$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft File: SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json) Hash identifier: zc0eY+7PxvURsN+CINfsjOW1VzR059fsdbDsL4pwXDU= Subject key identifier: 92:21:CB:41:2C:12:8F:1F:B7:2F:8E:63:D5:62:06:42:76:2B:76:42 Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft Manifest number: 050F Signing time: Sun 02 Nov 2025 23:35:20 +0000 Manifest this update: Sun 02 Nov 2025 23:35:19 +0000 Manifest next update: Sun 09 Nov 2025 23:35:19 +0000 Files and hashes: 1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: 2xe2gKbgLjduile+gwTRpc6wY/8yNSCj6hxtYVsTqnc=) 2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: OMr4Dz07a9K+JRAHryD2B9Vl/J9RaoHPdVjAOTh62ZI=) 3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: t0Udbj/BMaf/sH0WctEk56jZ3TVW9akvyOH3KkeFZWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Validity Not Before: Nov 2 23:35:19 2025 GMT Not After : Nov 9 23:35:19 2025 GMT Subject: CN=6907eab8-7ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:c1:a7:03:45:d9:72:28:db:ec:c4:f8:c8: 80:10:f0:a0:d6:52:06:6b:14:34:0e:84:dc:a5:fc: 5b:cc:99:e6:37:e6:c4:6e:df:de:5f:58:0d:c7:35: 7d:dc:9d:4a:ac:be:15:1f:95:1d:f9:4f:42:f4:16: 4e:c8:2e:b0:fc:c9:c1:f1:57:35:6f:21:b0:8f:9f: 88:ba:05:00:75:34:bf:6d:d6:ba:50:c1:56:6c:58: 57:ad:24:c6:16:4e:ab:e7:0c:8a:cb:e3:a9:25:7f: 7e:6c:37:a5:14:95:1c:6c:38:a2:cf:ea:67:9d:df: ba:42:6a:df:ab:00:ef:cb:12:4c:1f:cf:3c:f8:fb: 4f:4b:e0:2b:07:db:4c:9e:99:19:19:cc:af:27:16: 51:5c:3c:34:e8:27:af:37:6a:56:aa:b7:fa:9a:ee: 98:78:4c:67:41:f5:99:92:22:97:28:29:4f:f6:11: c9:3e:17:61:27:2b:cc:42:c5:71:3e:37:75:fc:4d: 27:b7:89:f6:9a:ba:09:45:db:58:71:fd:c1:e9:57: 38:84:5c:e3:fb:4c:00:15:c1:cb:5d:b8:9a:ee:bf: 36:52:97:ea:7e:9b:8c:33:ee:d7:08:73:e6:46:2f: 99:00:c5:23:b1:93:ae:f4:a4:8d:bd:5c:54:85:ab: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:21:CB:41:2C:12:8F:1F:B7:2F:8E:63:D5:62:06:42:76:2B:76:42 X509v3 Authority Key Identifier: keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ed:b1:30:6a:d0:95:8f:9e:99:02:f6:d8:c3:0b:41:09:42: 12:aa:fb:55:c4:a4:a4:4f:e9:6f:23:6e:47:f8:7a:07:07:fd: d3:79:a6:a8:22:ee:a9:4d:9a:a7:30:67:e8:4b:ab:85:c2:28: 04:37:26:4b:ba:ef:c9:e7:af:ca:84:1c:be:bd:b1:c3:55:0f: c5:ed:b0:52:9d:48:75:d7:22:24:d6:29:02:66:57:83:7f:41: 82:ac:d4:60:98:cc:f7:f3:51:36:9f:9f:56:89:01:13:49:12: 93:a3:5b:6a:1e:70:97:dd:d6:0f:04:4d:7c:98:8d:96:2f:d8: e6:f1:3f:87:bf:59:e8:d2:48:c5:25:ee:18:69:c5:eb:54:b1: 80:f9:6b:11:42:47:ef:d5:62:22:2b:21:be:22:43:7a:60:b0: 5d:d6:08:89:85:59:bd:52:c6:50:cf:cf:55:85:00:b5:13:df: f6:88:b2:09:16:7a:a1:ae:65:c1:06:5f:b3:56:1a:54:5b:b5: 9d:06:2a:fc:8e:46:3e:72:9b:be:ef:1b:12:fe:e9:19:c8:ab: 87:8a:e9:92:67:b0:6b:7e:39:13:ed:d5:77:e3:c1:22:8e:29: 34:41:a5:6a:59:b9:df:74:1c:0e:12:c5:d2:9f:26:2b:fb:6b: bf:40:5f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE RkNFNkRDNzkwHhcNMjUxMTAyMjMzNTE5WhcNMjUxMTA5MjMzNTE5WjAYMRYwFAYD VQQDEw02OTA3ZWFiOC03YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGjBpwNF2XIo2+zE+MiAEPCg1lIGaxQ0DoTcpfxbzJnmN+bEbt/eX1gNxzV9 3J1KrL4VH5Ud+U9C9BZOyC6w/MnB8Vc1byGwj5+IugUAdTS/bda6UMFWbFhXrSTG Fk6r5wyKy+OpJX9+bDelFJUcbDiiz+pnnd+6QmrfqwDvyxJMH888+PtPS+ArB9tM npkZGcyvJxZRXDw06CevN2pWqrf6mu6YeExnQfWZkiKXKClP9hHJPhdhJyvMQsVx Pjd1/E0nt4n2mroJRdtYcf3B6Vc4hFzj+0wAFcHLXbia7r82UpfqfpuMM+7XCHPm Ri+ZAMUjsZOu9KSNvVxUhauepwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIhy0Es Eo8fty+OY9ViBkJ2K3ZCMB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM3My8yQzAwNkJCODJCMkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1 OXFzVEpIVFRIckRmem0zSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD7bEwatCVj56ZAvbYwwtBCUISqvtVxKSkT+lvI25H+HoHB/3Teaao Iu6pTZqnMGfoS6uFwigENyZLuu/J56/KhBy+vbHDVQ/F7bBSnUh11yIk1ikCZleD f0GCrNRgmMz381E2n59WiQETSRKTo1tqHnCX3dYPBE18mI2WL9jm8T+Hv1no0kjF Je4YacXrVLGA+WsRQkfv1WIiKyG+IkN6YLBd1giJhVm9UsZQz89VhQC1E9/2iLIJ FnqhrmXBBl+zVhpUW7WdBir8jkY+cpu+7xsS/ukZyKuHiumSZ7BrfjkT7dV348Ei jik0QaVqWbnfdBwOEsXSnyYr+2u/QF9l -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:26 2025 by rpki-client