$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: zt8x6RpXF2v8JMaCqDKcq8ba0OQvk2ouznWj0q/0r88= Subject key identifier: A9:D7:B2:A2:D3:59:CD:B7:01:9F:A9:53:2F:7B:42:3B:87:D9:CF:07 Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 049F Signing time: Wed 05 Nov 2025 01:12:08 +0000 Manifest this update: Wed 05 Nov 2025 01:12:08 +0000 Manifest next update: Wed 12 Nov 2025 01:12:08 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: GqiPL2A/A+K5C00W39N42JrVKrTDABvSfXVzdIwIG4I=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: aBiTKrdRm+ziRS/jKwG3ua8HiLf0c5Bx0y3taLaPOUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Nov 5 01:12:08 2025 GMT Not After : Nov 12 01:12:08 2025 GMT Subject: CN=690aa468-2bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:42:ba:3d:d0:e0:59:ae:e7:14:b6:67:41: 42:31:ad:1b:94:a6:a7:29:cc:bd:79:00:cf:e7:18: a8:fe:81:d5:95:4f:04:ca:c0:33:9f:ca:15:61:4a: 1a:6f:c0:93:ba:31:a6:b2:58:07:4e:7b:a1:01:ac: 39:72:3b:9e:6c:6c:95:e9:04:60:6a:cf:6a:3f:42: 91:e7:6b:14:10:8f:09:50:26:9c:a6:9f:b7:dd:f0: 2a:b3:d4:12:82:66:74:a8:dc:1c:c6:12:20:aa:f5: ac:73:ef:d7:1d:f3:ff:d9:ab:6f:4b:60:d5:32:ec: ae:5b:93:40:56:46:f0:07:09:89:0d:25:12:aa:50: d1:c0:aa:f7:39:01:94:34:63:82:37:a1:f8:86:6c: d2:51:e1:f0:4d:82:3f:e5:15:43:b6:94:b4:60:cc: b8:b2:25:20:4d:51:47:aa:e8:a0:f1:02:e8:43:a2: 0f:44:33:ae:fb:15:39:88:a9:9f:a1:3a:dd:32:35: 0b:07:31:13:b8:1b:92:42:33:fc:7b:32:da:94:fd: 11:5e:3d:73:24:be:7a:93:a9:ff:30:a9:22:ce:df: 09:aa:30:2b:1b:ef:83:e8:70:06:b8:6d:ac:2e:6a: 71:d2:5c:18:50:6f:87:1d:fe:ee:bd:fc:5f:77:7f: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D7:B2:A2:D3:59:CD:B7:01:9F:A9:53:2F:7B:42:3B:87:D9:CF:07 X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:58:6b:c6:53:d6:67:6a:15:6f:cc:f9:6c:9d:47:03:5a:a3: b8:43:21:a9:7c:fc:7f:0d:91:c5:f4:b7:93:c1:45:85:60:cc: 1b:33:d3:7e:0b:31:02:45:c4:5f:bf:a7:67:e0:9e:2b:58:2e: 92:58:c6:a7:9a:57:d1:79:f0:06:ef:31:ec:f7:9a:5a:62:1b: b8:e9:5b:58:fb:9c:10:b1:18:ac:09:9c:98:19:d1:f2:16:a9: de:89:c9:0e:23:96:b7:36:bc:e5:90:c0:9b:36:a5:22:1b:0e: 34:f9:db:08:d7:32:8f:a3:4f:08:2d:99:bd:c9:30:55:e9:e6: 8f:f1:d7:38:05:3d:41:d5:ab:79:20:9a:6e:68:40:d3:57:56: 48:86:f9:47:81:07:40:d4:c3:8a:8b:b5:4d:67:95:5d:56:50: 8f:a3:a2:4e:7f:ec:93:37:9e:c4:29:67:04:fa:ca:32:ac:39: c3:31:33:2d:48:06:43:24:c6:9b:df:26:7f:9d:4c:3c:fc:77: 2f:b1:a2:13:6d:a0:25:3c:03:60:b0:21:9f:ee:ca:86:85:56: e4:8b:ba:77:f3:17:71:d7:3e:29:a8:5b:40:79:c3:f2:0c:1d: 29:7c:30:09:c0:7f:54:2f:e4:f3:d4:e1:e1:dc:0a:d9:e1:ed: d6:f9:4e:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUxMTA1MDExMjA4WhcNMjUxMTEyMDExMjA4WjAYMRYwFAYD VQQDEw02OTBhYTQ2OC0yYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T1Cuj3Q4Fmu5xS2Z0FCMa0blKanKcy9eQDP5xio/oHVlU8EysAzn8oVYUoa b8CTujGmslgHTnuhAaw5cjuebGyV6QRgas9qP0KR52sUEI8JUCacpp+33fAqs9QS gmZ0qNwcxhIgqvWsc+/XHfP/2atvS2DVMuyuW5NAVkbwBwmJDSUSqlDRwKr3OQGU NGOCN6H4hmzSUeHwTYI/5RVDtpS0YMy4siUgTVFHquig8QLoQ6IPRDOu+xU5iKmf oTrdMjULBzETuBuSQjP8ezLalP0RXj1zJL56k6n/MKkizt8JqjArG++D6HAGuG2s Lmpx0lwYUG+HHf7uvfxfd3+3lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnXsqLT Wc23AZ+pUy97QjuH2c8HMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9WGvGU9ZnahVvzPlsnUcDWqO4QyGpfPx/DZHF9LeTwUWFYMwbM9N+ CzECRcRfv6dn4J4rWC6SWManmlfRefAG7zHs95paYhu46VtY+5wQsRisCZyYGdHy FqneickOI5a3NrzlkMCbNqUiGw40+dsI1zKPo08ILZm9yTBV6eaP8dc4BT1B1at5 IJpuaEDTV1ZIhvlHgQdA1MOKi7VNZ5VdVlCPo6JOf+yTN57EKWcE+soyrDnDMTMt SAZDJMab3yZ/nUw8/HcvsaITbaAlPANgsCGf7sqGhVbki7p38xdx1z4pqFtAecPy DB0pfDAJwH9UL+Tz1OHh3ArZ4e3W+U6i -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:01 2025 by rpki-client