$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json) Hash identifier: V6IP+GVvGTBrohMNP8sKT0y4OfFzvmZKLPtuWedWkrQ= Subject key identifier: 58:0E:6D:6C:11:69:94:DE:90:2D:6E:5D:3A:2C:D0:79:07:93:D9:54 Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft Manifest number: 08A5 Signing time: Tue 04 Nov 2025 20:35:56 +0000 Manifest this update: Tue 04 Nov 2025 20:35:55 +0000 Manifest next update: Tue 11 Nov 2025 20:35:55 +0000 Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: VWmY92rFWbYitRMTj0/WbZDTHJy2AB0msCbNz6JBHbk=) 2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: +DtZkxjJJ+EZoGvTSPZPjG2CpgddUnM6RS0QhmWQQPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Validity Not Before: Nov 4 20:35:55 2025 GMT Not After : Nov 11 20:35:55 2025 GMT Subject: CN=690a63ac-f32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fe:88:29:65:cd:1a:58:fc:20:72:4e:12:19: 72:0a:94:cd:ae:0e:fa:47:36:6e:96:0f:62:df:ea: 1e:b8:f6:2f:6a:ca:b3:28:cf:1a:48:3d:9e:1d:28: 76:28:ca:0e:b4:64:95:9d:89:c9:ad:60:64:d1:44: 43:4e:91:d2:77:35:6c:69:09:7e:bd:56:33:90:13: 33:66:1b:f3:ec:88:b8:7c:e3:9a:14:99:9e:19:12: bf:66:0c:78:6a:2e:51:e3:ac:1b:65:a9:d3:62:dc: 26:95:fb:fa:f7:8e:87:0f:0f:0c:4b:da:6f:c1:97: 55:bd:db:97:b6:08:6a:99:cd:df:70:ab:3f:bb:2a: b7:31:28:e4:2c:f2:98:3e:c5:53:17:45:fd:be:23: 2b:81:4a:d8:53:58:70:0d:3c:84:ae:d4:73:6e:a2: 73:1e:b9:48:bf:45:ac:57:4c:b4:9f:d3:d0:67:13: 8d:c1:a0:63:d3:fe:60:18:ff:d5:aa:3b:b6:6d:78: a9:d4:e0:9b:46:52:36:28:fb:b5:0f:43:1e:04:37: ff:75:12:df:9c:f7:2b:43:9b:d2:ce:1e:b1:a5:36: 34:ea:6d:a6:a4:e8:1f:03:96:e6:c0:4a:f1:6d:c3: 64:4f:37:72:18:5c:ee:cc:22:c8:d7:bf:da:27:7a: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:6D:6C:11:69:94:DE:90:2D:6E:5D:3A:2C:D0:79:07:93:D9:54 X509v3 Authority Key Identifier: keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7c:ee:ff:bd:2d:28:c2:c8:d2:ac:92:9d:db:da:26:53:1f: 7f:02:0b:54:1a:22:85:2e:1f:bd:d4:9a:5d:a3:a8:26:d5:4e: db:ba:13:8f:d2:15:b4:10:0a:de:0d:2e:37:dc:3a:bc:64:44: e0:1b:87:7b:3f:04:d5:1f:89:34:f1:6b:4d:c1:29:5e:8f:7e: f4:d8:5a:5d:3f:29:68:d0:53:6a:81:a1:96:b7:b4:41:7b:ea: f0:56:1e:80:42:31:56:b3:32:56:81:72:0a:0e:c7:f9:1b:26: 46:c8:11:04:c7:16:ec:5d:e4:af:71:b0:81:4b:1d:64:9f:fc: d7:f8:e0:f3:bb:7c:d9:fa:e0:2b:dd:a0:cf:77:82:b7:ef:77: 02:e0:43:f6:55:d1:57:af:f6:48:dd:fc:df:84:0e:7a:a9:bc: ff:cc:4e:16:ed:6f:63:00:12:5e:42:26:05:4d:f0:7d:14:53: 8d:12:72:d1:ea:06:de:5e:c2:61:4d:70:12:4a:8b:e7:61:81: 5e:2d:ae:7f:7b:c0:07:0e:84:d6:0b:9c:ea:b8:ea:76:aa:81: a1:84:53:5b:29:a3:c4:2b:7f:70:fb:d9:19:e3:24:06:27:2f: 77:40:d3:2c:09:f7:50:6c:75:44:ed:a1:55:ae:86:63:75:a8: 4e:91:9d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5 NjZFRkM4QzcwHhcNMjUxMTA0MjAzNTU1WhcNMjUxMTExMjAzNTU1WjAYMRYwFAYD VQQDEw02OTBhNjNhYy1mMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6v6IKWXNGlj8IHJOEhlyCpTNrg76RzZulg9i3+oeuPYvasqzKM8aSD2eHSh2 KMoOtGSVnYnJrWBk0URDTpHSdzVsaQl+vVYzkBMzZhvz7Ii4fOOaFJmeGRK/Zgx4 ai5R46wbZanTYtwmlfv6946HDw8MS9pvwZdVvduXtghqmc3fcKs/uyq3MSjkLPKY PsVTF0X9viMrgUrYU1hwDTyErtRzbqJzHrlIv0WsV0y0n9PQZxONwaBj0/5gGP/V qju2bXip1OCbRlI2KPu1D0MeBDf/dRLfnPcrQ5vSzh6xpTY06m2mpOgfA5bmwErx bcNkTzdyGFzuzCLI17/aJ3rWbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgObWwR aZTekC1uXTos0HkHk9lUMB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5 NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZfO7/vS0owsjSrJKd29omUx9/AgtUGiKFLh+91Jpdo6gm1U7buhOP 0hW0EAreDS433Dq8ZETgG4d7PwTVH4k08WtNwSlej3702FpdPylo0FNqgaGWt7RB e+rwVh6AQjFWszJWgXIKDsf5GyZGyBEExxbsXeSvcbCBSx1kn/zX+ODzu3zZ+uAr 3aDPd4K373cC4EP2VdFXr/ZI3fzfhA56qbz/zE4W7W9jABJeQiYFTfB9FFONEnLR 6gbeXsJhTXASSovnYYFeLa5/e8AHDoTWC5zquOp2qoGhhFNbKaPEK39w+9kZ4yQG Jy93QNMsCfdQbHVE7aFVroZjdahOkZ2Q -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:36 2025 by rpki-client