$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json) Hash identifier: Z2aE4KF39lJ2YNi5RXmGxS9/HvRCxiVetHpea7xVInk= Subject key identifier: FC:6C:60:64:5A:0A:93:40:D2:09:3D:03:B6:49:1E:88:B3:B1:62:E7 Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft Manifest number: 75 Signing time: Wed 05 Nov 2025 07:04:13 +0000 Manifest this update: Wed 05 Nov 2025 07:04:13 +0000 Manifest next update: Wed 12 Nov 2025 07:04:13 +0000 Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: ypYpegoJbzx0Iaywh1mo6cc/ST3T0azA+BEE0lsTf+w=) 2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: lfdyi++bWKTqNq0AntGKkt45cnrhAjp+IKIVrz1KfzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Validity Not Before: Nov 5 07:04:13 2025 GMT Not After : Nov 12 07:04:13 2025 GMT Subject: CN=690af6ed-fc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:96:66:25:47:26:d0:63:98:3d:fd:ce:90:73: 29:0e:fc:29:ee:65:70:09:9b:25:b6:cd:c3:93:46: 22:1c:24:37:88:fb:b6:af:e5:45:6a:63:62:97:d4: 5d:18:e1:a8:f0:92:25:00:a6:d0:3a:79:49:00:06: 15:40:2e:12:4e:bd:4a:70:bb:6e:b7:ba:cc:8e:c6: fd:93:fd:69:64:28:7c:8b:1f:89:4e:35:b1:b0:d6: b2:0c:74:ea:23:9c:ac:f6:79:08:7e:04:0b:ec:41: 60:f8:72:1e:22:b7:a3:83:16:7c:2b:a7:be:d9:bb: 81:e7:0b:91:34:c3:5e:13:4f:2e:99:2e:9c:89:55: d5:fb:8d:0e:c1:9f:dc:ab:bd:4b:06:7e:5d:84:b6: 4a:e5:39:a2:d0:d3:c2:f5:e0:35:c8:94:d1:c2:44: 01:88:08:5f:73:e3:1e:69:bc:a3:6e:f0:18:9b:03: 46:ae:06:17:d9:70:e7:db:9b:a7:c1:2a:25:35:94: 68:ed:3d:d7:b0:8c:39:18:ae:ae:9f:06:e5:ca:af: 92:1e:4a:64:ee:15:7b:fc:c8:84:23:2c:a8:88:04: b9:6d:90:36:09:17:75:61:4b:4b:02:85:04:5a:95: e8:10:4e:2f:b6:be:2f:f4:26:43:b8:d1:1e:58:40: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6C:60:64:5A:0A:93:40:D2:09:3D:03:B6:49:1E:88:B3:B1:62:E7 X509v3 Authority Key Identifier: keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:24:0b:6e:69:08:92:8b:67:fb:32:4f:3c:ef:24:6f:7a:82: 36:56:ce:a4:a0:76:bf:fd:c6:e9:de:39:3d:ed:49:88:be:f3: dc:3b:70:7a:bb:dc:65:33:64:7f:b7:ed:1c:de:c3:62:d3:ce: 8a:95:89:9c:d1:4a:1e:81:a6:56:ae:25:07:8f:3e:2d:34:60: 3c:b1:60:b5:3d:19:5b:ab:8c:d1:c7:c5:37:92:69:e6:0b:00: dc:aa:dd:f2:cb:68:4a:a9:2a:6d:79:9b:d8:8b:75:ce:c7:10: 1a:14:5c:6e:75:d3:38:12:0e:5c:de:2c:0d:18:12:47:90:96: 62:7f:e9:b7:00:f1:af:fc:72:50:28:62:f9:b0:e6:22:ac:d9: d2:57:3f:bf:3b:20:cc:76:d4:13:b0:a1:2c:3e:82:11:80:7a: c2:4a:0d:f2:c8:13:c1:93:db:4b:74:34:24:a4:bb:ee:a0:fb: f0:ce:d4:38:39:c6:4f:06:b2:5d:fb:6e:94:13:aa:8a:16:ea: a1:c4:56:c5:5d:e4:c6:a5:a3:3e:f2:91:42:3d:06:cf:e5:f8: f3:6c:df:28:9b:6b:16:ec:ed:37:09:36:6f:ff:a0:78:55:08: 80:47:5f:af:ed:49:51:a5:8c:cc:c1:ff:d0:57:f2:c8:88:02: 81:cb:07:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwOTExMC8GA1UEBRMoMDhBMzkxQzZCMzg5QzgxMEU5NUJDNjEzOUNFQ0IyOUQ1 RDM5NThDNDAeFw0yNTExMDUwNzA0MTNaFw0yNTExMTIwNzA0MTNaMBgxFjAUBgNV BAMTDTY5MGFmNmVkLWZjMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDulmYlRybQY5g9/c6QcykO/CnuZXAJmyW2zcOTRiIcJDeI+7av5UVqY2KX1F0Y 4ajwkiUAptA6eUkABhVALhJOvUpwu263usyOxv2T/WlkKHyLH4lONbGw1rIMdOoj nKz2eQh+BAvsQWD4ch4it6ODFnwrp77Zu4HnC5E0w14TTy6ZLpyJVdX7jQ7Bn9yr vUsGfl2EtkrlOaLQ08L14DXIlNHCRAGICF9z4x5pvKNu8BibA0auBhfZcOfbm6fB KiU1lGjtPdewjDkYrq6fBuXKr5IeSmTuFXv8yIQjLKiIBLltkDYJF3VhS0sChQRa legQTi+2vi/0JkO40R5YQGZZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/GxgZFoK k0DSCT0DtkkeiLOxYucwHwYDVR0jBBgwFoAUCKORxrOJyBDpW8YTnOyynV05WMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTA5Lzg3MDU1QjMyMDhD ODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdN US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0tPUnhyT0p5QkRwVzhZVG5PeXluVjA1V01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 RTA5Lzg3MDU1QjMyMDhDODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJE cFc4WVRuT3l5blYwNVdNUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGckC25pCJKLZ/syTzzvJG96gjZWzqSgdr/9xuneOT3tSYi+89w7cHq7 3GUzZH+37Rzew2LTzoqViZzRSh6BplauJQePPi00YDyxYLU9GVurjNHHxTeSaeYL ANyq3fLLaEqpKm15m9iLdc7HEBoUXG510zgSDlzeLA0YEkeQlmJ/6bcA8a/8clAo Yvmw5iKs2dJXP787IMx21BOwoSw+ghGAesJKDfLIE8GT20t0NCSku+6g+/DO1Dg5 xk8Gsl37bpQTqooW6qHEVsVd5Maloz7ykUI9Bs/l+PNs3yibaxbs7TcJNm//oHhV CIBHX6/tSVGljMzB/9BX8siIAoHLBwg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:45 2025 by rpki-client