$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: 8ZZoJatqYjmc73dVxd2Fk9mwzpojwLLpB1tScLRZ/BU= Subject key identifier: 89:E6:EC:F9:FF:B1:F7:5E:1B:4C:CF:F8:D5:3C:49:69:3F:96:40:BE Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 0826 Signing time: Sun 02 Nov 2025 20:53:14 +0000 Manifest this update: Sun 02 Nov 2025 20:53:13 +0000 Manifest next update: Sun 09 Nov 2025 20:53:13 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: yvofdNqazvjumn17iCHkLnCHpXU8dp9uRsXSAPamBFs=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 433DCsbHOeQOFPBNJfYwdTpevwJm9hk5VYfRWCXU3fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Nov 2 20:53:13 2025 GMT Not After : Nov 9 20:53:13 2025 GMT Subject: CN=6907c4ba-35e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:b5:75:a1:d7:2b:80:04:b6:3d:b5:3c:d6: be:49:bd:f8:a0:87:52:5d:ff:aa:db:89:ef:cb:43: 8a:44:e3:88:7d:22:b1:b4:51:89:05:dd:ec:72:a7: 61:ca:9b:34:75:bf:b9:67:19:44:94:85:4f:9b:6c: b1:07:00:58:3e:a3:28:71:bf:fc:30:f0:68:58:89: e9:d4:93:0d:ee:38:22:96:d4:f3:fa:ee:cb:4d:9f: e1:3b:b8:08:f6:e5:d4:2b:1a:37:cc:9b:65:a6:ec: c8:ff:3d:c3:7c:5d:df:d9:11:eb:3b:a1:2b:39:41: fa:1d:71:e9:3c:bd:4b:a2:3a:b7:89:c6:24:b6:a6: 01:7a:97:a8:37:4b:a0:85:ee:4f:7b:96:67:d3:f0: 0c:1b:3a:7d:c5:08:51:2c:8c:44:b7:eb:e2:ce:3e: b9:4e:04:2d:90:cc:92:1e:f4:e6:c5:04:a1:68:23: 14:e8:1d:20:e7:c7:71:66:e4:b8:a8:0c:93:65:6b: 3a:ae:e9:cf:ed:d4:b3:bb:b8:9f:61:09:4a:f0:68: 59:d7:79:97:39:e7:df:6a:45:b4:3f:fc:25:79:2a: 30:e9:0e:10:38:0c:ad:12:51:b7:60:23:f8:a6:4b: 35:74:9a:a0:10:30:79:66:f5:44:f0:2c:a9:c1:92: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E6:EC:F9:FF:B1:F7:5E:1B:4C:CF:F8:D5:3C:49:69:3F:96:40:BE X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6a:e7:6e:fd:96:ba:2f:5a:48:78:7f:a6:c8:5e:08:e1:db: d4:21:9d:ae:97:42:f3:04:0e:b2:fb:f7:25:da:77:e1:bf:60: 6d:40:68:02:44:20:aa:f3:82:5a:3a:6c:3f:3b:fe:d9:c3:57: 4b:54:36:9b:ab:9f:40:cb:c7:70:22:82:bd:6f:6f:7e:8a:05: a9:8e:70:62:ef:36:03:2d:c5:05:70:38:6a:7e:a1:17:0b:4d: b1:da:2a:6d:fe:dd:8d:f4:f4:d6:26:82:9e:ec:fc:38:ad:2e: 0c:67:02:ac:f0:3a:6a:4c:ff:80:6d:13:0e:35:7b:3b:98:cf: 12:fa:cf:94:78:d7:45:a4:ba:9e:12:25:86:89:4d:d6:0d:c4: 87:18:f9:e2:b3:69:17:e2:8b:a2:fa:4c:c2:f8:d2:0a:a2:85: f5:09:60:7d:c8:7e:3a:92:27:5a:4e:1d:8f:d7:42:e1:4e:db: ac:b6:75:d7:62:1d:86:90:d2:20:2e:ea:8f:ff:60:0f:22:65: fd:4f:e9:c0:49:3f:ee:e6:37:9a:da:70:0c:f3:ae:9d:29:a2: 15:68:52:3e:71:4d:25:db:a7:e0:c3:c1:20:69:92:fa:d4:6c: a6:1e:4e:90:5a:a5:7a:67:bb:1d:b1:8e:d0:a7:a8:8b:a0:b0: 5c:9f:5a:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjUxMTAyMjA1MzEzWhcNMjUxMTA5MjA1MzEzWjAYMRYwFAYD VQQDEw02OTA3YzRiYS0zNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Bq1daHXK4AEtj21PNa+Sb34oIdSXf+q24nvy0OKROOIfSKxtFGJBd3scqdh yps0db+5ZxlElIVPm2yxBwBYPqMocb/8MPBoWInp1JMN7jgiltTz+u7LTZ/hO7gI 9uXUKxo3zJtlpuzI/z3DfF3f2RHrO6ErOUH6HXHpPL1Lojq3icYktqYBepeoN0ug he5Pe5Zn0/AMGzp9xQhRLIxEt+vizj65TgQtkMySHvTmxQShaCMU6B0g58dxZuS4 qAyTZWs6runP7dSzu7ifYQlK8GhZ13mXOeffakW0P/wleSow6Q4QOAytElG3YCP4 pks1dJqgEDB5ZvVE8CypwZLxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInm7Pn/ sfdeG0zP+NU8SWk/lkC+MB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnaudu/Za6L1pIeH+myF4I4dvUIZ2ul0LzBA6y+/cl2nfhv2BtQGgC RCCq84JaOmw/O/7Zw1dLVDabq59Ay8dwIoK9b29+igWpjnBi7zYDLcUFcDhqfqEX C02x2ipt/t2N9PTWJoKe7Pw4rS4MZwKs8DpqTP+AbRMONXs7mM8S+s+UeNdFpLqe EiWGiU3WDcSHGPnis2kX4oui+kzC+NIKooX1CWB9yH46kidaTh2P10LhTtustnXX Yh2GkNIgLuqP/2APImX9T+nAST/u5jea2nAM866dKaIVaFI+cU0l26fgw8EgaZL6 1GymHk6QWqV6Z7sdsY7Qp6iLoLBcn1rr -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:55 2025 by rpki-client