$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json) Hash identifier: V4UBw674lrFYzhCjIH4TwG5JSVuDVsFL9f1D60trjig= Subject key identifier: 24:D2:F4:4B:91:DC:2C:C8:F2:6F:C1:1C:61:75:C9:D0:B3:C0:FD:37 Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft Manifest number: 0D60 Signing time: Tue 04 Nov 2025 18:05:37 +0000 Manifest this update: Tue 04 Nov 2025 18:05:37 +0000 Manifest next update: Tue 11 Nov 2025 18:05:37 +0000 Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: SRuN6/HEZ/quFh2O+cS0LIgW/0R/HfrO3uL43DOQuEw=) 2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: /Vmvob4Ba5JT6xBzlUxuOFxxM0jXE2HEf4/pjk43Tpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Validity Not Before: Nov 4 18:05:37 2025 GMT Not After : Nov 11 18:05:37 2025 GMT Subject: CN=690a4071-def2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:0f:1b:6c:6f:c0:a4:2d:76:c2:76:27:ec: 81:bf:bb:a7:89:17:1a:9d:08:3e:24:4c:2a:13:8d: e9:3f:a9:2a:3c:7f:06:bd:0c:34:44:5d:77:74:33: dc:05:4a:cc:b8:8b:a5:99:f5:8c:67:88:61:e5:18: cd:e8:85:b6:94:3d:17:c8:bd:89:ad:60:2b:58:0b: e2:36:62:a1:4e:15:1a:97:5b:bc:78:d8:63:15:ae: 52:db:b1:32:de:89:e3:59:e1:05:9d:f6:2a:db:2a: 41:dc:fa:21:e7:3c:9b:ba:00:6c:25:1f:b7:a8:a9: a9:52:69:57:17:6d:7c:33:c2:27:54:bc:7b:76:ca: 93:3e:a3:dc:6c:23:e1:97:e6:a5:69:9a:10:83:03: 4d:7e:39:4c:9b:51:39:17:63:f5:35:8c:94:dd:42: a0:ca:fe:ff:09:6e:60:46:fa:76:9a:42:56:5c:08: 0a:c9:55:59:52:77:df:22:6d:b4:b7:e4:b8:54:42: e5:d8:7f:72:8d:6c:63:d9:07:3d:fe:3c:50:c8:2f: dc:ad:77:5d:cb:f8:d6:cc:13:28:b0:64:65:ee:4a: 87:7a:c2:06:7b:22:f2:31:92:6b:31:77:3c:0c:b1: 58:1d:4c:82:4f:1c:e4:6d:eb:6e:3f:73:d8:d5:a7: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:F4:4B:91:DC:2C:C8:F2:6F:C1:1C:61:75:C9:D0:B3:C0:FD:37 X509v3 Authority Key Identifier: keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:cb:84:20:96:23:8f:17:69:b0:a1:4e:5c:ee:22:d9:25:4d: 00:33:d9:c2:b1:ef:27:03:8a:43:c0:c0:3a:00:cd:a6:b9:d6: ee:40:e4:f7:ba:0b:59:db:32:2a:ab:97:db:ab:17:93:21:59: 58:8b:cb:be:af:f8:81:49:87:1f:52:bc:16:d4:25:92:22:f5: f9:28:72:ac:d4:bf:05:59:5a:24:80:88:04:fd:fb:74:2f:6b: 6f:a6:8d:2c:75:38:e2:bb:55:0f:bb:9e:7a:58:b3:03:76:e8: a1:bc:7c:97:34:37:a2:84:3f:f7:16:b7:51:d8:1f:11:87:06: 64:c0:56:ae:71:9e:7e:0b:71:74:1e:f2:b6:a7:52:0f:fa:63: bc:58:39:2b:5f:bc:11:bf:06:10:25:0b:83:36:64:f9:a7:f6: c4:3a:2e:0a:42:a1:0c:66:cd:97:6d:f4:5b:b6:bb:6c:5a:89: db:85:fb:a9:e3:af:06:01:4d:b8:a5:8f:e4:ea:6e:04:b3:44: dd:69:55:81:64:0b:94:cf:3e:d1:54:d0:7a:0e:64:5a:bd:01: 6f:9f:b2:da:a4:e3:86:31:68:2a:15:c7:d6:f1:16:11:c6:4d: 83:da:fa:91:0f:3b:a6:62:c0:cf:b0:21:a4:08:c6:89:b1:62: 47:cc:11:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFRTIxMTAvBgNVBAUTKDQ3NTI1MEU2QTA1NTQ3OEY0QUMxRUFGMUVEMzJENTY3 MkMzQ0QxQjMwHhcNMjUxMTA0MTgwNTM3WhcNMjUxMTExMTgwNTM3WjAYMRYwFAYD VQQDEw02OTBhNDA3MS1kZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgQPG2xvwKQtdsJ2J+yBv7uniRcanQg+JEwqE43pP6kqPH8GvQw0RF13dDPc BUrMuIulmfWMZ4hh5RjN6IW2lD0XyL2JrWArWAviNmKhThUal1u8eNhjFa5S27Ey 3onjWeEFnfYq2ypB3Poh5zybugBsJR+3qKmpUmlXF218M8InVLx7dsqTPqPcbCPh l+alaZoQgwNNfjlMm1E5F2P1NYyU3UKgyv7/CW5gRvp2mkJWXAgKyVVZUnffIm20 t+S4VELl2H9yjWxj2Qc9/jxQyC/crXddy/jWzBMosGRl7kqHesIGeyLyMZJrMXc8 DLFYHUyCTxzkbetuP3PY1acdnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTS9EuR 3CzI8m/BHGF1ydCzwP03MB8GA1UdIwQYMBaAFEdSUOagVUePSsHq8e0y1WcsPNGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEVFMi9FQTAxRDU1QURG NzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0OUt3ZXJ4N1RMVlp5dzgw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxSlE1cUJWUjQ5S3dlcng3VExWWnl3ODBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEVFMi9FQTAxRDU1QURGNzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0 OUt3ZXJ4N1RMVlp5dzgwYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRy4QgliOPF2mwoU5c7iLZJU0AM9nCse8nA4pDwMA6AM2mudbuQOT3 ugtZ2zIqq5fbqxeTIVlYi8u+r/iBSYcfUrwW1CWSIvX5KHKs1L8FWVokgIgE/ft0 L2tvpo0sdTjiu1UPu556WLMDduihvHyXNDeihD/3FrdR2B8RhwZkwFaucZ5+C3F0 HvK2p1IP+mO8WDkrX7wRvwYQJQuDNmT5p/bEOi4KQqEMZs2XbfRbtrtsWonbhfup 468GAU24pY/k6m4Es0TdaVWBZAuUzz7RVNB6DmRavQFvn7LapOOGMWgqFcfW8RYR xk2D2vqRDzumYsDPsCGkCMaJsWJHzBEu -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:22 2025 by rpki-client