$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft File: X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json) Hash identifier: fKgNZ2Ottc0ge2kkMWUVpqmlo0pGfQRWSKrg6F3dBoY= Subject key identifier: F6:CF:A0:31:F3:00:C9:21:06:2D:46:C7:97:49:F7:34:B1:7A:53:05 Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA Certificate issuer: /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft Manifest number: 06 Signing time: Wed 05 Nov 2025 08:16:09 +0000 Manifest this update: Wed 05 Nov 2025 08:16:09 +0000 Manifest next update: Wed 12 Nov 2025 08:16:09 +0000 Files and hashes: 1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: sleEXiRUqOHeaAIum7daRIJh1sIEZNetXKnWm/jM0Qg=) 2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: owXPWWTvbOHMdijTrjs5nUjJn72ZVck6W96FPsIZ2aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Validity Not Before: Nov 5 08:16:09 2025 GMT Not After : Nov 12 08:16:09 2025 GMT Subject: CN=690b07c9-c22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:fe:ca:be:23:06:a0:eb:56:5d:3b:3b:5a: 79:06:71:f5:6c:16:f8:7a:42:04:d1:c3:6d:8d:2b: 4b:d6:78:ba:01:2d:c6:11:a7:6a:89:5c:be:98:4c: e0:b0:32:d2:02:17:70:42:6f:ad:3a:6c:1d:0d:bd: 1b:43:5e:92:43:a3:d1:f7:4f:19:3b:b4:3a:91:63: 94:ee:5e:8e:6a:53:08:c8:ff:b0:63:e0:7c:3b:79: b4:2d:7c:c0:68:a3:2a:58:92:bd:6f:71:94:84:be: 67:2a:49:20:91:5e:7d:73:fb:19:94:48:a9:7a:93: 9c:ed:4c:7e:fb:45:fe:fa:55:bc:f1:4d:62:48:be: 72:e0:f1:4e:ad:7b:63:df:53:dc:25:11:de:77:3c: c3:eb:d6:84:64:39:1d:2f:f4:af:73:7f:eb:15:94: ee:a3:78:f7:df:6f:51:2f:d3:2d:77:73:92:56:f3: 80:ae:28:3b:0e:6e:8c:87:9a:0b:fe:ca:d2:f5:92: dd:ed:f4:30:6a:c1:67:91:81:df:6a:ca:ea:68:37: ca:2c:1e:c6:0e:d0:b1:75:de:bf:63:5b:44:71:68: 4c:af:e0:ce:14:4e:be:bb:97:58:83:76:af:cd:81: 53:d1:86:5d:bd:e3:e1:c6:60:03:5d:8d:cb:d8:57: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:A0:31:F3:00:C9:21:06:2D:46:C7:97:49:F7:34:B1:7A:53:05 X509v3 Authority Key Identifier: keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:0b:d1:6f:13:e7:6f:33:38:3b:d5:20:b3:5c:58:a0:4b: 33:19:a0:fa:c1:6e:1c:26:41:72:3a:eb:3b:ea:22:39:78:ef: 93:2c:47:5f:92:b6:96:70:ac:59:2a:5f:68:f7:5e:86:77:40: 71:1b:57:14:f7:25:df:18:d8:4b:bb:01:44:c4:ae:bf:cf:6c: 6c:71:ce:b8:9e:d5:a3:71:95:b1:f9:70:86:a4:84:6b:b7:a3: f7:02:5a:83:b1:50:2a:d6:f0:73:e8:1f:32:8d:1c:a7:5c:ba: ee:57:21:5f:ad:01:e7:5e:13:93:dc:92:33:90:6a:49:f0:cd: af:14:85:4f:74:56:06:38:74:ba:86:19:cc:9b:02:62:1d:07: d9:c5:09:89:1d:2f:0e:63:a5:2a:8f:77:b1:06:63:cc:fd:6f: 32:14:04:17:74:c4:17:35:58:41:4b:a1:4e:d6:78:da:6f:7d: 52:cc:a7:ea:99:61:21:10:5f:d1:99:e0:c7:32:5b:80:80:5d: 25:aa:a0:30:b7:95:16:a6:d6:62:e3:d4:d4:b9:9a:9a:aa:e1: 0d:cb:e6:ae:60:42:01:6b:b2:cd:60:b0:f1:1b:f3:20:ee:29: 85:dd:d4:06:1f:17:50:43:60:2b:7f:76:a4:ea:81:34:98:ca: a0:38:4b:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkY1QjExMC8GA1UEBRMoNUZFRDA0MEZBNkM2QjY1NjRFNDAyQjJFQjc2MzY5MkNF MjQzMDdFQTAeFw0yNTExMDUwODE2MDlaFw0yNTExMTIwODE2MDlaMBgxFjAUBgNV BAMTDTY5MGIwN2M5LWMyMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYRP7KviMGoOtWXTs7WnkGcfVsFvh6QgTRw22NK0vWeLoBLcYRp2qJXL6YTOCw MtICF3BCb606bB0NvRtDXpJDo9H3Txk7tDqRY5TuXo5qUwjI/7Bj4Hw7ebQtfMBo oypYkr1vcZSEvmcqSSCRXn1z+xmUSKl6k5ztTH77Rf76VbzxTWJIvnLg8U6te2Pf U9wlEd53PMPr1oRkOR0v9K9zf+sVlO6jePffb1Ev0y13c5JW84CuKDsOboyHmgv+ ytL1kt3t9DBqwWeRgd9qyupoN8osHsYO0LF13r9jW0RxaEyv4M4UTr67l1iDdq/N gVPRhl294+HGYANdjcvYV79tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9s+gMfMA ySEGLUbHl0n3NLF6UwUwHwYDVR0jBBgwFoAUX+0ED6bGtlZOQCsut2NpLOJDB+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0Q3MURDMjU0QjRC MTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxaT1FDc3V0Mk5wTE9KREIt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWC0wRUQ2Ykd0bFpPUUNzdXQyTnBMT0pEQi1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky RjVCL0Q3MURDMjU0QjRCMTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxa T1FDc3V0Mk5wTE9KREItby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbNC9FvE+dvMzg71SCzXFigSzMZoPrBbhwmQXI66zvqIjl475MsR1+S tpZwrFkqX2j3XoZ3QHEbVxT3Jd8Y2Eu7AUTErr/PbGxxzrie1aNxlbH5cIakhGu3 o/cCWoOxUCrW8HPoHzKNHKdcuu5XIV+tAedeE5PckjOQaknwza8UhU90VgY4dLqG GcybAmIdB9nFCYkdLw5jpSqPd7EGY8z9bzIUBBd0xBc1WEFLoU7WeNpvfVLMp+qZ YSEQX9GZ4McyW4CAXSWqoDC3lRam1mLj1NS5mpqq4Q3L5q5gQgFrss1gsPEb8yDu KYXd1AYfF1BDYCt/dqTqgTSYyqA4S3A= -----END CERTIFICATE-----Generated at Wed Nov 5 16:00:34 2025 by rpki-client