$ rpki-client -vvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft File: aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json) Hash identifier: nXjrPoLBszRd3QzS6HrX767XUb9oiALvPqZBHhqf6ik= Subject key identifier: 93:B9:CB:94:4D:5C:C1:29:4F:37:CB:7A:D4:64:8C:41:0F:18:0A:8F Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Certificate serial: 135C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft Manifest number: 134B Signing time: Tue 04 Nov 2025 17:06:44 +0000 Manifest this update: Tue 04 Nov 2025 17:06:43 +0000 Manifest next update: Tue 11 Nov 2025 17:06:43 +0000 Files and hashes: 1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: f5MvWMdPlArApSYcsy/KjbnQxCJfW/EnxnFw5oipB4s=) 2: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: 2Gji4G+Q8to0sVMvyUq5wjYv71c4JLksDjj2P3IW/B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4956 (0x135c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Validity Not Before: Nov 4 17:06:43 2025 GMT Not After : Nov 11 17:06:43 2025 GMT Subject: CN=690a32a3-39fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fa:1f:24:d7:dc:83:d6:2b:15:c2:fa:e8:e4: 09:68:1f:57:5e:42:ce:27:c9:c8:3f:a0:5a:2e:e7: 66:6b:b9:85:dc:c4:bd:4f:a5:71:f1:35:f8:49:9d: c4:31:a9:7b:63:1b:3f:de:79:72:be:f5:f9:75:e5: bc:05:36:33:b1:70:bf:cd:56:dc:58:40:13:29:a2: f4:1d:04:f0:33:ed:b4:d4:d0:f5:ad:b7:45:4c:e4: 15:7c:d3:03:b2:ef:b5:4d:22:5c:fb:cc:7a:1b:f6: 02:97:54:c6:1c:60:93:db:11:38:a6:60:b9:a5:4b: cc:78:b2:2a:8e:1b:b0:7f:f0:40:f0:11:88:0a:6a: 30:51:61:82:96:51:3f:82:13:11:b6:86:94:ac:aa: 59:24:4b:ee:7e:55:64:85:93:d4:b5:a5:ab:99:29: a4:02:62:9b:eb:59:fe:82:aa:9d:54:e8:9f:d3:ab: 4b:1e:10:60:3f:3c:e4:fa:c6:86:eb:4c:1a:9e:89: c0:b2:1f:15:30:ca:5c:5a:f3:34:ee:4f:87:bd:67: fe:8e:2b:e6:24:5a:65:2a:ca:04:fc:df:7b:f5:f4: 49:7e:ff:6e:43:15:b6:80:fe:d9:b0:2d:57:15:9a: 01:3a:fe:6e:16:53:00:75:57:1d:0f:8e:ad:f7:28: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:CB:94:4D:5C:C1:29:4F:37:CB:7A:D4:64:8C:41:0F:18:0A:8F X509v3 Authority Key Identifier: keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c8:e1:9b:80:44:6f:89:f6:80:cb:5f:58:79:68:fd:65:cc: a8:1a:de:2d:57:cc:cf:61:0d:8d:48:bc:3d:7b:9a:80:a2:aa: 18:b8:a9:61:c2:41:37:c1:3d:d5:67:61:75:8f:65:e6:75:14: 45:2f:02:5b:d5:af:cc:7f:4c:6a:73:76:ff:5f:dc:98:8a:56: ed:e0:b2:b6:be:b2:bc:10:60:a8:3f:69:0c:7e:d3:31:04:77: e6:e4:87:f1:59:d2:eb:b8:7f:94:a8:db:6b:c0:07:ff:b8:ad: 1a:02:cd:b0:37:bf:50:a0:df:bf:4e:b5:cb:10:db:e5:17:15: e6:c8:3e:9d:8e:ce:e2:23:7e:63:0e:86:5f:1f:7b:99:2c:7d: 6a:a0:d0:0f:58:5f:ea:f2:05:4d:13:f4:d2:76:fb:c3:11:38: e5:4d:f5:2e:80:cc:30:f9:ae:87:8b:7a:67:4f:ea:01:e6:fe: 62:1f:74:3f:b5:c5:cb:b8:34:0d:90:91:76:93:ef:c6:76:a3: a4:18:7f:4b:6a:e4:6b:dc:49:45:c3:8d:90:8d:e6:45:ed:47: 83:17:25:c8:47:78:b0:5e:2f:64:5e:3c:d6:c0:4c:c6:fe:a8: 3a:54:70:00:8f:c3:11:2d:c6:38:fb:40:8e:ef:07:7d:6a:ed: 57:fc:e6:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz RDY5NTZFMzIwHhcNMjUxMTA0MTcwNjQzWhcNMjUxMTExMTcwNjQzWjAYMRYwFAYD VQQDEw02OTBhMzJhMy0zOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fofJNfcg9YrFcL66OQJaB9XXkLOJ8nIP6BaLudma7mF3MS9T6Vx8TX4SZ3E Mal7Yxs/3nlyvvX5deW8BTYzsXC/zVbcWEATKaL0HQTwM+201ND1rbdFTOQVfNMD su+1TSJc+8x6G/YCl1TGHGCT2xE4pmC5pUvMeLIqjhuwf/BA8BGICmowUWGCllE/ ghMRtoaUrKpZJEvuflVkhZPUtaWrmSmkAmKb61n+gqqdVOif06tLHhBgPzzk+saG 60wanonAsh8VMMpcWvM07k+HvWf+jivmJFplKsoE/N979fRJfv9uQxW2gP7ZsC1X FZoBOv5uFlMAdVcdD46t9yg7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO5y5RN XMEpTzfLetRkjEEPGAqPMB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2 OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5 YV9vSktEQWhfcEU5YVZiakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5yOGbgERvifaAy19YeWj9ZcyoGt4tV8zPYQ2NSLw9e5qAoqoYuKlh wkE3wT3VZ2F1j2XmdRRFLwJb1a/Mf0xqc3b/X9yYilbt4LK2vrK8EGCoP2kMftMx BHfm5IfxWdLruH+UqNtrwAf/uK0aAs2wN79QoN+/TrXLENvlFxXmyD6djs7iI35j DoZfH3uZLH1qoNAPWF/q8gVNE/TSdvvDETjlTfUugMww+a6Hi3pnT+oB5v5iH3Q/ tcXLuDQNkJF2k+/GdqOkGH9LauRr3ElFw42QjeZF7UeDFyXIR3iwXi9kXjzWwEzG /qg6VHAAj8MRLcY4+0CO7wd9au1X/Obm -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:50 2025 by rpki-client