$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: 42+Z0Va2wsJkJMhrqmr/wckYVyLPkDiD6wtLZ1WZ3jM= Subject key identifier: 8C:02:D6:91:91:2A:62:99:CE:49:CF:5B:19:5A:6E:E9:44:E6:84:84 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 04CC Signing time: Tue 04 Nov 2025 23:56:02 +0000 Manifest this update: Tue 04 Nov 2025 23:56:01 +0000 Manifest next update: Tue 11 Nov 2025 23:56:01 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: gRKc+XqPa3Zd9jR1hO8IMuLctdIx2y4S+Lzvnr112hM=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: 7VHkgX/mbThqgLkAc7wHG3m+rvoalBNxxWk0mMeVuao=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: NIvct8fJn9M1iEY9RRPmR0E04PRAFDynGMtQ70vSFyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Nov 4 23:56:01 2025 GMT Not After : Nov 11 23:56:01 2025 GMT Subject: CN=690a9292-6dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:f3:5a:49:c4:53:07:17:b3:b7:72:04:0d: 31:cc:d8:99:61:f9:d9:fb:87:b4:42:9b:6d:c9:f1: f8:3f:2d:3a:1b:b8:21:b1:ee:4d:61:d1:6b:1e:60: 56:4a:2d:95:44:74:e5:27:3d:25:a0:03:46:0b:f2: 4d:b3:8a:6a:07:f7:e2:77:fd:06:bd:f3:07:c0:e7: 22:ae:a8:ab:91:60:71:79:6e:34:0e:59:fb:11:08: 29:14:84:23:20:59:b2:58:4b:50:50:1a:0c:22:17: 98:cc:ba:3d:f1:5b:62:c8:17:54:08:93:e2:aa:66: 17:b8:55:0a:38:28:9d:fe:3d:78:c0:1b:da:f0:ad: d9:d3:ba:09:fd:c2:88:7c:bb:6d:fb:ca:cb:27:83: 7f:20:a6:28:70:75:5f:ae:7b:1b:df:f4:a9:0f:65: be:87:69:19:45:e3:a0:e3:b8:62:fb:43:f3:a8:02: 1d:74:84:ce:d6:bb:e4:f4:a1:94:ce:cb:5c:7a:1d: dd:8e:57:42:30:b1:4b:0e:d3:ce:b5:82:5e:65:42: 28:3d:ef:3c:0e:73:0c:cb:68:ab:e4:34:04:79:99: b0:5f:c1:5f:bd:ab:50:7e:47:e5:40:16:3b:76:62: 92:01:b6:46:31:79:da:40:de:f4:fa:6c:c9:c5:31: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:02:D6:91:91:2A:62:99:CE:49:CF:5B:19:5A:6E:E9:44:E6:84:84 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1f:da:d0:ba:d6:4b:fa:df:b1:ef:de:37:8a:fa:cb:1b:1b: 23:a6:b6:58:c7:6c:4c:e0:d8:33:ad:2d:63:ab:b8:9d:60:2d: dd:35:d7:bb:a9:6f:e0:e5:91:73:ef:e6:8c:cc:aa:a8:e7:b8: 2a:9d:72:4a:97:c7:b9:8a:b9:d3:89:56:99:9f:20:04:d6:b5: 9c:04:79:73:d8:d1:17:4f:0c:63:ed:71:16:ca:f7:fc:fd:17: 7d:be:a4:dc:f3:44:bb:28:50:82:36:f7:37:9a:6a:95:d7:95: d5:79:a4:4b:11:4f:8d:3a:a3:0b:9c:9d:81:e1:5c:ac:1c:bd: d1:24:b4:12:8f:55:7b:90:de:8f:86:66:bb:b7:dc:a1:00:d2: 6b:44:18:1c:ed:b6:d8:20:1e:08:d9:3c:66:b3:29:7f:3a:5b: 21:e9:86:89:1b:4e:45:1c:3c:d6:6d:81:cd:ed:f0:5d:1e:2c: 97:da:f3:d3:09:7e:ae:4b:be:89:83:f0:32:36:b8:9c:fd:dd: 15:f8:ff:33:1b:2b:a5:b4:d2:4a:cb:20:81:98:a3:6a:e2:68: ea:61:ec:7e:53:f6:32:30:62:c7:7c:24:3f:02:fb:5e:25:2b: c3:be:e9:6d:75:d6:8b:c3:7b:ad:36:be:a2:91:60:83:94:86: 84:4b:54:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMTA0MjM1NjAxWhcNMjUxMTExMjM1NjAxWjAYMRYwFAYD VQQDEw02OTBhOTI5Mi02ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1m7zWknEUwcXs7dyBA0xzNiZYfnZ+4e0QpttyfH4Py06G7ghse5NYdFrHmBW Si2VRHTlJz0loANGC/JNs4pqB/fid/0GvfMHwOcirqirkWBxeW40Dln7EQgpFIQj IFmyWEtQUBoMIheYzLo98VtiyBdUCJPiqmYXuFUKOCid/j14wBva8K3Z07oJ/cKI fLtt+8rLJ4N/IKYocHVfrnsb3/SpD2W+h2kZReOg47hi+0PzqAIddITO1rvk9KGU zstceh3djldCMLFLDtPOtYJeZUIoPe88DnMMy2ir5DQEeZmwX8FfvatQfkflQBY7 dmKSAbZGMXnaQN70+mzJxTF9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwC1pGR KmKZzknPWxlabulE5oSEMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXH9rQutZL+t+x7943ivrLGxsjprZYx2xM4NgzrS1jq7idYC3dNde7 qW/g5ZFz7+aMzKqo57gqnXJKl8e5irnTiVaZnyAE1rWcBHlz2NEXTwxj7XEWyvf8 /Rd9vqTc80S7KFCCNvc3mmqV15XVeaRLEU+NOqMLnJ2B4VysHL3RJLQSj1V7kN6P hma7t9yhANJrRBgc7bbYIB4I2Txmsyl/Olsh6YaJG05FHDzWbYHN7fBdHiyX2vPT CX6uS76Jg/AyNric/d0V+P8zGyultNJKyyCBmKNq4mjqYex+U/YyMGLHfCQ/Avte JSvDvultddaLw3utNr6ikWCDlIaES1QH -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:59 2025 by rpki-client