$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: G6zSRN2qU5sRUqaNW9NBxdt3DbIlttOZtfzh9VX3vaQ= Subject key identifier: 74:AA:7F:36:B4:44:25:01:82:FE:CD:62:3C:BE:84:4E:2F:D7:20:31 Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 05DA Signing time: Sun 02 Nov 2025 23:00:26 +0000 Manifest this update: Sun 02 Nov 2025 23:00:26 +0000 Manifest next update: Sun 09 Nov 2025 23:00:26 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: mqQcuiUrK2xcWBt6SiqOHfWpVQSZNp3UFrEW/jxu81Y=) 2: 8FE569EC776B11F0B156EB5AC4F9AE02.roa (hash: 05ONJ6gn6THBNIdjw9547Y3Ra4e7ZSd6nxQro/5YWpc=) 3: 872A7C2A73A111F0A653E239C4F9AE02.roa (hash: eJZB22mbfBjXQGnbEMxJ+IY2H2YTZ4yy9O9aqK+bNis=) 4: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: t7eknxpJ+dZ+sJQnSi245edufycu6QV4awrd/RTcAXE=) 5: E90DFC9CF00111EFB541185CC4F9AE02.roa (hash: TuWKlHncV9ol4wZzYVUEuu8aecG1wWBFbcB1ZNq2FKQ=) 6: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: 8GLZSq2u4K0rZRuLFUVu2DZuH9B8VodmiF5KxyYmSr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: Nov 2 23:00:26 2025 GMT Not After : Nov 9 23:00:26 2025 GMT Subject: CN=6907e28a-8bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:ee:17:f5:c6:31:63:ad:96:43:94:09:79: 63:ea:3b:d3:09:5a:fe:f5:78:79:a4:6e:cb:f8:f3: d9:17:63:b5:27:14:93:d8:a2:0b:44:66:32:d1:77: e5:ec:bc:f9:e2:f1:69:61:cb:4e:f3:19:90:de:bd: bc:e3:15:56:98:e5:1f:27:87:eb:da:7c:75:c5:90: 9c:02:c8:40:be:e2:d1:34:10:dc:6c:4c:77:6d:78: 64:cb:ff:b3:e3:bb:62:14:3d:f6:6f:8c:32:89:2f: 87:68:e7:da:bb:51:6c:17:bc:7c:a7:d1:bf:0e:a7: 37:b3:5c:bc:91:dd:6b:68:8e:af:e6:05:f6:12:30: ca:93:49:64:6f:f0:e2:a9:97:69:52:ad:32:34:75: b4:9c:85:f3:21:dc:b7:f2:9c:30:13:8f:92:f4:d9: aa:ba:28:d6:c1:1f:24:4e:35:73:d5:45:a4:2f:e2: 78:b8:ff:b5:34:f5:3c:a0:2b:b8:0f:f1:ae:5e:e8: 84:e0:b9:cd:80:34:9c:de:ac:1c:be:82:4f:b3:53: 8f:43:5c:d0:61:90:75:6d:cd:16:e9:a1:23:b7:89: 5d:d7:6a:ae:04:46:96:21:61:40:97:34:6c:f0:79: fe:0f:f5:94:1b:f6:07:88:77:ae:a0:42:9a:e1:10: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:7F:36:B4:44:25:01:82:FE:CD:62:3C:BE:84:4E:2F:D7:20:31 X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:68:3a:eb:57:37:16:09:bd:6b:92:ed:9e:92:7d:9c:81:fe: 00:b6:4d:44:4e:d6:35:f3:78:eb:ee:14:92:9c:5e:8e:66:47: f1:8a:4d:1b:5b:f4:e4:f8:30:af:88:2c:03:ee:54:cc:2d:35: 1f:f0:2b:84:8c:67:9b:d8:d2:82:e0:bb:89:74:3d:8e:8d:10: 80:a2:be:a1:f9:c6:bf:f9:ee:87:ca:fe:d5:6c:ac:01:af:3e: 0f:a5:64:0c:6c:b1:be:f9:9f:fe:fe:f3:c5:29:d7:81:33:d9: 78:00:39:46:47:a2:43:34:83:dd:77:d5:75:7b:8f:ac:63:f7: d3:90:fc:25:63:08:21:4f:b7:aa:c4:9f:88:1d:2e:c2:fb:fd: 25:e1:89:84:38:d4:b3:ba:61:a6:59:e1:de:9a:52:5c:66:cc: 49:1e:0b:a5:f2:b1:c2:df:c8:5e:90:23:95:5d:eb:04:0c:03: b5:b8:cc:bb:90:0b:ba:5a:8c:7f:25:e4:6c:61:53:18:92:8c: 03:37:95:4d:05:9e:61:cf:6a:c7:b2:55:4e:5e:18:0e:91:ca: fd:ce:e7:9e:47:21:f2:82:99:dd:77:ac:56:96:e6:f5:ef:36: 9b:7c:3f:bd:8c:38:87:ea:7f:67:57:99:33:e7:0f:0c:ee:f9: 8e:02:76:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjUxMTAyMjMwMDI2WhcNMjUxMTA5MjMwMDI2WjAYMRYwFAYD VQQDEw02OTA3ZTI4YS04YmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOHuF/XGMWOtlkOUCXlj6jvTCVr+9Xh5pG7L+PPZF2O1JxST2KILRGYy0Xfl 7Lz54vFpYctO8xmQ3r284xVWmOUfJ4fr2nx1xZCcAshAvuLRNBDcbEx3bXhky/+z 47tiFD32b4wyiS+HaOfau1FsF7x8p9G/Dqc3s1y8kd1raI6v5gX2EjDKk0lkb/Di qZdpUq0yNHW0nIXzIdy38pwwE4+S9NmquijWwR8kTjVz1UWkL+J4uP+1NPU8oCu4 D/GuXuiE4LnNgDSc3qwcvoJPs1OPQ1zQYZB1bc0W6aEjt4ld12quBEaWIWFAlzRs 8Hn+D/WUG/YHiHeuoEKa4RBOQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSqfza0 RCUBgv7NYjy+hE4v1yAxMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTaDrrVzcWCb1rku2ekn2cgf4Atk1ETtY183jr7hSSnF6OZkfxik0b W/Tk+DCviCwD7lTMLTUf8CuEjGeb2NKC4LuJdD2OjRCAor6h+ca/+e6Hyv7VbKwB rz4PpWQMbLG++Z/+/vPFKdeBM9l4ADlGR6JDNIPdd9V1e4+sY/fTkPwlYwghT7eq xJ+IHS7C+/0l4YmEONSzumGmWeHemlJcZsxJHgul8rHC38hekCOVXesEDAO1uMy7 kAu6Wox/JeRsYVMYkowDN5VNBZ5hz2rHslVOXhgOkcr9zueeRyHygpndd6xWlub1 7zabfD+9jDiH6n9nV5kz5w8M7vmOAnbO -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:32 2025 by rpki-client