$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json) Hash identifier: CdWurj4mNVMz7q2aOmiMqmzxqxo1T09ljYSdl4cMR0g= Subject key identifier: 74:8C:62:A4:D2:12:C2:48:B5:59:A3:17:5D:20:CA:32:A7:00:E9:5C Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft Manifest number: 07E9 Signing time: Sun 02 Nov 2025 21:04:56 +0000 Manifest this update: Sun 02 Nov 2025 21:04:56 +0000 Manifest next update: Sun 09 Nov 2025 21:04:56 +0000 Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: qwc/2iMoK1tEBeGyaUxoD2AxNVbHw0gkd3Me5q4/BtY=) 2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=) 3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: Nov 2 21:04:56 2025 GMT Not After : Nov 9 21:04:56 2025 GMT Subject: CN=6907c778-824c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:bd:9f:d6:4f:9e:af:c9:47:a9:b4:b6:fa: e2:ef:7a:1a:19:5f:e4:09:aa:eb:47:7e:96:2d:b1: 04:f2:7d:b4:06:a5:b8:d5:e2:21:78:2e:5e:5e:4d: 99:bb:71:7e:79:21:a8:97:c4:1f:d5:c1:ae:37:e0: 55:2e:ad:31:2e:92:75:3d:f5:80:5f:a0:3b:f3:cf: ee:d8:6a:b1:e8:6a:ea:71:60:54:82:b1:a4:79:5e: 78:37:6a:0c:59:7c:23:cf:d9:22:ae:1a:7b:7a:0d: c2:65:2a:d9:33:b3:f2:58:ab:2b:5a:22:f3:7b:50: 13:10:ff:40:4a:2f:22:4c:22:e0:b9:1f:2f:46:e9: 11:ca:79:6b:58:cc:5a:1c:8c:44:e9:e9:0c:60:12: 5b:e2:62:3e:b7:89:1c:12:a6:b1:41:0c:00:4e:cb: 17:0e:f9:48:50:8f:76:5f:82:69:48:42:62:7e:6e: 53:d0:af:bf:cc:c7:67:37:6f:b0:e2:e5:de:89:76: 87:99:f3:f4:8a:62:83:fa:35:97:e2:4e:c1:f2:ef: da:2a:9b:e2:fd:48:a0:8c:41:e0:f3:8a:45:95:8a: 6c:3e:d8:b5:a3:f4:10:33:29:9f:83:69:1f:89:ee: c7:d9:8e:46:e6:9c:c0:77:d2:c8:5b:5d:b0:19:a1: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8C:62:A4:D2:12:C2:48:B5:59:A3:17:5D:20:CA:32:A7:00:E9:5C X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:1e:01:5c:ee:08:3d:3a:8f:e8:e9:35:78:b9:56:64:a7:27: b9:c9:26:de:a3:c4:7f:52:13:e4:a8:11:09:bc:a5:a9:c5:db: 21:6a:4f:d3:c2:89:75:04:fd:fa:5a:c6:32:d6:f5:d3:4d:e7: 44:a5:5b:ef:9a:15:97:09:2b:0a:bc:b2:90:66:37:73:6c:17: b3:8f:d3:46:4b:02:3a:b9:4c:89:1c:af:29:64:05:24:32:6c: e5:73:43:b0:2e:0c:2c:dc:09:bb:38:c5:d1:ee:ad:58:07:5e: df:28:28:80:ed:c4:d8:f7:28:0f:47:57:2f:eb:6b:13:d4:4f: 25:6c:d7:b3:ed:72:29:8d:cd:58:d3:de:98:76:42:c0:3c:98: 82:28:45:06:1b:01:dc:26:b7:67:e0:66:73:68:e7:12:ea:a2: 63:8c:16:80:ab:54:9c:14:fc:c2:ed:64:5e:2c:f8:63:3b:bc: 79:26:9b:27:c9:cf:89:f0:13:c7:15:93:43:0c:4c:de:fa:66: 55:13:d0:b6:74:f9:64:b6:ce:c5:66:35:f2:48:10:97:57:ad: 45:71:bd:a2:80:3e:85:30:00:11:41:fd:9c:d3:ab:78:85:54: b4:8d:49:6a:07:6a:54:a6:79:80:62:96:43:fa:51:f2:ed:30: e9:54:a5:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjUxMTAyMjEwNDU2WhcNMjUxMTA5MjEwNDU2WjAYMRYwFAYD VQQDEw02OTA3Yzc3OC04MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ai9n9ZPnq/JR6m0tvri73oaGV/kCarrR36WLbEE8n20BqW41eIheC5eXk2Z u3F+eSGol8Qf1cGuN+BVLq0xLpJ1PfWAX6A788/u2Gqx6GrqcWBUgrGkeV54N2oM WXwjz9kirhp7eg3CZSrZM7PyWKsrWiLze1ATEP9ASi8iTCLguR8vRukRynlrWMxa HIxE6ekMYBJb4mI+t4kcEqaxQQwATssXDvlIUI92X4JpSEJifm5T0K+/zMdnN2+w 4uXeiXaHmfP0imKD+jWX4k7B8u/aKpvi/UigjEHg84pFlYpsPti1o/QQMymfg2kf ie7H2Y5G5pzAd9LIW12wGaF4lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSMYqTS EsJItVmjF10gyjKnAOlcMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3HgFc7gg9Oo/o6TV4uVZkpye5ySbeo8R/UhPkqBEJvKWpxdshak/T wol1BP36WsYy1vXTTedEpVvvmhWXCSsKvLKQZjdzbBezj9NGSwI6uUyJHK8pZAUk Mmzlc0OwLgws3Am7OMXR7q1YB17fKCiA7cTY9ygPR1cv62sT1E8lbNez7XIpjc1Y 096YdkLAPJiCKEUGGwHcJrdn4GZzaOcS6qJjjBaAq1ScFPzC7WReLPhjO7x5Jpsn yc+J8BPHFZNDDEze+mZVE9C2dPlkts7FZjXySBCXV61Fcb2igD6FMAARQf2c06t4 hVS0jUlqB2pUpnmAYpZD+lHy7TDpVKWo -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:53 2025 by rpki-client