$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: GrF2WOPycvlGcG8BUfDRqaTdzfJi8u1GHU/2LayiOD4= Subject key identifier: FE:11:03:09:68:18:62:36:3D:7B:5F:9D:8E:6A:25:2E:83:09:28:D9 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1F57 Signing time: Tue 04 Nov 2025 16:06:30 +0000 Manifest this update: Tue 04 Nov 2025 16:06:30 +0000 Manifest next update: Tue 11 Nov 2025 16:06:30 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: m/850HoPTbmBLekw8F62vtByAQMgno/ujxu3a2tkdEU=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: OeiUjQjQDPnp0Hc4HqvRxkfSPHq3x3ODdBcjSRZ+2RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8040 (0x1f68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Nov 4 16:06:30 2025 GMT Not After : Nov 11 16:06:30 2025 GMT Subject: CN=690a2486-8a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:af:10:3b:c2:23:13:d0:0d:c3:da:34:ee: 05:f2:76:81:78:d3:bc:58:90:ae:22:da:0f:61:7f: d8:f4:04:f4:ab:c2:c8:79:89:d9:c0:43:f0:78:f3: 90:ef:39:9f:a7:4a:79:15:5c:b8:3b:ca:b2:5a:79: 41:41:85:ae:6f:36:0c:db:6a:2a:ce:5f:23:76:9e: 72:db:e1:16:1f:d3:93:1c:69:0f:bb:ad:3d:74:62: 9f:10:33:27:e1:c0:9b:87:93:cf:6c:58:e2:c5:ae: db:0c:f4:22:7a:ea:1a:e9:45:df:8e:7f:c1:7a:0f: e4:fe:ad:6d:7d:be:c4:12:96:cb:f6:1c:25:76:5a: e8:ba:fd:97:9f:81:3a:12:cb:5b:07:0b:a1:8a:04: 88:ab:4b:03:18:83:7a:bb:e1:e9:2b:ae:4f:ec:b4: 9a:33:23:4e:42:5e:c3:15:89:e6:97:be:1b:f4:1e: 88:e3:04:90:77:57:cd:74:fa:96:27:bf:9c:7d:55: 59:8f:0a:7b:62:ea:21:38:0d:21:53:5a:6e:83:18: d1:6d:c5:9a:bc:13:b5:2a:af:cd:70:c3:9f:8b:b1: 64:b0:f5:b2:2f:0e:08:17:59:0f:1d:f6:13:af:2f: c7:72:60:99:49:08:94:b6:f1:2a:34:d7:60:7b:f8: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:11:03:09:68:18:62:36:3D:7B:5F:9D:8E:6A:25:2E:83:09:28:D9 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4e:f0:e6:9c:95:36:54:f1:c5:5b:83:10:54:e8:56:71:0e: 09:2d:30:a8:c8:64:b8:56:ab:86:08:f1:8e:81:ab:27:5d:18: a2:0d:42:57:47:50:37:c5:3b:a6:0b:e0:01:35:a8:d7:8b:30: fa:15:72:b9:51:14:63:28:e4:72:3b:c6:25:0a:6f:d4:5e:2d: d9:f4:0e:4d:fc:69:86:3e:3f:7f:1f:c8:e0:aa:08:cd:b4:e8: ad:ab:cd:7e:f7:dc:99:20:e8:5e:62:bc:2c:82:86:fd:48:2f: d9:5f:62:2f:38:7c:f0:3a:e0:15:1c:bc:d8:ec:97:85:ec:a6: 33:0b:ea:a7:20:37:87:33:d3:6f:cc:12:db:48:66:2d:62:60: 04:f1:51:82:e6:be:1e:44:7c:16:ef:19:12:e3:cf:29:dc:98: 16:c6:47:b8:a2:d0:9a:62:aa:53:79:0a:22:cb:bd:2f:d1:9f: c9:d4:45:0a:17:85:b8:e1:a1:ad:a7:3b:92:92:71:a9:67:16: 8e:51:0f:fb:bf:e4:dd:6a:65:cf:0d:d5:9e:9e:73:aa:0d:3d: ba:2a:6f:ca:8a:11:18:06:51:ff:bb:74:fc:c5:63:c1:1d:35: e0:ef:2f:9a:25:56:b7:59:ea:ee:11:19:01:1d:be:76:5c:1b: 6e:b9:46:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUxMTA0MTYwNjMwWhcNMjUxMTExMTYwNjMwWjAYMRYwFAYD VQQDEw02OTBhMjQ4Ni04YTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYevEDvCIxPQDcPaNO4F8naBeNO8WJCuItoPYX/Y9AT0q8LIeYnZwEPwePOQ 7zmfp0p5FVy4O8qyWnlBQYWubzYM22oqzl8jdp5y2+EWH9OTHGkPu609dGKfEDMn 4cCbh5PPbFjixa7bDPQieuoa6UXfjn/Beg/k/q1tfb7EEpbL9hwldlrouv2Xn4E6 EstbBwuhigSIq0sDGIN6u+HpK65P7LSaMyNOQl7DFYnml74b9B6I4wSQd1fNdPqW J7+cfVVZjwp7YuohOA0hU1pugxjRbcWavBO1Kq/NcMOfi7FksPWyLw4IF1kPHfYT ry/HcmCZSQiUtvEqNNdge/g1jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4RAwlo GGI2PXtfnY5qJS6DCSjZMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjTvDmnJU2VPHFW4MQVOhWcQ4JLTCoyGS4VquGCPGOgasnXRiiDUJX R1A3xTumC+ABNajXizD6FXK5URRjKORyO8YlCm/UXi3Z9A5N/GmGPj9/H8jgqgjN tOitq81+99yZIOheYrwsgob9SC/ZX2IvOHzwOuAVHLzY7JeF7KYzC+qnIDeHM9Nv zBLbSGYtYmAE8VGC5r4eRHwW7xkS488p3JgWxke4otCaYqpTeQoiy70v0Z/J1EUK F4W44aGtpzuSknGpZxaOUQ/7v+TdamXPDdWennOqDT26Km/KihEYBlH/u3T8xWPB HTXg7y+aJVa3WeruERkBHb52XBtuuUb/ -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:03 2025 by rpki-client