$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: 2B8fRo2qQ1qaEAncEGVCJxsb8GnnbjroLLJXv6nQdWc= Subject key identifier: A9:FD:96:9A:5D:F0:17:55:7A:D1:68:F9:84:ED:27:89:CD:58:56:8E Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0C21 Signing time: Sun 02 Nov 2025 18:42:19 +0000 Manifest this update: Sun 02 Nov 2025 18:42:18 +0000 Manifest next update: Sun 09 Nov 2025 18:42:18 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: 00INV0rt6/rx+ZuTEMETtCrE3WKvbF918Ht6Qoal5O4=) 2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: k+6bL1sigdhJhsvVBlCJkl8BzQ8/uafB/3pyO3zl0nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Nov 2 18:42:18 2025 GMT Not After : Nov 9 18:42:18 2025 GMT Subject: CN=6907a60a-43ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:2a:9a:3f:bf:2e:1e:e6:59:6c:1c:d3:c6: 5e:57:58:2f:e5:32:ef:3f:18:e1:21:37:b0:bd:f1: 68:f5:33:9c:a3:b2:ba:c5:25:01:f3:1f:d5:96:f1: 56:83:dd:c8:23:d7:b2:78:19:cb:0a:c6:e1:42:c2: 7c:0f:86:1b:61:9a:9a:40:24:a7:82:fe:cc:5e:39: 66:8a:f0:6c:8f:07:b0:0c:e3:e9:46:67:fe:1d:40: 23:50:99:b4:32:d7:58:8a:5a:83:c1:31:15:fa:30: 88:51:c9:28:c0:d3:fa:5f:96:ca:96:b7:00:66:d1: d9:74:85:bd:aa:26:0f:ac:60:3f:80:77:24:98:0c: 26:2e:56:41:90:eb:6b:8c:2e:25:d8:13:8e:76:bd: f5:3e:1b:29:53:3b:e7:b3:97:6c:9d:ab:9b:39:87: 68:28:7d:0f:d2:70:23:7a:79:22:91:48:d7:63:65: 06:8c:93:d5:84:89:db:fc:1f:e6:35:c5:59:6c:f1: d0:e3:86:0d:ba:10:f6:9e:b5:36:08:46:56:32:92: 42:e5:b6:7a:bc:bc:d0:85:71:32:05:a9:36:3f:5e: 81:39:2e:ca:13:f8:c2:5f:96:7e:26:4f:ab:c6:0d: 32:a0:2b:aa:bd:e2:43:b6:ad:96:07:ce:92:64:a5: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FD:96:9A:5D:F0:17:55:7A:D1:68:F9:84:ED:27:89:CD:58:56:8E X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:13:c8:d1:2b:cb:fe:1a:da:14:5f:78:42:c7:60:93:a3:9a: 55:6e:0a:f8:35:7f:77:aa:82:a5:95:67:b2:22:16:7a:3b:1e: 74:30:e0:fc:42:ff:2f:23:a2:52:72:9f:a9:d4:1e:5e:83:01: 00:08:6b:db:38:a7:ac:a5:9e:ef:b0:1e:03:af:f3:93:fe:d1: 20:9d:b1:ae:bb:2c:72:67:f0:95:46:dc:9a:9f:8c:52:32:a4: c0:09:42:41:12:70:bf:97:60:44:0f:49:3c:52:3c:89:20:38: ba:b0:bd:98:7a:9d:96:33:8a:6f:b5:bd:2b:b7:88:5a:cb:21: 22:d4:28:d6:4c:1a:18:5c:f3:62:4c:e4:11:21:09:10:b7:38: 49:9a:5f:6d:6c:f0:15:a8:43:76:b1:0b:fe:6d:43:ae:24:77: eb:3c:a7:79:d2:53:b2:20:c6:e8:ca:69:8d:ee:4b:37:0a:76: a3:c1:32:35:38:4a:db:03:08:fc:c3:f5:90:83:1f:5f:50:76: 72:aa:40:79:0f:93:3f:03:e4:d4:ab:21:0a:e7:4d:3d:81:66: b8:b6:b4:8c:1f:bf:2d:81:0d:1f:de:eb:c7:2a:c7:81:0a:ea: a8:2c:df:3b:d2:8b:6f:c3:c4:f6:2a:41:7b:cb:11:53:29:89: 02:0c:34:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjUxMTAyMTg0MjE4WhcNMjUxMTA5MTg0MjE4WjAYMRYwFAYD VQQDEw02OTA3YTYwYS00M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwUqmj+/Lh7mWWwc08ZeV1gv5TLvPxjhITewvfFo9TOco7K6xSUB8x/VlvFW g93II9eyeBnLCsbhQsJ8D4YbYZqaQCSngv7MXjlmivBsjwewDOPpRmf+HUAjUJm0 MtdYilqDwTEV+jCIUckowNP6X5bKlrcAZtHZdIW9qiYPrGA/gHckmAwmLlZBkOtr jC4l2BOOdr31PhspUzvns5dsnaubOYdoKH0P0nAjenkikUjXY2UGjJPVhInb/B/m NcVZbPHQ44YNuhD2nrU2CEZWMpJC5bZ6vLzQhXEyBak2P16BOS7KE/jCX5Z+Jk+r xg0yoCuqveJDtq2WB86SZKXqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn9lppd 8BdVetFo+YTtJ4nNWFaOMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6E8jRK8v+GtoUX3hCx2CTo5pVbgr4NX93qoKllWeyIhZ6Ox50MOD8 Qv8vI6JScp+p1B5egwEACGvbOKespZ7vsB4Dr/OT/tEgnbGuuyxyZ/CVRtyan4xS MqTACUJBEnC/l2BED0k8UjyJIDi6sL2Yep2WM4pvtb0rt4hayyEi1CjWTBoYXPNi TOQRIQkQtzhJml9tbPAVqEN2sQv+bUOuJHfrPKd50lOyIMboymmN7ks3CnajwTI1 OErbAwj8w/WQgx9fUHZyqkB5D5M/A+TUqyEK5009gWa4trSMH78tgQ0f3uvHKseB CuqoLN870otvw8T2KkF7yxFTKYkCDDRn -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:36 2025 by rpki-client