$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: 9DkqV3i1LGUhnsJuoQmnZJ3LIUVEswqvBV24RvzSmQU= Subject key identifier: 79:60:9F:42:F4:30:B7:E9:DC:6C:6E:AD:D5:95:8D:9C:2F:AB:C2:03 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 07C3 Signing time: Sun 26 Oct 2025 16:05:34 +0000 Manifest this update: Sun 26 Oct 2025 16:05:33 +0000 Manifest next update: Sun 02 Nov 2025 16:05:33 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: E+pEClGbbTgsLgAsPTMYw9T4RzbkDg5zEu4/KMNwPI0=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: ldhnqRcVbTxkt0kcgUABU1YyeJx0zAFYwLA5AA7ZzpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 16:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Oct 26 16:05:33 2025 GMT Not After : Nov 2 16:05:33 2025 GMT Subject: CN=68fe46ce-b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:2c:82:c3:a3:0d:4d:5d:76:d6:de:5d:f0: 33:9c:b6:7f:c6:55:04:8d:3b:15:1c:91:c4:da:2a: e7:9f:bb:16:14:b8:cd:55:42:a9:b8:c3:a0:cc:a7: 5b:d5:df:e3:64:3b:89:7f:f1:a0:5a:b4:e2:2b:d0: f8:2f:0c:86:d4:c5:86:43:41:af:88:85:99:69:c8: b1:10:d2:b8:fc:fd:b2:4b:9f:04:8a:4a:35:d0:ff: 04:fa:04:d8:ae:17:24:8e:f0:2e:fe:05:31:94:a8: 2f:ad:48:b6:f2:93:ca:f1:4c:fb:c4:5e:03:de:50: d7:9b:e4:f7:35:04:bb:b9:3d:3d:e9:4c:b3:e8:4c: f9:43:50:a9:e1:11:03:29:c9:f3:fc:da:1b:c0:10: ca:f3:d8:6a:a3:af:d9:4b:2a:df:1b:e8:bc:ae:90: dc:e1:60:11:d9:f2:fb:11:99:16:a6:39:0a:4a:91: bd:a2:37:d6:f3:7a:b2:03:93:73:1f:16:58:64:bf: 1d:ca:30:f9:08:23:fe:51:64:47:75:3e:f1:84:9b: 73:0f:50:4d:7c:f9:ab:89:05:c5:cf:9c:a4:03:31: 24:20:5d:62:6b:30:5c:33:c6:3c:4f:14:a8:5b:23: da:59:a6:f8:07:25:6d:c5:78:86:7f:02:87:42:34: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:60:9F:42:F4:30:B7:E9:DC:6C:6E:AD:D5:95:8D:9C:2F:AB:C2:03 X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ae:7b:9d:cc:5d:7b:99:91:fa:ac:d2:3b:a0:8c:e5:fc:4d: 1f:16:f6:64:eb:89:cb:f6:e0:be:9f:f0:c0:48:31:5d:4b:d3: 52:62:67:52:fa:26:d3:ad:05:fe:0d:3d:fd:8f:ec:e2:01:ea: 07:ce:8e:93:0d:3b:df:d7:b8:bf:37:a9:89:e2:2e:c7:6f:32: d8:b0:9d:17:01:6b:df:0c:d8:02:58:8a:da:52:b1:38:6c:bc: 54:b3:06:18:13:42:4f:84:96:4c:3a:d8:a1:70:37:3a:07:38: 97:f5:82:1d:86:7d:33:f6:6d:16:93:70:da:5a:1c:99:70:4a: bb:ef:1a:7e:36:d7:39:fb:d5:b8:d7:a9:1c:98:23:c5:27:59: 81:40:7b:0c:83:60:a7:17:75:6c:86:e1:1e:34:4c:c3:70:c0: 2e:11:f1:ed:d2:db:eb:10:63:16:1c:dc:91:27:a9:6f:76:d7: 12:9f:99:f6:b9:ad:c6:f8:41:58:ae:ce:3c:05:a2:bf:38:df: e9:c4:e6:8c:7f:a7:9f:53:ca:d9:18:41:e7:d0:2e:a6:84:ef: 03:30:66:50:80:91:e6:d9:27:93:c1:e5:35:65:8f:71:4b:03: cb:a1:c0:e5:22:90:49:cd:a4:cb:ee:77:e4:f4:d0:2a:15:cf: 1d:05:e0:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjUxMDI2MTYwNTMzWhcNMjUxMTAyMTYwNTMzWjAYMRYwFAYD VQQDEw02OGZlNDZjZS1iODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYssgsOjDU1ddtbeXfAznLZ/xlUEjTsVHJHE2irnn7sWFLjNVUKpuMOgzKdb 1d/jZDuJf/GgWrTiK9D4LwyG1MWGQ0GviIWZacixENK4/P2yS58Eiko10P8E+gTY rhckjvAu/gUxlKgvrUi28pPK8Uz7xF4D3lDXm+T3NQS7uT096Uyz6Ez5Q1Cp4RED Kcnz/NobwBDK89hqo6/ZSyrfG+i8rpDc4WAR2fL7EZkWpjkKSpG9ojfW83qyA5Nz HxZYZL8dyjD5CCP+UWRHdT7xhJtzD1BNfPmriQXFz5ykAzEkIF1iazBcM8Y8TxSo WyPaWab4ByVtxXiGfwKHQjRDBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlgn0L0 MLfp3GxurdWVjZwvq8IDMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6rnudzF17mZH6rNI7oIzl/E0fFvZk64nL9uC+n/DASDFdS9NSYmdS +ibTrQX+DT39j+ziAeoHzo6TDTvf17i/N6mJ4i7HbzLYsJ0XAWvfDNgCWIraUrE4 bLxUswYYE0JPhJZMOtihcDc6BziX9YIdhn0z9m0Wk3DaWhyZcEq77xp+Ntc5+9W4 16kcmCPFJ1mBQHsMg2CnF3VshuEeNEzDcMAuEfHt0tvrEGMWHNyRJ6lvdtcSn5n2 ua3G+EFYrs48BaK/ON/pxOaMf6efU8rZGEHn0C6mhO8DMGZQgJHm2SeTweU1ZY9x SwPLocDlIpBJzaTL7nfk9NAqFc8dBeC6 -----END CERTIFICATE-----Generated at Tue Oct 28 12:34:43 2025 by rpki-client