$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: ogsm4sCCTULLg/WOejLPXrQLbaIGzlmR4ugGqcx0pS0= Subject key identifier: FC:FB:0D:96:75:01:6D:B2:0C:1E:B8:2B:1D:01:CD:0A:55:C4:F2:CD Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 0476 Signing time: Mon 03 Nov 2025 00:06:39 +0000 Manifest this update: Mon 03 Nov 2025 00:06:38 +0000 Manifest next update: Mon 10 Nov 2025 00:06:38 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: Pqm58ubfW9T4qAPuy7fJYkoYMC/6XsnI3jch1sajmj4=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: x1o/7SXGT/4CedCgS5u41onm9GYNi5PSdU5ws280Sfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Nov 3 00:06:38 2025 GMT Not After : Nov 10 00:06:38 2025 GMT Subject: CN=6907f20f-02ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:43:57:0b:5e:e8:24:bc:b0:fc:ea:c6:ef: e7:9d:13:a4:cd:ee:9e:b2:60:42:ad:91:0f:38:24: e3:78:c0:99:e9:f3:f8:19:98:67:f1:84:5f:f9:f3: 58:51:4f:5e:56:d8:12:dc:ce:ae:c7:d2:d7:fa:9f: 14:39:07:8a:12:4b:41:9e:66:16:cb:8f:c4:73:a9: c2:6f:9a:6e:f4:e2:68:97:f9:ba:4b:d6:b0:22:d1: 31:8b:34:d2:4c:96:44:cf:36:69:89:57:c1:ac:67: 30:8a:5d:50:8e:56:0b:cc:f6:43:e6:73:71:be:dd: 7f:9a:96:08:a9:bd:90:b6:cc:7b:bc:2f:0e:90:cf: fa:ea:75:ae:15:12:43:5d:5f:ba:7d:09:28:da:5b: 40:76:42:c1:e1:ae:9e:3e:e6:13:10:f1:55:61:c6: f8:11:2a:12:77:db:21:12:68:b8:59:ac:0f:32:cc: de:1f:9a:f7:da:e4:0b:de:52:fe:f3:36:6c:69:01: 78:b3:a7:d4:ac:41:31:a4:7e:9b:08:fa:7e:f3:70: 9e:35:42:5f:bd:2b:da:00:89:a4:20:52:9d:b8:db: 9e:25:41:54:7e:aa:5d:3e:10:2b:e8:27:bf:e1:4c: 5c:1b:24:a2:76:a7:dd:7d:14:76:58:88:c5:33:3a: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FB:0D:96:75:01:6D:B2:0C:1E:B8:2B:1D:01:CD:0A:55:C4:F2:CD X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:9c:84:06:cb:05:a3:11:d4:09:70:6d:d5:87:08:09:5f:22: 80:02:1d:9f:83:2e:5a:12:65:a2:11:2b:b6:26:3a:c2:ec:d9: 6d:37:e8:c0:b9:86:5f:a1:6c:c5:7a:ec:b5:37:c6:be:ee:04: 4e:4b:ee:38:dc:ae:f7:7c:e7:95:82:b5:70:73:1d:03:f5:b5: f1:37:94:4a:33:5a:b8:0a:41:65:ac:f7:a3:38:90:f0:25:c2: 32:9d:23:02:fa:16:42:7f:86:9f:06:e8:bb:18:ac:e8:4f:5b: b6:d9:fa:29:82:a4:a7:95:ed:93:77:aa:1c:21:42:db:ec:4c: d9:e7:fe:39:46:69:7e:8c:0b:bf:71:c8:f0:68:60:c4:f9:f6: 4f:ae:ba:e7:91:ff:40:6d:82:ae:9d:f6:93:8e:69:69:99:cb: 5a:64:2b:d6:bd:e1:36:53:88:05:74:f6:31:59:a8:a0:5a:ff: 65:db:da:6d:23:0b:5a:1a:09:8a:a1:29:cd:f1:4d:7e:83:ac: c3:9e:49:f3:24:91:8e:ca:e8:23:23:2d:36:8d:cf:a9:99:2b: 22:24:e7:39:32:1d:40:2e:cf:08:e4:6f:b0:04:3d:a8:91:72: 15:c4:a7:d3:87:a0:51:38:00:32:c3:84:54:b6:12:89:c4:97: b5:56:1e:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjUxMTAzMDAwNjM4WhcNMjUxMTEwMDAwNjM4WjAYMRYwFAYD VQQDEw02OTA3ZjIwZi0wMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8BDVwte6CS8sPzqxu/nnROkze6esmBCrZEPOCTjeMCZ6fP4GZhn8YRf+fNY UU9eVtgS3M6ux9LX+p8UOQeKEktBnmYWy4/Ec6nCb5pu9OJol/m6S9awItExizTS TJZEzzZpiVfBrGcwil1QjlYLzPZD5nNxvt1/mpYIqb2Qtsx7vC8OkM/66nWuFRJD XV+6fQko2ltAdkLB4a6ePuYTEPFVYcb4ESoSd9shEmi4WawPMszeH5r32uQL3lL+ 8zZsaQF4s6fUrEExpH6bCPp+83CeNUJfvSvaAImkIFKduNueJUFUfqpdPhAr6Ce/ 4UxcGySidqfdfRR2WIjFMzpbdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPz7DZZ1 AW2yDB64Kx0BzQpVxPLNMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXnIQGywWjEdQJcG3VhwgJXyKAAh2fgy5aEmWiESu2JjrC7NltN+jA uYZfoWzFeuy1N8a+7gROS+443K73fOeVgrVwcx0D9bXxN5RKM1q4CkFlrPejOJDw JcIynSMC+hZCf4afBui7GKzoT1u22fopgqSnle2Td6ocIULb7EzZ5/45Rml+jAu/ ccjwaGDE+fZPrrrnkf9AbYKunfaTjmlpmctaZCvWveE2U4gFdPYxWaigWv9l29pt IwtaGgmKoSnN8U1+g6zDnknzJJGOyugjIy02jc+pmSsiJOc5Mh1ALs8I5G+wBD2o kXIVxKfTh6BROAAyw4RUthKJxJe1Vh6o -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:22 2025 by rpki-client