$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: QW80niDoQx5HVqT9t471MkEmzBQ+rnhazJDNUyjM9fA= Subject key identifier: DD:0C:A2:08:3B:ED:C2:9D:28:05:06:42:7F:91:D6:7D:E4:49:50:36 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 136B Signing time: Sun 02 Nov 2025 16:59:30 +0000 Manifest this update: Sun 02 Nov 2025 16:59:29 +0000 Manifest next update: Sun 09 Nov 2025 16:59:29 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: M4lE2x/jFT7TcEZIH5mmT3dtCua/qkhFZJ7gMHqCqrQ=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4981 (0x1375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Nov 2 16:59:29 2025 GMT Not After : Nov 9 16:59:29 2025 GMT Subject: CN=69078df1-cd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:ee:62:2e:e2:5c:c1:e4:83:4e:dd:35:91: a0:1f:50:ab:c6:9f:48:58:ba:de:e6:d6:1d:5a:ca: e3:1e:ae:6f:4c:53:c9:1a:17:cc:22:f1:4d:94:7d: a5:13:a9:1c:ad:69:08:72:15:f6:04:1f:59:5e:9c: 64:8f:c7:e0:85:fc:8d:f6:ab:2d:94:53:a1:e1:bd: e6:4f:58:47:d8:b6:ce:02:33:ec:6f:79:2e:4b:11: 55:b4:69:1e:86:c7:70:92:db:96:35:6e:ff:05:96: 9e:d4:20:0a:85:76:b2:f7:dd:b6:6d:f4:85:6d:78: 3a:e3:24:e1:5d:ac:03:d8:76:31:f2:c4:98:e5:dc: b9:32:e0:af:03:00:f4:8b:51:d8:72:c2:bf:15:6d: 13:36:48:e0:be:a2:d3:76:a3:4c:23:b3:12:88:fa: 36:cd:4f:7b:bb:5f:fb:88:de:a8:48:37:34:39:6f: 2f:fb:c4:c7:be:09:f5:8d:79:2d:78:27:de:08:d8: 4e:93:90:f4:7b:ad:81:7a:7f:34:fb:99:85:d3:4f: 74:19:54:a5:ef:4e:66:6d:76:39:d0:0e:ed:00:40: bf:f8:fb:2a:42:5a:86:53:35:e4:65:ca:ae:77:66: 93:de:94:42:11:43:9e:4a:62:b3:c9:b0:4e:b4:47: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0C:A2:08:3B:ED:C2:9D:28:05:06:42:7F:91:D6:7D:E4:49:50:36 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:19:d0:50:a2:19:50:bd:74:8d:cd:e8:fb:ab:a7:c0:ca:65: 2c:c9:c5:94:26:17:ef:10:28:e2:36:fe:d5:d2:3b:ca:fb:bb: 12:4f:d3:69:73:0a:9a:b0:60:cd:ce:43:f2:d8:81:f0:ac:a8: 5c:2c:1f:a6:d3:23:69:86:a9:18:16:8d:9b:f3:7e:7d:3d:ba: 79:2d:66:c7:ea:6d:be:fa:72:80:a1:59:b6:bd:96:2f:32:37: 6d:69:e2:83:43:04:18:40:c3:e6:73:1c:61:03:bd:56:ee:9f: dd:cd:79:1f:ee:d3:c0:41:57:b0:1a:90:ac:1a:24:b3:42:83: 6f:0a:1d:b2:59:6f:bc:4a:7f:d1:ca:3b:83:1f:1e:82:d4:84: 1a:8b:4c:d7:9d:76:22:8c:58:20:ae:8a:c0:17:b0:74:96:d6: bb:c3:e5:51:3c:95:80:31:ee:8f:1a:cf:12:93:1e:1f:01:2c: d9:c8:7b:2c:9e:51:a3:5c:89:4f:24:30:82:e0:a8:7a:4c:3d: e6:28:45:73:56:56:a7:b1:2d:67:5e:32:d9:ce:84:ee:78:20: 2b:b2:98:6d:48:1d:47:0b:57:b9:f8:c4:e1:d1:12:21:d0:aa: 41:00:8f:a3:4c:f4:6a:5f:e5:fb:de:81:ed:ac:80:b3:86:10: 5f:2c:00:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMTAyMTY1OTI5WhcNMjUxMTA5MTY1OTI5WjAYMRYwFAYD VQQDEw02OTA3OGRmMS1jZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZvuYi7iXMHkg07dNZGgH1Crxp9IWLre5tYdWsrjHq5vTFPJGhfMIvFNlH2l E6kcrWkIchX2BB9ZXpxkj8fghfyN9qstlFOh4b3mT1hH2LbOAjPsb3kuSxFVtGke hsdwktuWNW7/BZae1CAKhXay9922bfSFbXg64yThXawD2HYx8sSY5dy5MuCvAwD0 i1HYcsK/FW0TNkjgvqLTdqNMI7MSiPo2zU97u1/7iN6oSDc0OW8v+8THvgn1jXkt eCfeCNhOk5D0e62Ben80+5mF0090GVSl705mbXY50A7tAEC/+PsqQlqGUzXkZcqu d2aT3pRCEUOeSmKzybBOtEdcrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0Mogg7 7cKdKAUGQn+R1n3kSVA2MB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtGdBQohlQvXSNzej7q6fAymUsycWUJhfvECjiNv7V0jvK+7sST9Np cwqasGDNzkPy2IHwrKhcLB+m0yNphqkYFo2b8359Pbp5LWbH6m2++nKAoVm2vZYv MjdtaeKDQwQYQMPmcxxhA71W7p/dzXkf7tPAQVewGpCsGiSzQoNvCh2yWW+8Sn/R yjuDHx6C1IQai0zXnXYijFggrorAF7B0lta7w+VRPJWAMe6PGs8Skx4fASzZyHss nlGjXIlPJDCC4Kh6TD3mKEVzVlansS1nXjLZzoTueCArsphtSB1HC1e5+MTh0RIh 0KpBAI+jTPRqX+X73oHtrICzhhBfLACv -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:51 2025 by rpki-client