not After : Nov 10 07:19:22 2025 GMT Subject: CN=6908577b-a247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:96:d4:6d:0d:55:1b:76:12:a4:39:89:24: 6c:2c:3c:12:bc:f3:ed:17:55:9b:dd:be:e1:fc:6d: 49:7e:b9:f2:7b:d4:af:14:6e:9e:46:26:8f:c6:61: 5d:4d:e2:4f:67:ad:30:18:ca:13:b5:f4:65:26:da: 4b:90:f1:18:96:1d:41:6a:90:e9:e4:c5:2e:86:96: 30:fe:e6:e4:41:b2:34:28:1a:49:d0:01:cc:f2:9b: 4b:c9:34:e2:06:07:a4:87:cf:93:62:78:c7:db:04: c5:e8:6d:fd:00:fc:28:b4:7c:4f:4e:8b:9b:3b:6f: eb:6a:9e:0e:88:a9:7b:4d:1d:f1:6e:b6:64:84:3a: e4:11:e4:c2:e7:1b:f9:e8:7e:8a:56:99:b7:9c:bd: a0:d5:e4:23:24:ff:6e:87:4f:ea:60:76:18:7c:eb: 46:8c:ef:2c:96:49:da:a9:3d:de:71:2c:12:a5:a4: de:b9:38:56:c7:87:15:bf:50:50:d8:5c:84:ec:e9: 07:39:62:fc:7e:bc:42:e4:2b:15:ab:fa:d3:5b:d5: 7a:75:3a:25:30:a8:46:9b:5b:6a:63:87:9f:85:35: e0:7c:2e:49:e6:f1:cc:d2:cb:43:d6:6e:6c:90:68: c4:6d:04:ce:dc:21:53:fe:ff:c5:f0:b0:4b:c2:7a: 2f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:35:62:2F:EE:F5:8D:94:9F:E6:83:31:1C:0B:F9:C0:84:95:C2 X509v3 Authority Key Identifier: keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c7:b5:c6:6b:a0:7e:c5:08:ed:ae:e4:de:db:ad:43:7c:60: bf:ac:de:e7:c8:17:ee:2d:85:9e:55:a0:61:59:f6:9c:7c:f9: 76:7f:bc:72:ed:8e:99:97:d1:6a:c8:a3:b4:58:76:a1:9e:1c: f2:9e:15:3e:fe:2e:5e:fe:b3:a7:ef:40:3d:46:7f:ef:47:51: 83:9f:e6:6e:2c:d5:1b:7f:fb:6c:38:e1:7c:8b:84:3d:94:88: 22:aa:d0:c5:cc:75:ef:d0:46:a2:2d:d2:93:46:e7:97:ea:e1: b4:85:ec:a5:75:47:e5:2c:39:1f:c4:20:68:ad:82:46:ee:62: df:bc:46:a4:26:05:6f:31:73:71:5b:2c:e3:51:5a:d8:9d:52: d1:db:04:b2:b3:f1:0f:b9:29:c9:c1:3b:a6:ae:f8:07:37:1a: 4a:a3:28:e3:24:0b:ff:70:a1:3b:5a:63:f6:c6:14:3c:5d:7d: 02:6d:91:c0:cf:9f:41:5b:45:b9:79:c6:93:c4:7b:02:6d:fc: 76:b1:74:b3:1d:fb:ce:cf:62:43:c1:23:3b:71:9e:8f:ab:d0: f8:b2:6b:6f:1a:c8:a2:0f:f8:cf:9e:9a:0b:74:5c:ac:02:fe: 69:2e:02:9a:e3:10:3f:ab:6c:3e:22:af:3a:d0:de:d7:d9:7d: d2:3e:5a:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoQkFDMUZBMUIxRTRFRTQzMDAyM0IyNzVEMjI3QTVEMDQz QzdGOTZBMzAeFw0yNTExMDMwNzE5MjJaFw0yNTExMTAwNzE5MjJaMBgxFjAUBgNV BAMTDTY5MDg1NzdiLWEyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwnJbUbQ1VG3YSpDmJJGwsPBK88+0XVZvdvuH8bUl+ufJ71K8Ubp5GJo/GYV1N 4k9nrTAYyhO19GUm2kuQ8RiWHUFqkOnkxS6GljD+5uRBsjQoGknQAczym0vJNOIG B6SHz5NieMfbBMXobf0A/Ci0fE9Oi5s7b+tqng6IqXtNHfFutmSEOuQR5MLnG/no fopWmbecvaDV5CMk/26HT+pgdhh860aM7yyWSdqpPd5xLBKlpN65OFbHhxW/UFDY XITs6Qc5Yvx+vELkKxWr+tNb1Xp1OiUwqEabW2pjh5+FNeB8Lknm8czSy0PWbmyQ aMRtBM7cIVP+/8XwsEvCei8DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUus01Yi/u 9Y2Un+aDMRwL+cCElcIwHwYDVR0jBBgwFoAUusH6Gx5O5DACOyddInpdBDx/lqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzI0Q0FFNEE4NDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVPNURBQ095ZGRJbnBkQkR4X2xx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdXNINkd4NU81REFDT3lkZElucGRCRHhfbHFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzI0Q0FFNEE4NDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL3VzSDZHeDVPNURB Q095ZGRJbnBkQkR4X2xxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHrHtcZroH7FCO2u5N7brUN8YL+s3ufIF+4thZ5VoGFZ9px8+XZ/vHLt jpmX0WrIo7RYdqGeHPKeFT7+Ll7+s6fvQD1Gf+9HUYOf5m4s1Rt/+2w44XyLhD2U iCKq0MXMde/QRqIt0pNG55fq4bSF7KV1R+UsOR/EIGitgkbuYt+8RqQmBW8xc3Fb LONRWtidUtHbBLKz8Q+5KcnBO6au+Ac3GkqjKOMkC/9woTtaY/bGFDxdfQJtkcDP n0FbRbl5xpPEewJt/HaxdLMd+87PYkPBIztxno+r0Piya28ayKIP+M+emgt0XKwC /mkuAprjED+rbD4irzrQ3tfZfdI+WiM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:59 2025 by rpki-client