$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: cTyoAdyc5GFvYJwh3r4VEkKN2WDPPlgAej2+Twpudvs= Subject key identifier: E4:F5:8D:F4:17:F0:0F:CF:3D:16:29:4A:54:30:9D:9D:FF:20:E3:0E Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 057E Signing time: Sun 02 Nov 2025 23:14:51 +0000 Manifest this update: Sun 02 Nov 2025 23:14:51 +0000 Manifest next update: Sun 09 Nov 2025 23:14:51 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: ZFXhj3sPxpPd0W6fYOvyaAj55O7XwveCgtnlD/sos5M=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 2XbXZcyCmkwNngGPogkbhBm8QONSr+SCdJI+4quVjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Nov 2 23:14:51 2025 GMT Not After : Nov 9 23:14:51 2025 GMT Subject: CN=6907e5eb-61c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:45:8e:81:be:32:55:3d:75:b6:41:87:f5: 65:c2:22:b6:cb:11:dc:af:02:e7:83:e2:41:de:a8: 42:b9:ae:4c:23:c5:6c:72:fb:52:5e:5c:f3:39:e0: 64:4f:aa:67:60:47:10:9e:f8:cf:42:c1:d6:22:bd: 33:99:de:03:35:06:3d:25:5e:57:49:30:39:1d:e3: cc:13:87:27:77:ea:fc:ba:13:62:bc:3d:be:29:9b: a3:90:5f:b9:6b:b0:33:ef:79:05:75:f5:e2:cf:51: 11:4a:aa:7f:69:6a:ef:52:d5:63:00:c1:75:00:f5: 24:70:12:5e:99:6a:a6:9e:ee:ba:9e:b9:00:2a:39: 9f:bb:4a:c6:6a:0f:02:9a:14:17:ed:b8:5a:a5:78: 02:c0:8e:16:1c:e4:06:6a:81:03:c8:4c:ba:5c:9e: a8:6c:73:8f:5c:54:38:cd:62:44:08:7d:17:dc:31: 34:b1:e5:d2:ce:ea:68:3e:fc:61:e0:08:b0:1e:c9: 22:b7:79:3d:9c:99:df:37:5d:fa:11:42:fd:d8:da: e1:24:77:68:7f:36:68:19:8c:73:33:ad:1c:95:54: 89:e2:14:03:2c:25:6e:1b:5a:1e:85:f1:6f:de:ae: b0:ca:55:93:bc:cc:df:5c:e3:72:8f:4d:3b:91:41: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F5:8D:F4:17:F0:0F:CF:3D:16:29:4A:54:30:9D:9D:FF:20:E3:0E X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:78:4d:61:9f:b6:62:5e:79:ef:b6:08:ac:9d:fd:ef:d4:45: f9:e8:aa:2f:87:38:59:bd:c8:a1:ae:c0:6f:76:72:a2:5c:ca: f3:4f:91:cd:88:5f:14:4f:e0:6a:0d:98:f8:7c:1b:31:4c:fe: d9:32:70:49:44:d2:27:9f:04:b0:a2:0e:c5:29:eb:2f:63:80: 50:a2:2b:2c:5c:06:47:41:23:31:62:5b:e8:f4:f7:57:96:b9: ac:81:91:41:0f:29:27:cd:28:90:17:c9:d5:a3:05:6c:cc:1a: 84:fe:f4:0a:d6:b1:31:cc:6b:d7:a4:8a:82:08:a9:df:1d:77: 10:a7:9b:95:47:f1:de:81:26:4e:d7:a7:a4:0c:62:97:80:90: c5:96:f2:fb:99:b7:b6:40:ea:a4:d0:9a:76:0f:73:b4:15:24: e2:0f:35:e6:47:e7:29:62:86:7a:f8:4a:69:a4:f3:85:95:fc: 33:5f:9a:90:7b:e5:98:0e:86:72:8d:df:09:4a:c1:20:86:8f: 6b:37:d7:23:a8:7e:39:9f:f7:66:98:28:9f:e3:ad:9e:99:c9: 37:69:87:9b:ac:f3:40:04:26:4c:5e:24:ee:88:c1:38:f7:da: ff:c2:54:fe:85:3f:9e:8c:c8:60:d6:a1:a4:e0:0b:42:75:70: 05:16:17:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUxMTAyMjMxNDUxWhcNMjUxMTA5MjMxNDUxWjAYMRYwFAYD VQQDEw02OTA3ZTVlYi02MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUZFjoG+MlU9dbZBh/VlwiK2yxHcrwLng+JB3qhCua5MI8VscvtSXlzzOeBk T6pnYEcQnvjPQsHWIr0zmd4DNQY9JV5XSTA5HePME4cnd+r8uhNivD2+KZujkF+5 a7Az73kFdfXiz1ERSqp/aWrvUtVjAMF1APUkcBJemWqmnu66nrkAKjmfu0rGag8C mhQX7bhapXgCwI4WHOQGaoEDyEy6XJ6obHOPXFQ4zWJECH0X3DE0seXSzupoPvxh 4AiwHskit3k9nJnfN136EUL92NrhJHdofzZoGYxzM60clVSJ4hQDLCVuG1oehfFv 3q6wylWTvMzfXONyj007kUFXgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT1jfQX 8A/PPRYpSlQwnZ3/IOMOMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6eE1hn7ZiXnnvtgisnf3v1EX56KovhzhZvcihrsBvdnKiXMrzT5HN iF8UT+BqDZj4fBsxTP7ZMnBJRNInnwSwog7FKesvY4BQoissXAZHQSMxYlvo9PdX lrmsgZFBDyknzSiQF8nVowVszBqE/vQK1rExzGvXpIqCCKnfHXcQp5uVR/HegSZO 16ekDGKXgJDFlvL7mbe2QOqk0Jp2D3O0FSTiDzXmR+cpYoZ6+EpppPOFlfwzX5qQ e+WYDoZyjd8JSsEgho9rN9cjqH45n/dmmCif462emck3aYebrPNABCZMXiTuiME4 99r/wlT+hT+ejMhg1qGk4AtCdXAFFhcf -----END CERTIFICATE-----Generated at Tue Nov 4 12:17:03 2025 by rpki-client