$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json) Hash identifier: 0GiSBbpJc3ZiQQEJmDrhaT78vDXl0XX4SrqHx+DSkNc= Subject key identifier: 9B:B0:84:4B:C7:AD:08:0C:54:A5:F0:77:74:C2:F5:34:6B:8E:B0:0C Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft Manifest number: 12F7 Signing time: Sun 02 Nov 2025 19:02:09 +0000 Manifest this update: Sun 02 Nov 2025 19:02:09 +0000 Manifest next update: Sun 09 Nov 2025 19:02:09 +0000 Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: z13afMJbeCIoJ1aDzP3ROxIqasEweXTFpQOVw5sPWog=) 2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 3j6fcjarkwTsrFF+jI5l1fkUVOMv+A+fXywGLnEk9ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Validity Not Before: Nov 2 19:02:09 2025 GMT Not After : Nov 9 19:02:09 2025 GMT Subject: CN=6907aab1-6316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:ba:74:6e:49:f8:00:cf:6c:ba:5e:ce:27: 4f:fb:70:c6:5c:d8:f3:e1:56:f2:a1:a1:c9:79:6c: 98:12:32:83:c1:46:95:4b:94:63:0a:cf:30:fa:ce: ca:8b:a3:5e:b7:b8:46:56:d0:a7:4f:a5:01:4b:ff: e6:f5:a9:a8:95:ab:97:6a:55:a7:ae:4d:47:85:10: 2d:f1:94:4b:d9:12:69:f9:41:4e:db:f3:b9:df:4b: e3:5a:f1:4d:46:bc:66:1f:b0:26:d7:fe:56:ec:4e: 58:21:8f:29:c2:5a:0b:33:63:ca:7f:d3:05:5c:18: b7:21:29:c5:e2:61:27:1d:d7:29:38:69:c5:2a:30: 68:dc:d9:0b:92:15:7b:c2:31:2d:a3:f4:6c:7d:34: 6b:d2:b9:d2:58:0f:22:91:2f:fb:af:c9:23:47:84: c1:0e:00:02:3f:e8:6b:ed:0b:83:25:1b:0b:f3:59: 08:26:67:34:90:b5:5f:92:21:09:21:43:1c:a1:07: 91:2c:3f:d1:cb:ac:81:88:eb:6c:f5:e0:db:40:af: d2:26:15:aa:29:27:46:df:13:e9:a4:f3:02:b6:b2: f5:cd:49:c8:c2:4c:e8:6c:63:33:83:34:8a:a6:9e: af:d7:1f:c6:0b:11:f9:50:60:05:66:06:a7:85:17: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B0:84:4B:C7:AD:08:0C:54:A5:F0:77:74:C2:F5:34:6B:8E:B0:0C X509v3 Authority Key Identifier: keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:10:2a:34:be:ce:6b:59:32:cd:11:ae:d1:02:7d:fa:7a:22: 3d:32:22:a2:49:55:7d:54:15:b9:d6:e5:65:fe:81:fc:98:af: 8f:fc:cf:20:36:6b:b4:1c:61:81:bc:bd:0c:19:46:4a:7b:ec: 0a:53:22:9d:a1:1f:d8:dd:d6:0e:13:df:ad:3e:9b:7d:a4:e8: 9b:ea:d0:17:57:62:11:bc:19:02:0f:9f:6e:3e:b6:d3:e4:e5: e6:17:45:79:ee:e9:7c:ae:e4:81:26:d5:c7:b2:52:f8:b2:82: e7:0d:c5:79:4c:6b:7a:f2:6d:51:11:01:0e:01:7f:a4:c2:03: ff:08:31:7f:75:d4:a6:f4:dc:4b:52:3e:85:2a:fe:dc:45:68: 98:01:93:8f:26:2d:a5:af:01:89:78:77:b9:c1:4c:d3:6a:ff: d4:1b:1d:58:8f:fb:22:ee:b3:8e:7e:f0:b2:fe:8d:e0:5c:f6: cf:2e:45:c5:4a:fd:5e:55:bc:87:ba:33:e7:69:66:58:82:b0: 5b:8f:9c:34:69:21:2a:98:2b:00:e3:7d:ee:9e:d3:57:77:cf: f7:aa:7a:3d:fe:e8:ed:e1:25:28:77:ef:47:42:d6:49:13:03: 0e:3f:3c:05:6b:32:f2:ac:51:b0:93:2b:bf:5a:87:a6:e6:f9: 30:83:0d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx ODVGRDlDODUwHhcNMjUxMTAyMTkwMjA5WhcNMjUxMTA5MTkwMjA5WjAYMRYwFAYD VQQDEw02OTA3YWFiMS02MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQ+6dG5J+ADPbLpezidP+3DGXNjz4VbyoaHJeWyYEjKDwUaVS5RjCs8w+s7K i6Net7hGVtCnT6UBS//m9amolauXalWnrk1HhRAt8ZRL2RJp+UFO2/O530vjWvFN RrxmH7Am1/5W7E5YIY8pwloLM2PKf9MFXBi3ISnF4mEnHdcpOGnFKjBo3NkLkhV7 wjEto/RsfTRr0rnSWA8ikS/7r8kjR4TBDgACP+hr7QuDJRsL81kIJmc0kLVfkiEJ IUMcoQeRLD/Ry6yBiOts9eDbQK/SJhWqKSdG3xPppPMCtrL1zUnIwkzobGMzgzSK pp6v1x/GCxH5UGAFZganhRddFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuwhEvH rQgMVKXwd3TC9TRrjrAMMB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1ECo0vs5rWTLNEa7RAn36eiI9MiKiSVV9VBW51uVl/oH8mK+P/M8g Nmu0HGGBvL0MGUZKe+wKUyKdoR/Y3dYOE9+tPpt9pOib6tAXV2IRvBkCD59uPrbT 5OXmF0V57ul8ruSBJtXHslL4soLnDcV5TGt68m1REQEOAX+kwgP/CDF/ddSm9NxL Uj6FKv7cRWiYAZOPJi2lrwGJeHe5wUzTav/UGx1Yj/si7rOOfvCy/o3gXPbPLkXF Sv1eVbyHujPnaWZYgrBbj5w0aSEqmCsA433untNXd8/3qno9/ujt4SUod+9HQtZJ EwMOPzwFazLyrFGwkyu/Woem5vkwgw2t -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:37 2025 by rpki-client