$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: Qh1cVQ22wCkWpFdrEBlW8EikSI/veS7QvwZOtLcqcbg= Subject key identifier: 88:12:56:7D:FB:C5:26:98:6E:CF:48:7C:2A:8B:FF:E6:07:D2:0C:DA Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 041D Signing time: Wed 05 Nov 2025 00:27:17 +0000 Manifest this update: Wed 05 Nov 2025 00:27:16 +0000 Manifest next update: Wed 12 Nov 2025 00:27:16 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: +bIkKRM1+rWdV73YGI/cL2cF3+dhOb3FK2zutEvlHvw=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Nov 5 00:27:16 2025 GMT Not After : Nov 12 00:27:16 2025 GMT Subject: CN=690a99e4-2de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:95:5b:b7:c6:5a:5a:07:87:1a:8e:2a:28: 39:65:34:c0:79:bb:d0:59:4d:91:27:27:58:ad:c3: fa:e9:36:b2:4b:f1:87:af:1b:0b:74:fd:c9:f8:80: 87:73:36:81:16:f3:4b:38:fe:88:e6:e3:f3:15:df: ad:07:39:43:99:06:6f:6e:83:cd:47:d6:e0:80:e6: b8:a5:50:fa:e1:a0:0e:40:8f:75:e5:e5:d3:d7:0b: 09:52:bf:e2:eb:14:93:2f:43:8b:02:69:77:0f:5e: 93:63:07:ce:96:0e:81:f7:d3:00:5a:5b:5d:8c:2c: 41:0a:fd:53:48:61:a2:bf:5f:82:88:48:3b:70:b2: 4b:fc:c1:ec:ca:59:fa:bc:b1:25:50:f8:06:75:a9: ec:8c:de:7d:54:9c:cc:d9:79:86:8b:18:82:03:eb: 75:66:f7:c8:ac:23:64:fc:d2:25:71:e7:bb:95:cf: 04:c8:02:88:cd:a3:39:ae:62:5e:0a:a9:59:4a:7b: b4:cd:24:50:e1:df:21:87:0b:48:5a:77:d1:6e:19: e3:0b:64:c1:32:84:e7:cc:ac:2a:1f:b3:c6:1b:c8: 68:ff:39:36:19:7c:fa:e2:91:f5:da:4a:25:ed:cb: dd:47:b0:12:79:11:66:71:eb:72:2c:25:08:42:99: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:12:56:7D:FB:C5:26:98:6E:CF:48:7C:2A:8B:FF:E6:07:D2:0C:DA X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:93:37:fd:ef:57:f1:9f:fa:0b:d6:75:f9:71:a4:a0:7c:b0: f9:3c:df:b4:bd:05:ac:c8:32:47:c6:62:d9:89:2c:35:a6:7e: d3:be:50:bb:fd:d3:5c:6e:bf:1a:7e:86:16:87:ba:57:d7:b2: ea:41:bf:c9:62:40:6a:00:9a:11:4b:f1:62:7f:8c:c9:b8:80: db:cf:77:a6:af:49:67:28:f0:9b:df:a1:3b:5b:d7:d6:12:48: ba:15:6f:70:4d:67:c9:1a:db:6a:e6:22:ce:eb:ec:9c:73:20: b1:f0:05:74:23:df:46:75:31:6c:c4:44:1a:17:62:fb:a9:fa: ad:9d:6e:d4:b0:5f:35:5b:8e:9b:74:2f:9e:b9:c3:52:fb:85: 4a:5b:4b:12:b2:1a:a6:2d:24:6b:e5:c5:83:c3:b0:03:28:00: dc:1c:54:55:d3:fc:d0:33:b4:fd:a2:2f:2a:13:50:dc:65:1d: 99:db:df:83:0e:5e:a9:2e:68:eb:1a:44:2e:70:f7:29:45:bf: 58:72:95:ee:4a:dc:85:d8:50:f5:12:f3:eb:bd:07:5a:5f:28: 0e:7b:be:db:2a:32:b1:9b:78:65:7f:5d:0b:d1:04:13:cb:57: 6c:14:ee:47:33:de:8b:75:d2:bc:be:3b:cd:50:7a:50:da:f1: c2:da:27:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUxMTA1MDAyNzE2WhcNMjUxMTEyMDAyNzE2WjAYMRYwFAYD VQQDEw02OTBhOTllNC0yZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NqVW7fGWloHhxqOKig5ZTTAebvQWU2RJydYrcP66TayS/GHrxsLdP3J+ICH czaBFvNLOP6I5uPzFd+tBzlDmQZvboPNR9bggOa4pVD64aAOQI915eXT1wsJUr/i 6xSTL0OLAml3D16TYwfOlg6B99MAWltdjCxBCv1TSGGiv1+CiEg7cLJL/MHsyln6 vLElUPgGdansjN59VJzM2XmGixiCA+t1ZvfIrCNk/NIlcee7lc8EyAKIzaM5rmJe CqlZSnu0zSRQ4d8hhwtIWnfRbhnjC2TBMoTnzKwqH7PGG8ho/zk2GXz64pH12kol 7cvdR7ASeRFmcetyLCUIQpmEcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgSVn37 xSaYbs9IfCqL/+YH0gzaMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAukzf971fxn/oL1nX5caSgfLD5PN+0vQWsyDJHxmLZiSw1pn7TvlC7 /dNcbr8afoYWh7pX17LqQb/JYkBqAJoRS/Fif4zJuIDbz3emr0lnKPCb36E7W9fW Eki6FW9wTWfJGttq5iLO6+yccyCx8AV0I99GdTFsxEQaF2L7qfqtnW7UsF81W46b dC+eucNS+4VKW0sSshqmLSRr5cWDw7ADKADcHFRV0/zQM7T9oi8qE1DcZR2Z29+D Dl6pLmjrGkQucPcpRb9YcpXuStyF2FD1EvPrvQdaXygOe77bKjKxm3hlf10L0QQT y1dsFO5HM96LddK8vjvNUHpQ2vHC2idL -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:36 2025 by rpki-client