$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: 3im1Bt3cmX2SlkcRMTMZfoOoPndDSsH31i7vGp6cuaY= Subject key identifier: BE:A6:71:9B:82:E6:FC:72:EE:A0:D3:2D:EB:65:BE:89:3C:D3:36:98 Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 13 Signing time: Mon 03 Nov 2025 07:54:16 +0000 Manifest this update: Mon 03 Nov 2025 07:54:16 +0000 Manifest next update: Mon 10 Nov 2025 07:54:16 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: h2Qjj/mK6/bpv5zkXIER74v2oelWFvlLcVK08V+91eU=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Nov 3 07:54:16 2025 GMT Not After : Nov 10 07:54:16 2025 GMT Subject: CN=69085fa8-8a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9b:63:50:27:d9:f5:c9:a0:2c:dc:b6:39:50: 66:b9:e3:1d:6c:25:aa:64:20:3e:a7:a9:2a:65:77: 5a:c5:6e:48:b9:e5:7d:56:49:09:c4:9e:b6:c0:a1: 87:cf:ae:85:65:b5:9a:f9:27:3a:22:78:b5:26:1c: 1f:d9:b6:8e:84:38:69:51:d2:59:45:79:c8:10:ff: e5:cf:86:b7:0b:17:57:22:e1:f6:39:fc:cd:f6:ff: 22:9b:b0:c5:bf:5e:d1:8e:48:74:fa:77:21:cf:42: 59:74:db:b3:1b:0b:51:76:8e:c1:12:66:9d:f6:ee: b3:7d:35:20:3d:5f:04:1c:7d:43:53:b9:b9:8f:c6: b3:85:9e:ce:24:0c:5c:ce:7b:e6:38:c7:a2:66:b3: 54:d7:30:0b:ba:9a:89:1e:17:e1:86:ae:49:17:46: 00:b7:dd:dd:b0:bf:24:b3:d5:4f:7a:51:20:a0:a7: 0e:57:e7:d0:95:f3:67:08:4e:08:65:e7:c1:54:ee: 7a:6f:01:1a:2c:44:c7:1e:3f:e2:96:a8:3a:c9:d1: b5:e8:2f:12:0f:78:16:6d:51:5c:27:11:d6:40:5e: 4b:79:c9:c2:81:d3:6f:ec:25:e1:9a:fb:04:e4:fb: b5:9c:bf:e6:12:17:ab:e5:be:0d:5d:65:69:bf:1a: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A6:71:9B:82:E6:FC:72:EE:A0:D3:2D:EB:65:BE:89:3C:D3:36:98 X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:74:b4:87:94:27:7c:a8:6f:a8:7d:ed:7f:31:18:3b:88:e2: 19:d7:5b:fd:a0:82:12:bc:27:c5:f7:8b:79:a7:7b:b3:52:56: 2c:9a:3f:e6:90:6a:7e:b0:7b:40:50:65:32:fa:9f:ca:de:d9: 82:71:02:04:ba:b9:cd:56:d4:31:e9:35:f1:6d:2a:e3:94:b4: 36:3e:06:29:02:65:c9:cf:22:1f:79:c0:6e:1c:11:f3:a1:00: ac:31:aa:99:74:4e:fb:f6:36:ae:de:b1:76:17:78:27:aa:92: 38:9e:7c:44:c0:97:d2:e5:a1:bb:cd:58:36:31:a4:91:7c:88: 24:e7:97:d8:f3:12:d3:7d:4c:8f:f3:a2:27:aa:9e:8a:74:d8: 35:c0:99:a9:8e:b7:3d:aa:5a:b1:0e:f4:b8:94:c2:a1:fe:ad: a1:58:90:30:9c:8d:4f:d7:f1:00:3a:45:cb:b8:c7:3b:5b:05: ec:f6:7c:76:dc:c6:c1:74:bb:e6:92:ce:d3:09:5e:41:9f:51: b1:8d:cb:ef:56:e5:6b:57:51:e0:05:77:b9:b0:c6:9a:19:16: 9a:7e:55:06:44:a0:a9:e9:2e:e1:08:8f:e8:57:79:8e:2a:d2: 2a:22:4b:67:ad:55:ca:dd:c5:a6:f4:1e:6a:3c:e7:21:e3:3b: 83:48:56:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNTExMDMwNzU0MTZaFw0yNTExMTAwNzU0MTZaMBgxFjAUBgNV BAMTDTY5MDg1ZmE4LThhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1m2NQJ9n1yaAs3LY5UGa54x1sJapkID6nqSpld1rFbki55X1WSQnEnrbAoYfP roVltZr5JzoieLUmHB/Zto6EOGlR0llFecgQ/+XPhrcLF1ci4fY5/M32/yKbsMW/ XtGOSHT6dyHPQll027MbC1F2jsESZp327rN9NSA9XwQcfUNTubmPxrOFns4kDFzO e+Y4x6Jms1TXMAu6mokeF+GGrkkXRgC33d2wvySz1U96USCgpw5X59CV82cITghl 58FU7npvARosRMceP+KWqDrJ0bXoLxIPeBZtUVwnEdZAXkt5ycKB02/sJeGa+wTk +7Wcv+YSF6vlvg1dZWm/Gt1LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvqZxm4Lm /HLuoNMt62W+iTzTNpgwHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI10tIeUJ3yob6h97X8xGDuI4hnXW/2gghK8J8X3i3mne7NSViyaP+aQ an6we0BQZTL6n8re2YJxAgS6uc1W1DHpNfFtKuOUtDY+BikCZcnPIh95wG4cEfOh AKwxqpl0Tvv2Nq7esXYXeCeqkjiefETAl9LlobvNWDYxpJF8iCTnl9jzEtN9TI/z oieqnop02DXAmamOtz2qWrEO9LiUwqH+raFYkDCcjU/X8QA6Rcu4xztbBez2fHbc xsF0u+aSztMJXkGfUbGNy+9W5WtXUeAFd7mwxpoZFpp+VQZEoKnpLuEIj+hXeY4q 0ioiS2etVcrdxab0Hmo85yHjO4NIVi0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:06:58 2025 by rpki-client