$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: RoSTG1mE3/Dt98dVQ7kN7NMUE+5/ELCPGMn+0LzEJjc= Subject key identifier: E2:0C:A5:16:33:EC:26:AE:D3:45:68:78:52:76:50:7F:34:31:F7:57 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 01A7 Signing time: Wed 05 Nov 2025 03:29:06 +0000 Manifest this update: Wed 05 Nov 2025 03:29:06 +0000 Manifest next update: Wed 12 Nov 2025 03:29:05 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: uf/FIAnhEicoOkPAdaRvVXRqjdldQbuILTroP9ao+Yo=) 2: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: 1hUCax5WiGiWQgbYzegA6fFS1jIG16Os9zx/NpFktvA=) 3: D1B29B22765011F0BCBD414BC4F9AE02.roa (hash: TpQVJHA6sSxFaciFmuBU1DFAl38Xh8Nn5sF6lcXLIuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: Nov 5 03:29:06 2025 GMT Not After : Nov 12 03:29:05 2025 GMT Subject: CN=690ac482-e362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:16:d8:3f:07:43:40:e8:45:c2:54:26:b0: 52:ab:48:5e:24:76:21:cd:31:c4:fc:3b:fc:4b:81: c6:73:eb:d0:ec:b4:8f:46:6c:ab:c6:a1:06:53:53: 60:02:13:57:47:55:99:f7:5b:3a:aa:78:37:90:70: ea:e7:44:4f:08:8a:13:18:ca:5a:91:7d:a0:63:56: 7b:a2:6c:50:db:08:13:af:35:15:44:18:33:85:06: 09:87:92:18:7e:54:5e:ba:8e:85:bb:3f:92:9f:76: 14:ad:0b:2a:f7:63:32:54:27:df:c1:b0:33:c3:7d: dd:2f:0a:7b:ba:6b:65:26:94:b4:bb:ad:e8:f5:38: 77:6d:b2:82:39:48:d8:ee:c5:6e:f6:f3:6e:51:c6: fb:93:01:29:92:ec:d2:4f:e0:89:7f:8a:64:6c:7c: 29:f2:e4:33:d9:5e:03:2f:65:60:77:e7:74:57:ea: be:16:e6:f0:fc:57:9c:5c:3a:3a:ce:a9:1e:2a:d4: 1e:14:2e:31:9d:28:19:da:6f:9c:60:8c:10:57:c9: 15:70:3a:7b:5d:b5:5d:9b:1e:08:b9:29:08:66:2f: 0f:ba:3c:c9:6d:68:df:6b:8b:96:d7:da:bc:48:14: e4:09:d8:5f:b4:30:94:6c:a3:05:13:de:54:2d:58: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0C:A5:16:33:EC:26:AE:D3:45:68:78:52:76:50:7F:34:31:F7:57 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:61:2f:ad:dc:15:aa:45:93:81:ee:f0:df:56:0d:da:39:1c: 3d:d6:95:7a:8a:e5:0d:78:10:83:31:19:af:40:8e:b1:79:dc: 25:d7:0c:0a:a1:db:a2:15:d6:ab:50:64:99:d7:bb:fa:52:c5: 0e:f5:4a:0c:6e:a4:d1:9a:08:c5:eb:22:96:a0:3f:4a:9a:a2: da:a4:eb:79:d8:21:69:98:a2:77:48:89:ad:75:48:78:f4:82: e2:91:be:5d:ea:89:07:50:92:90:2d:d4:15:c7:6b:6d:db:d9: f0:aa:2c:74:e9:62:3e:e2:00:e4:13:5e:82:22:f4:69:5d:5c: 32:b8:7d:b5:98:53:77:6e:cf:8c:7d:de:da:e0:69:12:20:90: 58:d8:ef:b0:34:6c:c3:43:d5:2b:2f:a0:29:30:8c:d3:fa:c5: 8e:4c:70:ce:8e:a6:d5:be:88:02:ab:85:83:b8:14:96:71:66: 9e:9e:0a:f1:36:1d:df:0f:ed:9e:b9:e4:86:f8:5e:a5:7c:11: 4e:5b:c3:1a:f5:5f:5b:54:3e:36:78:74:c0:d5:ba:ba:a6:fb: 53:55:39:8c:cc:6f:80:a0:4a:b8:d1:b1:24:ca:fb:27:1d:24: 67:a3:1f:c6:4f:5f:e5:f1:67:58:0d:1b:ad:8e:4d:76:c6:97: d4:18:38:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUxMTA1MDMyOTA2WhcNMjUxMTEyMDMyOTA1WjAYMRYwFAYD VQQDEw02OTBhYzQ4Mi1lMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+IW2D8HQ0DoRcJUJrBSq0heJHYhzTHE/Dv8S4HGc+vQ7LSPRmyrxqEGU1Ng AhNXR1WZ91s6qng3kHDq50RPCIoTGMpakX2gY1Z7omxQ2wgTrzUVRBgzhQYJh5IY flReuo6Fuz+Sn3YUrQsq92MyVCffwbAzw33dLwp7umtlJpS0u63o9Th3bbKCOUjY 7sVu9vNuUcb7kwEpkuzST+CJf4pkbHwp8uQz2V4DL2Vgd+d0V+q+Fubw/FecXDo6 zqkeKtQeFC4xnSgZ2m+cYIwQV8kVcDp7XbVdmx4IuSkIZi8PujzJbWjfa4uW19q8 SBTkCdhftDCUbKMFE95ULVhnxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIMpRYz 7Cau00VoeFJ2UH80MfdXMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2YS+t3BWqRZOB7vDfVg3aORw91pV6iuUNeBCDMRmvQI6xedwl1wwK oduiFdarUGSZ17v6UsUO9UoMbqTRmgjF6yKWoD9KmqLapOt52CFpmKJ3SImtdUh4 9ILikb5d6okHUJKQLdQVx2tt29nwqix06WI+4gDkE16CIvRpXVwyuH21mFN3bs+M fd7a4GkSIJBY2O+wNGzDQ9UrL6ApMIzT+sWOTHDOjqbVvogCq4WDuBSWcWaengrx Nh3fD+2eueSG+F6lfBFOW8Ma9V9bVD42eHTA1bq6pvtTVTmMzG+AoEq40bEkyvsn HSRnox/GT1/l8WdYDRutjk12xpfUGDjY -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:47 2025 by rpki-client