$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json) Hash identifier: LGsv6Vh7KFI+jGS6LUNfmJU54g+Ixdn5poqZfGqFYZI= Subject key identifier: B5:37:61:AE:60:A5:29:CE:7C:9E:AC:7D:0B:98:5D:53:BE:A7:0A:B2 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft Manifest number: 016B Signing time: Wed 05 Nov 2025 04:08:07 +0000 Manifest this update: Wed 05 Nov 2025 04:08:07 +0000 Manifest next update: Wed 12 Nov 2025 04:08:07 +0000 Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: GQNCwmpNi79N+KMh+qbDIDm/rEEAfqPS3oLxpx2dVGA=) 2: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: bUdGzUMsneNxG9hyE+8dARr88oGYj+0Cl3zzp/qWtdU=) 3: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: 9dttNOR/5up7f2IDlYpMnPIOxHftM1WAtvoPyiR8tNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: Nov 5 04:08:07 2025 GMT Not After : Nov 12 04:08:07 2025 GMT Subject: CN=690acda7-cc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:ee:4a:77:89:6c:eb:e6:5a:de:50:cf:10: 84:5c:7f:6a:69:3d:f3:5e:94:84:23:fc:44:b5:27: 1d:ce:ff:54:7f:94:68:13:58:0a:34:cf:ce:f9:a9: c0:7f:3f:a1:02:1b:7e:c9:bc:06:bd:64:a9:62:c4: 80:b7:fa:59:87:70:13:66:b0:06:8f:97:c8:f6:23: 8b:01:28:bd:b2:da:c3:40:33:68:dd:72:7b:09:76: f7:7c:3c:e4:e8:0a:f8:b0:ca:2f:22:97:d4:06:24: 69:a7:a1:5f:f5:31:b8:6a:b0:b4:f6:1d:ee:0e:d0: 31:65:12:8e:de:2c:d6:e2:05:ee:7e:1d:2a:6c:48: 4a:d7:03:c7:37:8b:42:06:14:0a:87:18:f7:a8:77: ff:1c:15:6d:82:23:16:53:a3:7c:c1:6b:db:8f:bb: 2b:ca:a5:77:aa:e8:e6:fb:d6:8c:55:0e:0f:32:dd: d6:59:7d:73:e4:63:f4:09:9f:46:91:41:94:78:d8: eb:1d:66:2c:6c:b4:34:c5:4a:76:dc:7b:e8:0b:a3: 63:41:fc:a5:3f:16:9c:af:e2:67:ad:17:04:0a:dc: ba:e0:e2:c0:ce:45:41:02:89:2c:fc:2f:81:a3:2f: 05:3e:cc:72:94:0a:49:ac:50:6e:3c:dd:4e:4f:fd: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:61:AE:60:A5:29:CE:7C:9E:AC:7D:0B:98:5D:53:BE:A7:0A:B2 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:d0:f3:57:13:ca:fa:64:df:ee:be:68:f6:54:bb:27:46: ab:cc:ee:27:75:b5:b5:34:88:95:a3:46:64:02:63:03:be:60: 6d:d1:10:66:ed:9c:1a:f7:78:b9:7c:9d:9f:9f:dd:c6:97:b9: a3:5f:89:bd:80:8e:19:8f:15:4e:96:21:7a:01:83:e0:16:f4: 7d:67:12:04:b1:1b:94:a5:01:b0:ac:0c:37:f2:22:51:36:bc: 8e:1e:3d:65:86:8a:61:ed:9e:be:d0:2a:f0:0d:3f:07:6f:13: 69:6e:58:cd:3e:ee:81:b0:d5:e7:6e:5e:8e:b8:ee:b3:61:68: f8:27:dc:3a:04:51:93:14:2e:20:28:9f:6e:1b:80:ba:6c:fb: bc:a3:b0:38:f3:b1:63:e8:91:24:8b:0c:cd:7f:51:6c:38:21: 39:2f:d9:03:37:3a:59:a3:c1:fe:fa:9a:f9:70:62:62:31:bc: d1:9f:5f:0c:ef:95:46:45:d8:94:34:12:1d:25:19:55:65:fb: 86:15:a4:58:1a:b4:d7:e8:63:56:a3:c1:eb:79:be:30:0b:b6: 7d:30:cf:37:6c:3d:67:38:00:da:c4:34:c4:7f:78:fe:2d:bd: 20:e9:38:e7:a9:da:cf:1e:b8:81:f6:b0:35:e7:60:5a:ac:b4: 0e:c9:21:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRDAxMTAvBgNVBAUTKDdBNUM0REQwQTNCQjlDRDgxNEIyMTc0QUY2OTNFM0Y3 NDE0Qjk5NUIwHhcNMjUxMTA1MDQwODA3WhcNMjUxMTEyMDQwODA3WjAYMRYwFAYD VQQDEw02OTBhY2RhNy1jYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/PuSneJbOvmWt5QzxCEXH9qaT3zXpSEI/xEtScdzv9Uf5RoE1gKNM/O+anA fz+hAht+ybwGvWSpYsSAt/pZh3ATZrAGj5fI9iOLASi9strDQDNo3XJ7CXb3fDzk 6Ar4sMovIpfUBiRpp6Ff9TG4arC09h3uDtAxZRKO3izW4gXufh0qbEhK1wPHN4tC BhQKhxj3qHf/HBVtgiMWU6N8wWvbj7sryqV3qujm+9aMVQ4PMt3WWX1z5GP0CZ9G kUGUeNjrHWYsbLQ0xUp23HvoC6NjQfylPxacr+JnrRcECty64OLAzkVBAoks/C+B oy8FPsxylApJrFBuPN1OT/2bqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLU3Ya5g pSnOfJ6sfQuYXVO+pwqyMB8GA1UdIwQYMBaAFHpcTdCju5zYFLIXSvaT4/dBS5lb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZEMC8yQzlBQTMxQzk1 NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25OZ1VzaGRLOXBQajkwRkxt VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZEMC8yQzlBQTMxQzk1NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25O Z1VzaGRLOXBQajkwRkxtVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjR9DzVxPK+mTf7r5o9lS7J0arzO4ndbW1NIiVo0ZkAmMDvmBt0RBm 7Zwa93i5fJ2fn93Gl7mjX4m9gI4ZjxVOliF6AYPgFvR9ZxIEsRuUpQGwrAw38iJR NryOHj1lhoph7Z6+0CrwDT8HbxNpbljNPu6BsNXnbl6OuO6zYWj4J9w6BFGTFC4g KJ9uG4C6bPu8o7A487Fj6JEkiwzNf1FsOCE5L9kDNzpZo8H++pr5cGJiMbzRn18M 75VGRdiUNBIdJRlVZfuGFaRYGrTX6GNWo8Hreb4wC7Z9MM83bD1nOADaxDTEf3j+ Lb0g6TjnqdrPHriB9rA152BarLQOySFR -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:43 2025 by rpki-client