$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: 195q7UxJJdznLrV+IhFv9tWJJpMuAQsFhDCUsHO5ttA= Subject key identifier: 7D:9A:EB:69:AE:A6:AC:93:AD:87:40:F6:D8:74:3D:F3:35:39:C6:69 Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 0647 Signing time: Tue 04 Nov 2025 22:46:17 +0000 Manifest this update: Tue 04 Nov 2025 22:46:16 +0000 Manifest next update: Tue 11 Nov 2025 22:46:16 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: yzuh7smP7v/Xv8pm9KKa31oWPZu/PnaPiGjpYUsgl+U=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Nov 4 22:46:16 2025 GMT Not After : Nov 11 22:46:16 2025 GMT Subject: CN=690a8239-ed2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:23:de:33:74:f9:21:c9:01:85:22:45:91: 7c:a0:f1:07:3e:c2:23:ad:ef:62:94:7f:6d:83:fb: 8e:17:a2:2d:8e:a2:60:32:1c:77:dc:cd:7f:0c:b9: 9b:17:b3:91:fe:7e:a0:0e:96:7f:ec:2f:81:f6:f5: a6:f6:31:c9:03:f4:5f:17:75:28:2d:2f:23:98:02: 23:f2:fc:d4:1f:f3:f3:67:af:93:3a:c8:92:65:e8: cf:a6:74:31:f2:ba:f4:60:16:65:e4:47:2f:f2:1b: 7e:97:b4:b8:64:14:c6:bf:95:7f:55:14:9e:ad:2f: 06:80:62:4a:7d:3b:f5:87:31:f9:4c:de:4f:bb:dd: ff:7d:a6:5a:15:6a:40:94:7b:fd:88:76:e1:29:56: f5:1d:2c:ee:21:c3:bf:dc:23:aa:2d:46:38:19:db: 69:a2:07:a7:46:29:07:08:62:17:73:31:68:89:03: 44:04:4e:73:84:3b:10:6f:e8:d1:ea:0a:df:38:31: 1d:e8:c7:bb:59:97:02:3b:15:ac:fb:9d:94:e9:f5: c0:7f:a2:4d:e4:e2:78:14:0b:16:3e:28:90:32:b7: b0:3e:ac:eb:77:22:79:1f:f9:6c:80:a9:57:ec:d0: e7:bc:8f:5d:07:5f:3b:0a:67:12:d6:61:2b:0c:17: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:EB:69:AE:A6:AC:93:AD:87:40:F6:D8:74:3D:F3:35:39:C6:69 X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ca:cf:58:15:0e:10:c5:82:1c:45:94:bb:92:df:9c:10:ca: 05:99:48:fd:26:4f:cd:56:bc:ab:0e:a7:5f:31:9a:b5:b8:2f: bf:c9:30:81:a0:e5:19:ea:d1:76:53:e0:95:69:a7:d4:84:ce: 32:23:9c:61:20:bb:98:43:88:62:e0:5c:18:c6:d5:c9:51:ed: 9b:9e:f0:42:c4:d4:e5:1f:25:60:93:0f:f7:39:7c:15:f9:63: 45:05:4a:e7:d9:7c:c8:0a:c4:f8:23:45:90:bb:24:91:9e:f9: 71:3e:d8:df:86:29:c0:8c:61:69:db:ca:95:13:2e:8f:14:83: 26:84:b2:9e:53:60:84:61:cb:1c:a8:f0:a9:6c:a0:16:fa:5c: 45:04:7d:bd:12:e1:e1:d8:8e:4b:58:ab:8d:dd:14:93:68:09: 04:92:70:f7:f9:5c:d5:e8:01:da:25:c3:d2:05:b8:e7:b7:fc: 4e:f2:d7:80:fe:4d:42:2c:85:3c:bc:98:39:78:5d:ce:04:36: 30:8e:86:f8:e9:03:5c:80:b8:74:86:95:45:16:dc:64:6c:96: 27:79:94:09:18:1d:16:c6:f3:9b:09:7d:d6:5d:6f:b5:b3:41: 13:a6:d0:18:b1:ec:96:01:4c:f0:a2:db:6d:04:a6:c4:f9:44: 70:79:94:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUxMTA0MjI0NjE2WhcNMjUxMTExMjI0NjE2WjAYMRYwFAYD VQQDEw02OTBhODIzOS1lZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Kwj3jN0+SHJAYUiRZF8oPEHPsIjre9ilH9tg/uOF6ItjqJgMhx33M1/DLmb F7OR/n6gDpZ/7C+B9vWm9jHJA/RfF3UoLS8jmAIj8vzUH/PzZ6+TOsiSZejPpnQx 8rr0YBZl5Ecv8ht+l7S4ZBTGv5V/VRSerS8GgGJKfTv1hzH5TN5Pu93/faZaFWpA lHv9iHbhKVb1HSzuIcO/3COqLUY4GdtpogenRikHCGIXczFoiQNEBE5zhDsQb+jR 6grfODEd6Me7WZcCOxWs+52U6fXAf6JN5OJ4FAsWPiiQMrewPqzrdyJ5H/lsgKlX 7NDnvI9dB187CmcS1mErDBf/xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2a62mu pqyTrYdA9th0PfM1OcZpMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/ys9YFQ4QxYIcRZS7kt+cEMoFmUj9Jk/NVryrDqdfMZq1uC+/yTCB oOUZ6tF2U+CVaafUhM4yI5xhILuYQ4hi4FwYxtXJUe2bnvBCxNTlHyVgkw/3OXwV +WNFBUrn2XzICsT4I0WQuySRnvlxPtjfhinAjGFp28qVEy6PFIMmhLKeU2CEYcsc qPCpbKAW+lxFBH29EuHh2I5LWKuN3RSTaAkEknD3+VzV6AHaJcPSBbjnt/xO8teA /k1CLIU8vJg5eF3OBDYwjob46QNcgLh0hpVFFtxkbJYneZQJGB0WxvObCX3WXW+1 s0ETptAYseyWAUzwotttBKbE+URweZTS -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:28 2025 by rpki-client