$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json) Hash identifier: 9cdTmHc0K1MdBdY1E5mY1kUpLIr4mlGoBGN1URKe1aU= Subject key identifier: F8:76:3E:CF:28:FA:C1:E4:88:5E:14:02:09:EA:8E:B8:FD:4B:11:F4 Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Certificate serial: 0572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft Manifest number: 056D Signing time: Sun 02 Nov 2025 23:19:39 +0000 Manifest this update: Sun 02 Nov 2025 23:19:39 +0000 Manifest next update: Sun 09 Nov 2025 23:19:39 +0000 Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: uGoaN3pWsPQpy2WPWWQgth5mriQ1fQ5i12hoMQ0kVdA=) 2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Validity Not Before: Nov 2 23:19:39 2025 GMT Not After : Nov 9 23:19:39 2025 GMT Subject: CN=6907e70b-2400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:2d:d4:89:77:5e:49:1b:47:40:e3:3b:e5: b2:85:bb:ff:28:a9:45:3b:12:f4:e5:59:a1:19:a2: 14:16:59:11:4b:28:9a:42:0a:3e:16:6b:1c:73:5f: 9e:a4:82:15:08:39:1d:78:83:60:e1:26:07:cf:ad: bb:d1:64:b3:c2:24:e5:b7:e4:29:a4:72:52:30:b3: b9:df:a0:b9:67:02:9f:8b:89:ab:fb:3d:25:c7:71: e7:86:02:8a:95:b2:b0:03:4c:3a:3d:0f:e2:e6:5a: 7e:8b:a2:42:ab:0c:ec:64:1b:ac:f1:3f:e9:71:c5: 83:52:7e:56:ec:6e:9e:98:0b:b6:81:af:63:74:66: 20:51:e2:a9:3b:0a:ce:73:8d:25:35:20:92:6e:36: f2:67:e3:c5:80:50:48:50:af:d1:ee:88:98:11:c4: 92:56:cf:31:59:7c:de:a6:ce:8d:d4:2a:1c:f4:b2: 44:7d:e2:e2:4f:6e:fe:57:85:c8:71:bb:4d:c7:ce: 74:0d:de:e9:4d:c2:7a:27:6c:6d:3b:db:97:14:ec: e2:87:a3:38:d3:06:43:b1:3c:48:3c:68:df:a2:fd: 5f:9b:1b:73:2e:2b:52:a8:cb:d2:3c:1d:25:66:ca: 11:58:1b:3f:80:9f:ba:29:c6:ce:d0:f9:8c:fe:79: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:76:3E:CF:28:FA:C1:E4:88:5E:14:02:09:EA:8E:B8:FD:4B:11:F4 X509v3 Authority Key Identifier: keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:63:e9:d4:a9:36:ce:b3:4b:c8:e5:54:e6:22:f7:aa:a9:9c: 7d:0e:4a:8c:d0:36:c4:e1:c6:30:08:cd:d2:14:70:a6:2d:a0: ce:6d:3b:60:34:33:10:d9:b6:19:cc:6b:74:0f:da:bf:4b:80: fb:db:88:8f:cd:aa:c3:f9:cb:ab:0e:61:5d:d8:b3:8f:47:6c: a5:ea:40:e2:47:24:98:61:40:69:a7:61:07:98:8a:40:39:74: 77:0e:67:64:b7:aa:0e:7e:e6:87:15:c7:e1:ad:ed:9f:db:08: 9f:57:76:a6:f2:34:71:ec:e8:f5:ee:ca:9c:ed:da:c6:37:33: 39:cc:d3:bc:53:5a:64:37:2b:4c:66:0a:49:90:59:f8:6b:ec: d4:4f:e1:7f:9f:d9:03:4e:5e:ed:b5:8d:d8:56:ff:2e:30:19: 04:57:4c:17:dd:94:41:62:c2:bc:58:1b:12:98:43:44:4d:d6: 5c:f5:54:a6:4e:e0:f4:78:a1:8f:55:62:4c:27:c5:48:c0:e3: 83:d0:eb:ba:72:68:9e:86:a6:8d:40:80:41:c1:2a:72:49:ba: c4:e3:16:33:bf:7b:99:44:e5:ab:e5:8e:81:3d:21:79:83:b8: cd:a4:b4:cf:13:5e:98:fe:be:ff:d3:95:94:8a:59:2e:ee:30: 25:49:99:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD NzZFMDEyMDkwHhcNMjUxMTAyMjMxOTM5WhcNMjUxMTA5MjMxOTM5WjAYMRYwFAYD VQQDEw02OTA3ZTcwYi0yNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFwt1Il3XkkbR0DjO+Wyhbv/KKlFOxL05VmhGaIUFlkRSyiaQgo+Fmscc1+e pIIVCDkdeINg4SYHz6270WSzwiTlt+QppHJSMLO536C5ZwKfi4mr+z0lx3HnhgKK lbKwA0w6PQ/i5lp+i6JCqwzsZBus8T/pccWDUn5W7G6emAu2ga9jdGYgUeKpOwrO c40lNSCSbjbyZ+PFgFBIUK/R7oiYEcSSVs8xWXzeps6N1Coc9LJEfeLiT27+V4XI cbtNx850Dd7pTcJ6J2xtO9uXFOzih6M40wZDsTxIPGjfov1fmxtzLitSqMvSPB0l ZsoRWBs/gJ+6KcbO0PmM/nkVnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh2Ps8o +sHkiF4UAgnqjrj9SxH0MB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQyQS8yRDJGODI2NjAxQjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9Z QXBxTjFDZ1ZYWmZIYmdFZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADY+nUqTbOs0vI5VTmIveqqZx9DkqM0DbE4cYwCM3SFHCmLaDObTtg NDMQ2bYZzGt0D9q/S4D724iPzarD+curDmFd2LOPR2yl6kDiRySYYUBpp2EHmIpA OXR3Dmdkt6oOfuaHFcfhre2f2wifV3am8jRx7Oj17sqc7drGNzM5zNO8U1pkNytM ZgpJkFn4a+zUT+F/n9kDTl7ttY3YVv8uMBkEV0wX3ZRBYsK8WBsSmENETdZc9VSm TuD0eKGPVWJMJ8VIwOOD0Ou6cmiehqaNQIBBwSpySbrE4xYzv3uZROWr5Y6BPSF5 g7jNpLTPE16Y/r7/05WUilku7jAlSZk+ -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:12 2025 by rpki-client