$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: nPPrjT+kzHaG7SJ04u5XjGiXlCqBaZUNEel+c5PnJsc= Subject key identifier: 61:8C:D0:1E:E9:8D:14:50:F8:E6:23:73:23:E4:53:B4:C4:CB:5A:96 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B7B Signing time: Sun 02 Nov 2025 19:01:42 +0000 Manifest this update: Sun 02 Nov 2025 19:01:41 +0000 Manifest next update: Sun 09 Nov 2025 19:01:41 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: Hib8ZsswXKJwMER+tdpGKrFxlpR6V+DUCHtNsL8XNY0=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: HQ+n/zvxBXsyHktY7VZtlLogGsEgUPieMT07w6OWlaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Nov 2 19:01:41 2025 GMT Not After : Nov 9 19:01:41 2025 GMT Subject: CN=6907aa96-47e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:07:b6:a1:c7:c6:7e:c8:b7:59:38:19:60: 18:87:df:83:05:6f:26:95:ba:f3:9d:8d:dc:3f:a6: 43:56:30:b1:b9:24:47:19:d1:e5:86:48:84:82:1f: 81:50:31:c2:8d:81:19:0d:45:fd:9d:0b:74:62:fb: fb:e4:1c:5b:7e:d6:ed:08:7d:3d:d8:4b:ff:27:aa: 7a:52:39:b4:78:24:66:0e:a6:a2:0d:05:d5:09:f6: 4d:47:95:67:86:e9:a3:6a:98:2a:61:86:57:b0:4c: 6a:ed:4f:b0:b7:77:3d:65:c4:0c:a4:21:42:b8:b4: b6:4a:a7:55:bf:5b:1d:6d:5c:d2:12:27:2c:93:0f: 0a:0d:ae:61:d7:09:d4:ed:bf:4e:d2:14:be:67:82: 31:4b:f0:08:02:b8:25:2d:39:e3:03:81:ac:82:8f: a7:e2:3b:30:69:27:27:26:2f:55:28:ea:90:a1:a1: 30:f9:6a:79:8e:41:73:22:ad:3d:17:1a:42:cc:f8: e2:f1:91:f9:6f:6b:d3:67:9d:55:92:51:75:bf:96: 96:fb:64:27:0f:3c:73:37:73:f9:ee:6f:0b:a0:ea: 47:bd:16:36:72:c2:da:b4:af:01:a2:be:2e:09:c1: 0d:7a:d9:c1:be:23:8b:06:da:5e:73:b8:88:ce:89: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:D0:1E:E9:8D:14:50:F8:E6:23:73:23:E4:53:B4:C4:CB:5A:96 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5c:9c:31:8c:e0:48:dd:80:bd:1f:c6:ca:f1:37:1d:54:04: a4:b2:8c:4b:9a:00:f9:1c:95:b7:3c:ae:7d:66:a5:34:82:98: b0:61:49:74:f5:d2:89:44:45:a9:e1:51:ef:60:bc:be:ec:32: 46:c5:6f:45:e4:0d:92:ba:00:f6:1c:81:6a:36:82:40:94:1f: 8d:4c:2f:2e:c2:81:3d:99:19:89:c8:9d:42:f6:43:35:45:87: 9f:63:09:c3:9b:b9:33:24:53:32:2e:fc:23:6f:70:0b:21:70: 6e:b6:7e:2f:e7:81:38:e6:7d:bb:9a:f3:66:c8:f0:d4:3b:ce: 31:b5:c2:46:4b:40:24:8d:b6:e4:aa:9d:3b:7d:01:be:f5:d0: 5b:b2:a8:dc:95:b0:c0:ae:0c:3d:9c:4c:91:6b:01:7f:dc:91: e8:72:c5:f3:01:9c:3b:9a:ad:88:e6:c3:d1:3f:e5:5d:e2:9d: 77:82:f7:47:70:91:67:28:4c:04:ff:0c:1a:4e:76:74:38:94: 8a:12:19:ee:a5:9b:59:bb:3b:69:f0:75:45:ae:38:11:d6:32: 69:a0:8b:7b:c4:e4:e9:b6:46:8f:df:be:32:c9:3a:ac:40:cd: 56:27:21:10:8b:d8:1d:d6:e6:0c:8e:c3:87:be:20:6f:f0:c2: 24:91:c4:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUxMTAyMTkwMTQxWhcNMjUxMTA5MTkwMTQxWjAYMRYwFAYD VQQDEw02OTA3YWE5Ni00N2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwoHtqHHxn7It1k4GWAYh9+DBW8mlbrznY3cP6ZDVjCxuSRHGdHlhkiEgh+B UDHCjYEZDUX9nQt0Yvv75BxbftbtCH092Ev/J6p6Ujm0eCRmDqaiDQXVCfZNR5Vn humjapgqYYZXsExq7U+wt3c9ZcQMpCFCuLS2SqdVv1sdbVzSEicskw8KDa5h1wnU 7b9O0hS+Z4IxS/AIArglLTnjA4Gsgo+n4jswaScnJi9VKOqQoaEw+Wp5jkFzIq09 FxpCzPji8ZH5b2vTZ51VklF1v5aW+2QnDzxzN3P57m8LoOpHvRY2csLatK8Bor4u CcENetnBviOLBtpec7iIzon1mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGM0B7p jRRQ+OYjcyPkU7TEy1qWMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1XJwxjOBI3YC9H8bK8TcdVASksoxLmgD5HJW3PK59ZqU0gpiwYUl0 9dKJREWp4VHvYLy+7DJGxW9F5A2SugD2HIFqNoJAlB+NTC8uwoE9mRmJyJ1C9kM1 RYefYwnDm7kzJFMyLvwjb3ALIXButn4v54E45n27mvNmyPDUO84xtcJGS0Akjbbk qp07fQG+9dBbsqjclbDArgw9nEyRawF/3JHocsXzAZw7mq2I5sPRP+Vd4p13gvdH cJFnKEwE/wwaTnZ0OJSKEhnupZtZuztp8HVFrjgR1jJpoIt7xOTptkaP374yyTqs QM1WJyEQi9gd1uYMjsOHviBv8MIkkcRo -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:00 2025 by rpki-client