$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: SaAoJJ7VpbM1lJyPaMEkshvU2wSwp4tBbDaIgJmT31g= Subject key identifier: 02:5C:EB:65:A3:6D:F2:AB:BD:58:1B:14:D5:B9:D3:BE:9F:AB:13:E6 Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 018B Signing time: Wed 05 Nov 2025 03:41:28 +0000 Manifest this update: Wed 05 Nov 2025 03:41:28 +0000 Manifest next update: Wed 12 Nov 2025 03:41:28 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: UGvj6Kbtpwq45yGM5kRHZjkohlB2xOkLB9mZwJBw9BQ=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: vn17TWtmnQ+kaPqXgcDq2YoeKGokw+dq87l/z9Wtkuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Nov 5 03:41:28 2025 GMT Not After : Nov 12 03:41:28 2025 GMT Subject: CN=690ac768-cb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:1a:55:4f:73:bc:7d:bb:17:9a:75:aa:61: 8d:46:c7:e0:43:1e:3b:97:63:86:a9:ff:83:20:e4: 3d:d3:09:94:12:8f:5e:59:6a:00:eb:16:de:1b:d2: 10:a9:2c:fc:46:ad:63:07:26:7c:bb:cf:5a:9d:87: b2:4e:38:e1:8b:20:ae:08:67:68:08:bb:1a:c2:f5: 81:2b:bf:1e:cf:c4:7e:c2:c3:46:7c:25:d6:df:25: 83:10:16:7f:94:92:78:29:b5:2d:f7:34:fd:82:48: 97:99:18:37:b5:9b:a5:62:67:2b:02:dd:80:db:8b: cd:bb:98:1a:82:9d:1c:5b:35:56:1c:cc:80:c1:f3: 8d:08:1c:02:f5:dd:b9:63:69:5f:da:8b:ce:15:d9: bc:55:a8:0a:9d:25:73:61:6b:08:f5:59:df:33:f7: 70:e9:7d:6f:2f:d1:7f:6f:1f:3c:9f:b3:49:af:69: 42:5b:c6:57:d1:ad:61:cc:32:e7:47:c0:78:87:8e: 8e:1e:df:44:0a:4e:78:e9:79:5a:de:a9:d7:bb:a8: 96:b9:4d:86:94:0c:a2:4a:8e:57:df:48:e9:1a:0a: d4:7b:d8:d4:1c:72:5e:ed:ab:6d:e4:81:a7:99:f2: 23:f1:f6:d0:07:fc:b3:f4:ba:44:f0:19:e7:36:c6: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5C:EB:65:A3:6D:F2:AB:BD:58:1B:14:D5:B9:D3:BE:9F:AB:13:E6 X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:80:a6:35:d8:74:66:cc:66:50:14:00:8e:89:55:f3:07:85: 1c:c8:12:cf:4b:39:44:b7:7b:f2:bb:70:ba:92:58:b4:8e:c1: 81:09:f4:3a:86:80:8a:ed:e1:a7:06:a8:e4:d8:04:40:be:c6: c7:f5:7c:85:c3:03:08:fb:8e:3d:76:af:f8:8d:1b:2f:ba:71: 1d:f3:ba:e2:eb:89:40:92:30:27:a3:0b:17:1a:cf:2e:37:6f: 78:2a:1a:b2:f0:9d:08:1a:3b:00:13:e8:93:9b:84:82:d2:12: 9a:3a:2c:1b:10:6e:fc:d1:3a:cb:22:ac:46:fc:a7:96:8d:7e: 32:54:f9:ea:d1:4d:90:2a:78:62:b6:cf:f7:f1:5d:a4:69:f3: 81:52:ab:7f:1a:29:66:8e:f1:35:3a:1b:c9:71:b4:a6:1c:33: 47:21:4d:aa:0a:28:86:67:ae:50:c8:3e:ea:77:42:53:0c:7a: f9:8c:32:6b:8a:a6:9b:43:75:b5:6f:dc:dd:18:5c:ac:3c:96: 2c:c0:50:1e:24:c6:6a:09:e1:46:b2:02:f5:ad:98:6e:c2:be: a1:c0:31:6f:7c:bf:36:d5:f6:ac:92:38:df:e7:4f:d4:db:7b: db:e5:15:0f:28:0b:53:8d:95:28:97:f3:18:6a:16:ef:65:f9: ba:a8:2f:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjUxMTA1MDM0MTI4WhcNMjUxMTEyMDM0MTI4WjAYMRYwFAYD VQQDEw02OTBhYzc2OC1jYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6caVU9zvH27F5p1qmGNRsfgQx47l2OGqf+DIOQ90wmUEo9eWWoA6xbeG9IQ qSz8Rq1jByZ8u89anYeyTjjhiyCuCGdoCLsawvWBK78ez8R+wsNGfCXW3yWDEBZ/ lJJ4KbUt9zT9gkiXmRg3tZulYmcrAt2A24vNu5gagp0cWzVWHMyAwfONCBwC9d25 Y2lf2ovOFdm8VagKnSVzYWsI9VnfM/dw6X1vL9F/bx88n7NJr2lCW8ZX0a1hzDLn R8B4h46OHt9ECk546Xla3qnXu6iWuU2GlAyiSo5X30jpGgrUe9jUHHJe7att5IGn mfIj8fbQB/yz9LpE8BnnNsYLfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJc62Wj bfKrvVgbFNW5076fqxPmMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYgKY12HRmzGZQFACOiVXzB4UcyBLPSzlEt3vyu3C6kli0jsGBCfQ6 hoCK7eGnBqjk2ARAvsbH9XyFwwMI+449dq/4jRsvunEd87ri64lAkjAnowsXGs8u N294Khqy8J0IGjsAE+iTm4SC0hKaOiwbEG780TrLIqxG/KeWjX4yVPnq0U2QKnhi ts/38V2kafOBUqt/GilmjvE1OhvJcbSmHDNHIU2qCiiGZ65QyD7qd0JTDHr5jDJr iqabQ3W1b9zdGFysPJYswFAeJMZqCeFGsgL1rZhuwr6hwDFvfL821faskjjf50/U 23vb5RUPKAtTjZUol/MYahbvZfm6qC8o -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:49 2025 by rpki-client