$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: C1VfDBShaosGDKvtSsIxPJ4OYoMKiAhOrXIhTiwBoao= Subject key identifier: E4:CF:55:1C:CD:70:6C:51:90:54:25:10:A6:F7:49:D7:AD:6F:80:34 Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 07E7 Signing time: Sun 02 Nov 2025 21:05:04 +0000 Manifest this update: Sun 02 Nov 2025 21:05:03 +0000 Manifest next update: Sun 09 Nov 2025 21:05:03 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: JlHu0ldWDaGDE+OaeVtiytv31VmHdxGbfm+2FgbMWPI=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: J9GQPP4a7clIhGgoBAM9KLX43lz+eBaMPakWPFWVHmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Nov 2 21:05:03 2025 GMT Not After : Nov 9 21:05:03 2025 GMT Subject: CN=6907c77f-a414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:45:0e:d5:bc:41:a1:c1:02:eb:1f:b1:0c: 93:34:c1:e0:5c:e2:f3:4d:5b:f3:21:e1:14:ef:0e: 3b:e5:48:8a:8a:3e:c0:f1:8f:ce:d6:d8:5b:0e:9d: 5a:33:78:f7:01:c9:68:ee:6d:1c:31:4b:ae:51:ae: 13:5a:a5:16:4d:b3:05:82:65:33:4f:c1:b6:5e:fe: 34:9d:4f:00:1e:4a:e7:c8:79:65:ed:11:d9:d0:85: 4f:79:aa:1e:94:12:21:0a:27:32:58:df:ea:c3:13: a6:22:ad:06:c4:b4:92:84:5f:0f:3b:86:88:03:c6: af:23:fb:da:70:53:40:ac:80:03:7e:1a:8f:a6:ff: 41:65:23:ea:7e:ac:19:16:6e:37:d0:98:07:c0:1c: b8:d0:e1:c7:7e:ea:18:01:44:6f:ab:64:85:17:39: 0a:1b:e3:d3:3c:e6:a2:78:a8:8f:15:d4:1a:da:01: bf:33:ce:4b:1c:df:16:87:0a:50:cc:92:df:69:3e: b8:2c:2f:9b:70:34:8d:50:64:c9:53:8c:0b:7e:a0: 0a:22:2c:cf:95:ee:da:d9:fc:e0:4a:e9:91:c5:9c: 82:51:2a:b7:28:2d:5c:7b:fe:a9:af:4e:0d:31:2c: d7:63:8c:17:e4:5f:58:a6:e4:a7:43:13:53:bc:1e: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:55:1C:CD:70:6C:51:90:54:25:10:A6:F7:49:D7:AD:6F:80:34 X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4e:09:2d:64:41:4b:2f:43:4b:44:10:df:18:62:10:92:8d: d0:54:91:80:2f:d2:fc:ae:8a:1e:a1:f9:08:12:9a:cc:78:4a: df:15:23:7f:57:0d:a2:c9:eb:72:1e:99:a3:95:d5:35:12:5f: fa:94:d7:e6:15:1b:ea:cc:b2:3c:a8:7d:03:8e:40:a3:e5:c4: 49:42:12:93:1d:7e:f7:ad:8e:cc:bc:ad:7d:26:6e:dc:74:5b: bc:bc:3a:d0:56:5b:b4:c5:b9:2a:34:a7:1c:03:c1:c6:7b:bc: 14:dd:ca:3e:3a:a3:e6:97:25:5c:08:40:50:d5:b6:de:e1:66: b3:0d:c8:74:79:6f:6c:b4:72:38:d4:25:7c:44:01:b6:d1:c9: 04:9d:cc:9a:80:9c:e0:b8:e7:c4:11:16:b0:7c:7f:4c:23:6d: 1b:a0:42:63:2f:4f:d9:ba:e3:8f:e0:87:0f:74:7b:36:0a:64: ce:47:b2:c2:b5:1e:15:d6:05:54:af:73:68:eb:73:c4:d7:fd: bf:93:b4:0c:4a:d9:8f:e0:e6:a4:0f:ef:76:2d:71:b2:e3:72: dd:9a:20:24:92:f5:3b:f9:f2:ad:c2:6b:7c:5c:87:73:f1:32: ba:8c:92:ec:fa:6e:92:7e:ca:ab:5a:ac:f1:8a:4f:57:50:16: ee:16:a5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUxMTAyMjEwNTAzWhcNMjUxMTA5MjEwNTAzWjAYMRYwFAYD VQQDEw02OTA3Yzc3Zi1hNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzZFDtW8QaHBAusfsQyTNMHgXOLzTVvzIeEU7w475UiKij7A8Y/O1thbDp1a M3j3Aclo7m0cMUuuUa4TWqUWTbMFgmUzT8G2Xv40nU8AHkrnyHll7RHZ0IVPeaoe lBIhCicyWN/qwxOmIq0GxLSShF8PO4aIA8avI/vacFNArIADfhqPpv9BZSPqfqwZ Fm430JgHwBy40OHHfuoYAURvq2SFFzkKG+PTPOaieKiPFdQa2gG/M85LHN8WhwpQ zJLfaT64LC+bcDSNUGTJU4wLfqAKIizPle7a2fzgSumRxZyCUSq3KC1ce/6pr04N MSzXY4wX5F9YpuSnQxNTvB6KJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTPVRzN cGxRkFQlEKb3Sdetb4A0MB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATTgktZEFLL0NLRBDfGGIQko3QVJGAL9L8rooeofkIEprMeErfFSN/ Vw2iyetyHpmjldU1El/6lNfmFRvqzLI8qH0DjkCj5cRJQhKTHX73rY7MvK19Jm7c dFu8vDrQVlu0xbkqNKccA8HGe7wU3co+OqPmlyVcCEBQ1bbe4WazDch0eW9stHI4 1CV8RAG20ckEncyagJzguOfEERawfH9MI20boEJjL0/ZuuOP4IcPdHs2CmTOR7LC tR4V1gVUr3No63PE1/2/k7QMStmP4OakD+92LXGy43LdmiAkkvU7+fKtwmt8XIdz 8TK6jJLs+m6SfsqrWqzxik9XUBbuFqXV -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:36 2025 by rpki-client