$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: svOzc+eUdxDh3kODFW0jZ/m9aDbDR9R9dKxx3G/oL78= Subject key identifier: 55:22:99:2A:AF:4A:92:26:AF:43:6D:8A:76:6A:58:79:3B:DB:FB:31 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 0241 Signing time: Mon 03 Nov 2025 01:53:43 +0000 Manifest this update: Mon 03 Nov 2025 01:53:43 +0000 Manifest next update: Mon 10 Nov 2025 01:53:42 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: +uGDy2S1cb4lu+nG2O2IYnSBdcU/3RbLVdZO6tg+BM4=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Nov 3 01:53:43 2025 GMT Not After : Nov 10 01:53:42 2025 GMT Subject: CN=69080b27-377a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:c2:9c:7e:d8:b7:55:e6:38:2c:83:3a:05: ef:50:28:67:df:67:01:00:98:27:f4:f9:54:4f:96: 65:fa:22:85:4b:fd:0e:32:0e:5f:a1:77:2e:c3:2f: e8:da:f9:71:94:78:9d:7a:28:82:f8:93:62:e8:5e: 22:fb:af:97:7f:ee:27:d1:ca:2d:d9:36:82:81:34: 66:b8:f5:61:16:87:68:8c:44:4d:b9:58:96:88:fd: fc:d2:16:92:2a:2e:f3:40:3e:50:1d:e1:28:fe:48: 9f:01:45:84:1d:73:7b:e4:37:7a:cf:52:1f:50:71: 58:56:6a:e3:b0:8a:b5:16:db:08:05:d7:e7:e4:c1: 9f:cc:e2:5a:b3:04:1f:e2:7b:53:99:e5:69:03:cb: 51:17:63:ad:9a:40:86:bc:2a:b4:b1:3f:cd:53:25: 8a:56:e5:ca:e0:a4:1a:50:33:b6:81:b0:f4:5e:67: 48:08:07:4a:29:5f:61:03:d9:a8:67:17:64:92:32: ba:09:a8:2c:b3:95:10:3f:f7:de:e3:eb:80:7f:87: 59:f7:bb:99:be:d3:13:4f:c3:39:44:36:ab:05:f9: 4e:80:3a:10:96:79:0d:32:3c:f1:5a:04:39:eb:2d: 99:af:f8:ed:1e:e6:95:a8:71:fa:5d:90:9b:56:7c: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:22:99:2A:AF:4A:92:26:AF:43:6D:8A:76:6A:58:79:3B:DB:FB:31 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:ed:33:c6:50:ba:16:e2:48:a3:0e:9b:0e:8b:fe:11:81: 3e:b7:5f:e5:a7:2a:c3:ff:b3:e1:4c:a4:f1:59:6c:f7:7e:de: 87:0e:1c:77:f9:db:e0:50:00:60:a4:13:8e:8e:48:68:df:46: 24:0a:7f:64:c6:bd:f6:7f:f3:ef:30:10:ba:94:f6:0e:8c:f6: ae:9e:7d:a0:db:3b:e9:97:39:ed:23:c4:3e:62:f5:88:80:14: ca:e9:5c:1b:f5:aa:a3:01:89:26:33:64:3a:db:f2:f7:57:59: 03:88:3d:0e:55:16:f2:27:45:1b:93:fa:d9:da:fb:b5:17:8b: 7e:10:34:bf:8a:5b:f4:a7:0d:a0:41:9e:c6:1d:02:95:71:9a: 8d:9d:e1:df:34:0f:74:d8:74:7e:7c:af:07:38:c8:2a:b8:4a: 49:3d:27:46:87:42:7e:1f:35:90:e3:ab:c8:4c:d7:8c:28:6a: 01:59:7c:da:79:99:e0:5d:42:15:f0:69:2f:c8:59:5b:fa:a8: fd:06:9f:7f:8b:c5:5d:7d:31:6e:70:7e:57:8f:df:0b:52:f0: 8a:26:45:82:d5:6c:a9:79:cf:5c:20:92:ba:2f:40:54:3e:2a: 93:ba:26:ab:2f:d9:73:b9:90:b9:ed:84:af:9d:6b:ab:fe:fd: 59:5a:fc:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUxMTAzMDE1MzQzWhcNMjUxMTEwMDE1MzQyWjAYMRYwFAYD VQQDEw02OTA4MGIyNy0zNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuDCnH7Yt1XmOCyDOgXvUChn32cBAJgn9PlUT5Zl+iKFS/0OMg5foXcuwy/o 2vlxlHideiiC+JNi6F4i+6+Xf+4n0cot2TaCgTRmuPVhFodojERNuViWiP380haS Ki7zQD5QHeEo/kifAUWEHXN75Dd6z1IfUHFYVmrjsIq1FtsIBdfn5MGfzOJaswQf 4ntTmeVpA8tRF2OtmkCGvCq0sT/NUyWKVuXK4KQaUDO2gbD0XmdICAdKKV9hA9mo ZxdkkjK6Cagss5UQP/fe4+uAf4dZ97uZvtMTT8M5RDarBflOgDoQlnkNMjzxWgQ5 6y2Zr/jtHuaVqHH6XZCbVnx09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUimSqv SpImr0NtinZqWHk72/sxMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr8+0zxlC6FuJIow6bDov+EYE+t1/lpyrD/7PhTKTxWWz3ft6HDhx3 +dvgUABgpBOOjkho30YkCn9kxr32f/PvMBC6lPYOjPaunn2g2zvplzntI8Q+YvWI gBTK6Vwb9aqjAYkmM2Q62/L3V1kDiD0OVRbyJ0Ubk/rZ2vu1F4t+EDS/ilv0pw2g QZ7GHQKVcZqNneHfNA902HR+fK8HOMgquEpJPSdGh0J+HzWQ46vITNeMKGoBWXza eZngXUIV8GkvyFlb+qj9Bp9/i8VdfTFucH5Xj98LUvCKJkWC1Wypec9cIJK6L0BU PiqTuiarL9lzuZC57YSvnWur/v1ZWvyR -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:18 2025 by rpki-client