$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: 8gyhGnuxAPIPylTmtw4VH7vv3R+LbIWOwst+sjfYbD8= Subject key identifier: D7:78:62:B1:04:E2:C6:7B:EA:2B:5E:6D:B0:47:36:2A:FB:B3:3A:3C Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1CC5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1CA8 Signing time: Tue 04 Nov 2025 16:16:39 +0000 Manifest this update: Tue 04 Nov 2025 16:16:38 +0000 Manifest next update: Tue 11 Nov 2025 16:16:38 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: mL7GepfPIZluVnY8G2sQaGmdV2AjQ+SNdBZtMtxw0h0=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: wGS6VfXvnD14KD/FvyuZu+ZkujOmt82UIRL+laCRJ8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7365 (0x1cc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Nov 4 16:16:38 2025 GMT Not After : Nov 11 16:16:38 2025 GMT Subject: CN=690a26e7-d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:c0:a8:ef:aa:06:db:72:32:a0:0a:f2:b5: 42:11:d6:30:9e:62:57:57:c2:81:42:32:19:01:b5: 5b:84:45:e1:94:a8:2e:b8:c8:15:26:25:2c:db:96: a1:e8:5a:16:1c:65:d2:06:08:3b:37:e2:ec:b1:7e: 19:9e:5c:f7:24:c8:4e:bc:68:53:44:d1:03:ee:21: e5:40:5a:b5:f8:6f:63:9d:c1:79:6e:38:a8:c9:ce: 90:b3:59:c9:83:67:1b:da:af:54:39:34:46:df:60: 02:ca:6e:b3:81:a5:0d:a3:15:d6:d7:df:70:25:a8: 4a:14:85:59:b1:48:9d:e3:44:f0:c5:26:88:32:04: 70:20:a4:33:73:72:f4:dc:65:dc:18:00:a2:24:22: 3b:bd:cd:f3:e4:1e:47:ed:17:fe:4b:8e:c1:35:45: 97:45:0a:a4:bb:e3:37:4e:fe:2f:9b:e6:9b:62:ea: cd:50:6a:76:bd:4e:7e:10:27:f2:ef:25:4a:4a:81: 17:54:4a:41:41:39:53:5e:eb:f2:89:d8:86:b6:3e: 39:1b:7c:d5:a6:15:4b:f3:ef:24:d2:91:9a:f8:88: 09:a6:b6:29:cf:dc:e5:d8:38:91:13:29:3c:c5:0f: ed:0f:8f:80:79:be:40:4c:11:c6:1c:1e:b5:29:08: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:78:62:B1:04:E2:C6:7B:EA:2B:5E:6D:B0:47:36:2A:FB:B3:3A:3C X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:2f:e3:fa:09:68:c9:4c:c9:f0:df:55:a6:33:65:c9:77: 1f:57:e5:9a:0e:59:c3:7b:ef:4b:97:ff:f7:0c:65:f0:92:f4: 31:b4:8f:a5:25:4c:9e:8a:c0:02:ae:9d:e9:18:ff:eb:5c:9e: 57:dc:8b:04:4c:7b:a2:8b:78:1d:2c:c8:4c:47:9e:af:12:38: e0:14:4a:3e:74:8a:85:72:34:42:25:20:80:3d:c7:ad:b7:70: 06:bc:0a:d2:3b:d5:2c:10:ff:fd:15:c6:9c:c6:d9:d2:5f:8c: 9e:81:46:b1:c4:69:93:98:7b:2c:d5:0c:f9:14:9d:37:e5:ea: 3f:89:06:2a:fd:6a:e4:5d:83:2f:0e:b4:f6:13:63:3d:96:a6: 2c:d0:a1:24:4b:25:f9:24:88:9d:74:8f:63:67:c1:79:1e:77: 84:45:bc:93:4e:19:3d:e0:fa:93:2e:74:5b:45:9d:36:d1:e8: 2e:05:e8:6a:7e:2b:6c:c0:10:8b:7d:54:18:41:49:fe:1b:62: 8d:98:fa:72:35:a2:54:65:a4:1a:8a:87:57:be:78:1a:bf:b3: 8b:09:7e:a5:b6:16:97:bf:03:8e:4f:e8:af:7d:39:f3:9b:d8: 79:7e:6e:be:3f:58:0d:31:e9:95:6c:17:ce:27:04:cb:58:6c: d2:cc:d7:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUxMTA0MTYxNjM4WhcNMjUxMTExMTYxNjM4WjAYMRYwFAYD VQQDEw02OTBhMjZlNy1kNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXbAqO+qBttyMqAK8rVCEdYwnmJXV8KBQjIZAbVbhEXhlKguuMgVJiUs25ah 6FoWHGXSBgg7N+LssX4Znlz3JMhOvGhTRNED7iHlQFq1+G9jncF5bjioyc6Qs1nJ g2cb2q9UOTRG32ACym6zgaUNoxXW199wJahKFIVZsUid40TwxSaIMgRwIKQzc3L0 3GXcGACiJCI7vc3z5B5H7Rf+S47BNUWXRQqku+M3Tv4vm+abYurNUGp2vU5+ECfy 7yVKSoEXVEpBQTlTXuvyidiGtj45G3zVphVL8+8k0pGa+IgJprYpz9zl2DiREyk8 xQ/tD4+Aeb5ATBHGHB61KQhMcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd4YrEE 4sZ76itebbBHNir7szo8MB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmgS/j+gloyUzJ8N9VpjNlyXcfV+WaDlnDe+9Ll//3DGXwkvQxtI+l JUyeisACrp3pGP/rXJ5X3IsETHuii3gdLMhMR56vEjjgFEo+dIqFcjRCJSCAPcet t3AGvArSO9UsEP/9FcacxtnSX4yegUaxxGmTmHss1Qz5FJ035eo/iQYq/WrkXYMv DrT2E2M9lqYs0KEkSyX5JIiddI9jZ8F5HneERbyTThk94PqTLnRbRZ020eguBehq fitswBCLfVQYQUn+G2KNmPpyNaJUZaQaiodXvngav7OLCX6lthaXvwOOT+ivfTnz m9h5fm6+P1gNMemVbBfOJwTLWGzSzNcx -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:34 2025 by rpki-client