$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json) Hash identifier: IAkX5fPCoRWplfuuf7tLPGAQ7N/fRSIDG+ksAcWYDOo= Subject key identifier: 35:38:A6:86:56:48:44:74:33:FA:DC:3E:F4:49:0A:D2:6E:BA:25:7A Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft Manifest number: 0839 Signing time: Sun 02 Nov 2025 20:42:53 +0000 Manifest this update: Sun 02 Nov 2025 20:42:53 +0000 Manifest next update: Sun 09 Nov 2025 20:42:53 +0000 Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: 29o5FeYJLCRKSxqndLv6gI3mymNAf+Fz43LA/hjzvUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Validity Not Before: Nov 2 20:42:53 2025 GMT Not After : Nov 9 20:42:53 2025 GMT Subject: CN=6907c24d-f6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:ad:c1:5f:1e:43:72:37:80:78:e8:57:e1: 65:37:3e:bf:91:2b:be:6e:7a:0f:d0:27:61:f3:0b: 5d:05:0b:aa:b5:5e:ac:46:1b:c3:a0:c8:3b:9d:00: 71:76:85:7d:60:fe:85:95:8e:a1:87:41:19:7c:0a: 78:c7:00:4f:e7:64:dd:3a:16:af:ad:c2:c7:06:53: 78:8d:48:8a:4b:1f:15:77:81:4a:75:7b:80:c8:15: 48:9e:36:63:12:02:1b:3c:a6:a2:60:8a:86:14:0b: a1:2b:d5:ea:21:d5:ab:0f:3f:2a:97:df:5b:e8:00: bd:42:35:d3:3d:61:1c:af:49:d9:38:c1:aa:05:00: 84:2e:8d:4a:9a:36:ac:4d:11:8b:05:ee:8e:40:0e: c9:8a:d5:e7:3a:5d:41:d8:31:ce:7d:11:9b:ff:a2: 16:00:2a:3c:a2:a4:c3:49:09:54:9a:7c:a0:90:e9: 90:92:8a:e7:9e:5c:d5:e1:eb:cf:5b:7b:7e:2e:94: 84:de:39:69:bb:46:6d:c6:a1:59:40:5c:53:6c:ad: 6e:de:8a:89:54:d2:77:fd:ee:7a:88:14:9a:8c:c9: 71:56:f2:79:9c:d9:27:dc:7b:97:fd:3c:80:87:25: 29:a8:19:91:15:79:30:17:a4:16:2d:f7:14:8f:fa: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:38:A6:86:56:48:44:74:33:FA:DC:3E:F4:49:0A:D2:6E:BA:25:7A X509v3 Authority Key Identifier: keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:e8:63:13:39:90:98:3b:a2:6f:91:47:fc:80:77:eb:84: 15:0b:5f:fe:e7:9c:75:0d:e2:78:da:58:46:cb:cc:d2:a0:48: 08:ed:da:0f:04:ff:e2:fb:de:b8:34:91:32:d8:ce:30:d7:06: 94:e3:86:9d:8a:57:f9:a7:06:36:30:5b:af:4d:83:9e:7d:dc: a5:7e:20:dc:49:bb:d4:64:32:33:d3:8f:7b:4f:bc:61:16:27: 33:a2:e0:63:60:ba:73:1e:a9:6e:2b:a5:76:90:55:5b:5b:02: a7:3c:7a:53:df:6e:52:ee:62:fe:de:a8:0e:ee:1c:19:57:db: 3c:d8:f4:22:a7:97:85:fe:05:ed:38:e3:94:5b:80:7c:57:a7: 67:4f:e1:0e:71:99:62:16:a0:32:4f:54:4b:e4:7f:14:fc:fb: 76:f7:ac:9e:26:66:a8:2b:a1:46:b7:ee:0c:fe:57:ce:7f:d4: 81:d1:7c:c3:20:06:85:10:e5:04:29:84:06:cd:e5:ac:56:b1: 2c:f4:27:a2:d3:f6:c7:d4:59:dc:dc:48:97:c4:a8:76:fe:42: 90:62:32:ff:7e:12:92:e3:ad:4d:16:a7:ae:24:b1:33:da:a6: 09:9f:22:e7:a4:80:b7:de:6a:be:9a:e4:c1:12:66:fb:1b:f7: 3d:3b:84:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJGRDIxMTAvBgNVBAUTKEIyREE2Q0EyRjE3RURERUVCNEM0NTAzMzYxRjREODgy MjgwQkNBODgwHhcNMjUxMTAyMjA0MjUzWhcNMjUxMTA5MjA0MjUzWjAYMRYwFAYD VQQDEw02OTA3YzI0ZC1mNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZKtwV8eQ3I3gHjoV+FlNz6/kSu+bnoP0Cdh8wtdBQuqtV6sRhvDoMg7nQBx doV9YP6FlY6hh0EZfAp4xwBP52TdOhavrcLHBlN4jUiKSx8Vd4FKdXuAyBVInjZj EgIbPKaiYIqGFAuhK9XqIdWrDz8ql99b6AC9QjXTPWEcr0nZOMGqBQCELo1Kmjas TRGLBe6OQA7JitXnOl1B2DHOfRGb/6IWACo8oqTDSQlUmnygkOmQkornnlzV4evP W3t+LpSE3jlpu0ZtxqFZQFxTbK1u3oqJVNJ3/e56iBSajMlxVvJ5nNkn3HuX/TyA hyUpqBmRFXkwF6QWLfcUj/px8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU4poZW SER0M/rcPvRJCtJuuiV6MB8GA1UdIwQYMBaAFLLabKLxft3utMRQM2H02IIoC8qI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkZEMi9DODFCMjYyOEU1 RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNlNjB4RkF6WWZUWWdpZ0x5 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0cHNvdkYtM2U2MHhGQXpZZlRZZ2lnTHlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkZEMi9DODFCMjYyOEU1RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNl NjB4RkF6WWZUWWdpZ0x5b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA0uhjEzmQmDuib5FH/IB364QVC1/+55x1DeJ42lhGy8zSoEgI7doP BP/i+964NJEy2M4w1waU44adilf5pwY2MFuvTYOefdylfiDcSbvUZDIz0497T7xh FiczouBjYLpzHqluK6V2kFVbWwKnPHpT325S7mL+3qgO7hwZV9s82PQip5eF/gXt OOOUW4B8V6dnT+EOcZliFqAyT1RL5H8U/Pt296yeJmaoK6FGt+4M/lfOf9SB0XzD IAaFEOUEKYQGzeWsVrEs9Cei0/bH1Fnc3EiXxKh2/kKQYjL/fhKS461NFqeuJLEz 2qYJnyLnpIC33mq+muTBEmb7G/c9O4QN -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:25 2025 by rpki-client