$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: UGhm2JRFNy5cCJdXI2yxTr4rZGXnOQkM+wXHslwnG+g= Subject key identifier: C2:3C:21:3A:85:62:A0:9F:78:03:5D:4E:B6:E8:BE:89:00:61:B9:E7 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0239 Signing time: Mon 03 Nov 2025 01:49:12 +0000 Manifest this update: Mon 03 Nov 2025 01:49:12 +0000 Manifest next update: Mon 10 Nov 2025 01:49:12 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: 3+Wnw0r56+d+0MgzguzAjDndm2mpk9pG1e8NHl3lzKg=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Nov 3 01:49:12 2025 GMT Not After : Nov 10 01:49:12 2025 GMT Subject: CN=69080a18-a1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:5f:ef:50:1e:0d:6c:bd:ec:87:e5:9e:3c: 1b:85:11:2b:04:4e:24:eb:f3:04:9a:4a:5b:e8:40: e5:23:e8:45:2b:16:aa:6e:22:38:d5:b8:ca:0e:58: 71:f3:ec:89:41:b2:f1:96:55:0c:50:8d:7e:84:b6: a2:38:36:aa:81:c9:7c:3e:df:71:3b:03:4c:ad:f4: a8:0b:00:32:d6:23:5a:a6:a7:60:1f:14:b9:f3:2c: 5f:b2:74:2d:08:a0:44:61:4a:2a:f2:20:48:d5:8d: 8e:14:1a:d1:04:12:ba:be:89:c6:59:d1:c0:6a:4b: 75:1a:45:9b:3e:7e:5a:44:ea:1d:fa:2c:80:3f:f6: d4:ac:ab:33:16:91:09:19:24:a3:72:f7:ed:70:0e: 77:e5:bc:e2:24:2e:f8:dc:c5:0b:96:4f:8c:f1:ac: 8a:45:18:15:e2:c8:7c:ad:de:e7:ea:09:16:4d:86: 04:88:0a:94:b7:7d:12:85:06:fd:6e:10:1f:d8:2b: bd:e4:9b:e2:08:42:5b:44:7a:4c:f0:c7:e1:ba:77: 0c:a2:16:dd:79:c5:a5:4c:96:d5:4e:a6:a7:13:54: 2c:7a:94:96:42:4c:a0:83:13:90:49:e6:51:75:e2: bb:71:6e:44:b4:52:7c:b2:56:17:8b:cf:90:19:ad: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3C:21:3A:85:62:A0:9F:78:03:5D:4E:B6:E8:BE:89:00:61:B9:E7 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:17:cd:05:6d:db:74:0e:7b:2c:d3:82:fe:71:dc:3b:b1:16: c7:31:d9:49:74:c6:66:a0:d6:42:23:85:01:98:98:b7:91:9a: 5e:d0:2f:65:2e:a4:8f:03:df:a8:60:1c:ca:f7:36:9d:93:15: 4e:0c:64:54:e8:9e:bc:19:92:c1:a9:71:33:5f:68:af:ec:0d: 54:f8:dd:72:8f:83:5f:40:f8:6d:0a:14:a3:99:e7:91:94:a3: 5d:8c:b5:c2:61:f4:25:b0:ed:98:a7:0a:2b:1c:e5:44:eb:3f: 8e:2f:97:54:fb:c8:72:49:26:88:f9:c1:61:e2:4d:c8:74:11: 18:79:77:7c:ef:18:15:b4:c4:47:bd:32:32:9e:7d:8e:69:5c: 37:ba:01:ba:c8:8e:6a:8f:f0:b8:a2:0c:7b:7f:f0:1e:20:6a: f1:89:90:e6:e1:8c:9c:c6:b1:4b:9c:ab:c5:6e:d7:ab:e2:f0: f4:da:69:33:57:e4:e7:bc:bc:bf:1e:30:29:52:4a:71:bd:65: f2:fc:12:d4:01:3e:84:7f:84:b9:91:2c:45:2b:d4:3f:14:60: 50:44:fc:a2:3f:c3:3e:89:e5:d0:64:7d:4d:d8:27:46:d3:2a: 37:72:55:b5:88:4c:db:45:d6:39:7e:8b:d5:e3:f4:43:5c:a5: 52:7f:96:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUxMTAzMDE0OTEyWhcNMjUxMTEwMDE0OTEyWjAYMRYwFAYD VQQDEw02OTA4MGExOC1hMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYtf71AeDWy97IflnjwbhRErBE4k6/MEmkpb6EDlI+hFKxaqbiI41bjKDlhx 8+yJQbLxllUMUI1+hLaiODaqgcl8Pt9xOwNMrfSoCwAy1iNapqdgHxS58yxfsnQt CKBEYUoq8iBI1Y2OFBrRBBK6vonGWdHAakt1GkWbPn5aROod+iyAP/bUrKszFpEJ GSSjcvftcA535bziJC743MULlk+M8ayKRRgV4sh8rd7n6gkWTYYEiAqUt30ShQb9 bhAf2Cu95JviCEJbRHpM8MfhuncMohbdecWlTJbVTqanE1QsepSWQkyggxOQSeZR deK7cW5EtFJ8slYXi8+QGa1nmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI8ITqF YqCfeANdTrbovokAYbnnMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBF80Fbdt0Dnss04L+cdw7sRbHMdlJdMZmoNZCI4UBmJi3kZpe0C9l LqSPA9+oYBzK9zadkxVODGRU6J68GZLBqXEzX2iv7A1U+N1yj4NfQPhtChSjmeeR lKNdjLXCYfQlsO2YpworHOVE6z+OL5dU+8hySSaI+cFh4k3IdBEYeXd87xgVtMRH vTIynn2OaVw3ugG6yI5qj/C4ogx7f/AeIGrxiZDm4YycxrFLnKvFbter4vD02mkz V+TnvLy/HjApUkpxvWXy/BLUAT6Ef4S5kSxFK9Q/FGBQRPyiP8M+ieXQZH1N2CdG 0yo3clW1iEzbRdY5fovV4/RDXKVSf5Zo -----END CERTIFICATE-----Generated at Wed Nov 5 00:20:15 2025 by rpki-client