$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft File: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft (raw, json) Hash identifier: PphIZ93uV9AjsgdDQHkOhtklS+YoC+URVOtjs+6JL9c= Subject key identifier: 7B:0F:65:C8:F9:37:7D:B4:15:77:C1:0A:27:A1:48:79:46:35:88:20 Authority key identifier: 57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B Certificate issuer: /CN=A9123059/serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft Manifest number: 2A Signing time: Mon 03 Nov 2025 07:40:34 +0000 Manifest this update: Mon 03 Nov 2025 07:40:33 +0000 Manifest next update: Mon 10 Nov 2025 07:40:33 +0000 Files and hashes: 1: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl (hash: xOc0Tc/1J1D1SLEPikmckkkjv24MUqtMnNtw2elu/Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Validity Not Before: Nov 3 07:40:33 2025 GMT Not After : Nov 10 07:40:33 2025 GMT Subject: CN=69085c72-20e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:c6:11:89:e8:75:a4:19:0b:c4:bb:88:e5: b1:97:27:66:bd:3f:75:1b:ec:a4:46:da:e2:77:3c: 67:2e:d6:32:48:6e:e5:3d:01:b0:44:73:be:d9:77: 3c:e8:7c:bd:00:26:de:e3:29:aa:3f:45:89:40:26: 6f:2e:35:a7:d5:c6:46:41:a6:07:70:be:08:40:30: 3d:e8:b7:5f:7b:21:33:a8:95:da:19:4f:4a:b6:43: 2f:0d:35:93:9c:07:01:2c:a3:c4:c2:95:43:71:96: d8:e2:85:cc:e3:93:28:b6:18:41:41:c8:f1:6d:2f: 5a:86:76:b5:69:08:8e:d5:da:27:ca:cc:d7:82:11: bc:77:4e:1d:38:d8:19:52:63:28:62:2c:d4:5c:37: 00:e0:46:db:30:0f:fd:89:2d:12:8c:c0:1b:65:3f: ec:a0:e1:29:97:3b:d5:ad:f7:15:1c:5f:45:6c:ec: ac:9d:46:a6:6f:bc:4c:27:41:4a:e3:f5:d0:4f:8e: bd:37:14:6c:92:a0:01:7c:bb:33:74:dd:8b:46:78: f4:61:1c:35:a2:f0:1d:be:37:23:b3:2e:aa:38:73: 70:89:7e:68:e3:35:7a:39:b4:33:de:c5:24:4c:9b: a6:60:07:16:37:51:88:1b:a8:95:cf:25:f4:55:a2: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:65:C8:F9:37:7D:B4:15:77:C1:0A:27:A1:48:79:46:35:88:20 X509v3 Authority Key Identifier: keyid:57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3c:9e:65:cc:3f:aa:ec:fa:dc:6d:3e:a0:2b:c1:a3:53:dd: 47:58:e7:b1:1f:fe:72:94:eb:1f:4a:50:eb:2c:c7:b1:aa:27: a2:e4:15:df:75:07:26:de:4c:95:56:1d:27:1c:ee:96:c2:89: da:cf:78:3c:e8:40:3d:86:17:63:a1:46:cc:e3:52:37:29:e0: 10:45:3a:a1:ae:04:ec:39:12:cf:44:e1:6c:2e:d8:09:47:09: 46:48:cf:46:8d:bc:f1:10:6d:76:e8:da:45:04:d3:10:a2:d8: 72:25:38:a4:58:3c:20:21:8b:e0:f6:77:4c:d1:f0:27:59:3c: 50:84:73:1b:b5:d8:66:f0:a7:25:e6:d1:09:3c:04:42:cf:27: e7:68:97:14:a8:4b:54:6a:97:36:ab:74:2a:5f:05:94:d9:c9: 78:18:de:b2:a1:ba:1f:4d:1c:b9:f4:6c:ba:74:21:0f:f1:31: d0:45:db:b7:61:b2:76:93:8f:24:38:d5:c1:9d:f4:eb:38:c2: ee:e5:ab:4c:7f:32:9f:09:8e:8a:6c:18:6e:37:c2:e7:42:e5: 95:34:8c:67:e2:26:fb:04:d5:7b:e7:0c:f2:3b:12:8c:4d:c9: f1:e0:c3:05:07:4e:d1:43:95:1d:23:97:fb:53:49:7f:83:63: 06:c9:20:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNTcxRUQyNTZENThGODVDNjAwQzY0QTU5RUU3QjFEMzZB RTNDQjA5QjAeFw0yNTExMDMwNzQwMzNaFw0yNTExMTAwNzQwMzNaMBgxFjAUBgNV BAMTDTY5MDg1YzcyLTIwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjj8YRieh1pBkLxLuI5bGXJ2a9P3Ub7KRG2uJ3PGcu1jJIbuU9AbBEc77Zdzzo fL0AJt7jKao/RYlAJm8uNafVxkZBpgdwvghAMD3ot197ITOoldoZT0q2Qy8NNZOc BwEso8TClUNxltjihczjkyi2GEFByPFtL1qGdrVpCI7V2ifKzNeCEbx3Th042BlS YyhiLNRcNwDgRtswD/2JLRKMwBtlP+yg4SmXO9Wt9xUcX0Vs7KydRqZvvEwnQUrj 9dBPjr03FGySoAF8uzN03YtGePRhHDWi8B2+NyOzLqo4c3CJfmjjNXo5tDPexSRM m6ZgBxY3UYgbqJXPJfRVos/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUew9lyPk3 fbQVd8EKJ6FIeUY1iCAwHwYDVR0jBBgwFoAUVx7SVtWPhcYAxkpZ7nsdNq48sJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0JCQkQ4MDI2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZQXhrcFo3bnNkTnE0OHNK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVng3U1Z0V1BoY1lBeGtwWjduc2ROcTQ4c0pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0JCQkQ4MDI2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZ QXhrcFo3bnNkTnE0OHNKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGI8nmXMP6rs+txtPqArwaNT3UdY57Ef/nKU6x9KUOssx7GqJ6LkFd91 BybeTJVWHScc7pbCidrPeDzoQD2GF2OhRszjUjcp4BBFOqGuBOw5Es9E4Wwu2AlH CUZIz0aNvPEQbXbo2kUE0xCi2HIlOKRYPCAhi+D2d0zR8CdZPFCEcxu12GbwpyXm 0Qk8BELPJ+dolxSoS1RqlzardCpfBZTZyXgY3rKhuh9NHLn0bLp0IQ/xMdBF27dh snaTjyQ41cGd9Os4wu7lq0x/Mp8JjopsGG43wudC5ZU0jGfiJvsE1XvnDPI7EoxN yfHgwwUHTtFDlR0jl/tTSX+DYwbJIH8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:56 2025 by rpki-client