$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: Lka0CK/3iAycS+CXGJmdpM9JFPpYVwgo4VfRnRACzP8= Subject key identifier: F7:A4:A0:C8:0F:55:B1:1F:1D:CC:28:8F:6E:32:7E:02:AE:F8:DE:BC Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 01B3 Signing time: Wed 05 Nov 2025 03:28:22 +0000 Manifest this update: Wed 05 Nov 2025 03:28:22 +0000 Manifest next update: Wed 12 Nov 2025 03:28:22 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: UmkWzSgQbSthgbJDdEpR6CSiENn5+yRL7DGqfWHHur8=) 2: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: 0lzHMRu/BEbN9XyM7Nn7lU0Tdf9VP7CQevvwrhAJ9I4=) 3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: ySS8x+DTKoqsAepHwvR2qHqY0ZCmV9P1QKOa76HzTlg=) 4: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: oQkH3u9NTYvKUYQPQlkbYyuLgyzF8QlzdxljTJ0MaOk=) 5: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: 2gtTc6ZU74S7+Yus2EBYeK424P/75ngpI7OxmlHbzq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Nov 5 03:28:22 2025 GMT Not After : Nov 12 03:28:22 2025 GMT Subject: CN=690ac456-aa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:82:70:71:c2:23:25:81:7b:e4:3c:4b:3e: ad:e9:f2:dc:2b:99:55:a2:f9:34:4b:44:7f:af:0d: aa:83:1b:06:af:8c:e7:79:08:ea:d3:02:33:76:83: 0e:32:ae:0a:01:8f:3d:99:28:e6:f7:dd:1e:f8:a3: c6:37:2a:44:85:25:36:90:23:e7:84:02:30:d6:aa: b1:6e:bb:56:d6:b1:19:b6:39:7a:7c:eb:95:07:26: 24:08:ad:eb:bf:5e:22:22:7c:e6:0e:f4:10:67:78: 46:d0:fb:a9:01:4f:37:1a:65:49:70:8c:c8:20:5c: a0:4a:c4:e7:0c:85:89:33:76:5a:56:bc:7c:04:e7: f7:01:02:99:e6:06:2c:cb:2f:9b:22:11:a6:b9:90: 13:a4:de:7a:de:d9:1d:94:3b:50:f7:72:e4:cc:6a: 7b:4d:1f:58:ff:c9:51:7a:b1:b0:18:7f:49:8a:bb: a1:7f:35:6b:9b:1d:4f:10:92:c8:4c:53:60:d0:9d: 69:84:16:38:91:52:0c:a7:51:9b:eb:e7:51:d1:e0: 0b:2b:66:9f:08:20:12:0a:2d:dc:90:41:97:f8:56: 1c:fa:fc:3c:1a:b4:b5:9f:45:77:ca:6d:9a:5f:85: 09:8d:31:dd:9b:b2:a0:f3:06:45:ec:c3:6d:64:fb: 52:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A4:A0:C8:0F:55:B1:1F:1D:CC:28:8F:6E:32:7E:02:AE:F8:DE:BC X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:0a:eb:91:b9:70:46:41:f8:2b:b8:4d:52:6a:89:2a:34:50: 82:3e:93:05:ca:a0:9f:d9:69:30:2f:28:a9:1e:32:24:c5:44: 27:b5:71:8c:d4:9e:6a:5f:7e:8b:87:d7:7b:30:4e:48:f8:3f: 35:ca:c3:e2:b0:81:4f:2e:0a:b4:5a:57:c0:4a:93:d7:05:71: a6:5f:23:a0:cc:01:5f:43:61:6b:01:aa:2c:62:87:29:ae:5b: 93:18:d1:bb:45:df:02:94:43:6d:6f:78:ae:7f:7b:6f:d7:30: c9:f8:c8:91:98:3d:c0:d6:12:c8:8d:bf:6c:51:e5:4d:1c:c3: aa:3b:72:47:ba:ab:c8:13:c5:fc:11:3d:f3:ea:8a:7f:27:9a: a4:1b:e7:bb:82:b4:8a:3f:01:fc:c2:2d:1d:36:31:34:ad:33: 44:69:df:a0:2d:82:df:bf:04:17:1c:d6:0f:37:73:50:5a:ed: 96:79:a5:a1:fa:91:39:d3:b9:77:ea:a6:32:c5:80:6d:9d:8a: a9:5f:7e:0f:9d:0e:85:df:89:9f:5a:40:3f:00:52:55:f1:e7: 5f:25:5e:d0:1d:ba:0e:6b:f5:b5:af:6f:ce:6e:d2:d7:6b:c2: 2c:9b:c0:35:c9:57:36:98:21:d7:2e:36:11:56:d7:d7:81:a4: 47:d7:e2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUxMTA1MDMyODIyWhcNMjUxMTEyMDMyODIyWjAYMRYwFAYD VQQDEw02OTBhYzQ1Ni1hYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujqCcHHCIyWBe+Q8Sz6t6fLcK5lVovk0S0R/rw2qgxsGr4zneQjq0wIzdoMO Mq4KAY89mSjm990e+KPGNypEhSU2kCPnhAIw1qqxbrtW1rEZtjl6fOuVByYkCK3r v14iInzmDvQQZ3hG0PupAU83GmVJcIzIIFygSsTnDIWJM3ZaVrx8BOf3AQKZ5gYs yy+bIhGmuZATpN563tkdlDtQ93LkzGp7TR9Y/8lRerGwGH9JiruhfzVrmx1PEJLI TFNg0J1phBY4kVIMp1Gb6+dR0eALK2afCCASCi3ckEGX+FYc+vw8GrS1n0V3ym2a X4UJjTHdm7Kg8wZF7MNtZPtSBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPekoMgP VbEfHcwoj24yfgKu+N68MB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/CuuRuXBGQfgruE1SaokqNFCCPpMFyqCf2WkwLyipHjIkxUQntXGM 1J5qX36Lh9d7ME5I+D81ysPisIFPLgq0WlfASpPXBXGmXyOgzAFfQ2FrAaosYocp rluTGNG7Rd8ClENtb3iuf3tv1zDJ+MiRmD3A1hLIjb9sUeVNHMOqO3JHuqvIE8X8 ET3z6op/J5qkG+e7grSKPwH8wi0dNjE0rTNEad+gLYLfvwQXHNYPN3NQWu2WeaWh +pE507l36qYyxYBtnYqpX34PnQ6F34mfWkA/AFJV8edfJV7QHboOa/W1r2/ObtLX a8Ism8A1yVc2mCHXLjYRVtfXgaRH1+Jk -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:41 2025 by rpki-client