$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: /nMj19GK3kKoZetaXxNoD33dmtyJPA64K1EDT5GlJZQ= Subject key identifier: 7B:BB:8B:D6:04:7E:E5:E8:09:07:11:FF:84:DB:94:FD:F8:8F:17:25 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 06B5 Signing time: Sun 02 Nov 2025 22:08:41 +0000 Manifest this update: Sun 02 Nov 2025 22:08:40 +0000 Manifest next update: Sun 09 Nov 2025 22:08:40 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: rit7kBnIFB9K9upZHXYUPgWzf3bfMUM9DOS+nt53wMk=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Nov 2 22:08:40 2025 GMT Not After : Nov 9 22:08:40 2025 GMT Subject: CN=6907d669-7207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:25:9d:d5:84:f5:6a:36:ae:d0:d1:20:e9: a0:82:6c:0c:e9:6d:da:4c:4a:29:09:7f:59:47:38: d1:2f:e3:85:5c:6a:90:1c:05:63:15:4d:f4:4b:0c: 47:c3:45:a7:d8:8e:2e:a7:88:93:04:10:b0:64:4d: 08:91:d2:1c:6b:ef:aa:91:0a:2a:74:e2:56:55:17: cb:03:40:4d:74:aa:c1:af:47:dd:d1:8d:6b:68:52: 9c:2d:4c:bd:21:16:f0:d8:20:58:c3:9d:d2:20:3e: fb:70:f2:de:e5:e1:7f:8b:d2:2c:a7:c7:66:c3:2d: 35:fd:42:3b:c2:42:95:79:0e:54:8f:92:49:c2:9c: bd:48:e3:de:42:b6:c4:5a:48:9b:c6:1e:a1:7c:4f: ae:d3:80:25:38:51:cd:f7:02:c8:67:10:fe:36:b4: 59:7f:bb:04:0e:18:2c:94:5b:e0:68:5a:42:a5:53: 0c:79:3d:82:5d:2f:5b:92:af:ca:63:66:84:a1:c1: 38:bb:c9:2c:9d:97:55:d6:a3:92:2e:ac:2d:b2:1b: 00:f1:fe:70:6a:63:24:b8:f2:45:8b:ac:f8:4f:d4: 33:b3:65:4a:12:45:3b:42:e4:7a:bd:b2:31:39:7e: 02:cc:ce:16:7e:67:35:fb:68:8b:99:e2:f2:4f:7f: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BB:8B:D6:04:7E:E5:E8:09:07:11:FF:84:DB:94:FD:F8:8F:17:25 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e7:a2:3b:8b:8c:f3:aa:40:d2:4b:7d:b2:db:71:d8:e7:53: cb:1a:b5:39:8e:bc:d4:60:5d:ed:a6:d4:ca:99:79:91:0f:e0: 5c:bc:e2:19:09:05:c5:b2:c0:c3:8e:05:60:e1:ed:35:89:d5: 86:f9:1c:6d:e5:87:c1:9e:f7:9a:c5:b0:6e:1e:0a:a8:7f:bc: f0:96:3e:a5:0b:b2:02:bb:3d:15:12:ff:32:84:2f:90:78:7c: 78:52:0c:dd:35:01:cb:8f:e0:ef:3a:71:94:7c:2e:f3:10:95: 47:29:49:33:42:32:ce:38:d7:b9:35:24:57:a0:75:17:88:6c: 72:78:c1:91:4a:b8:be:d7:d8:25:22:65:7c:08:54:17:16:21: 84:8c:e3:c2:31:5b:e2:a2:56:d1:90:27:0d:7e:01:cd:f4:db: 0c:67:ba:1c:b9:f3:c5:65:90:bc:4f:12:02:78:fe:2f:20:02: 2e:3d:88:3e:f6:ef:9c:a5:3d:14:b3:7e:c9:4d:36:26:cd:6f: 59:f4:9a:fd:43:f6:3c:45:4d:ca:27:e5:a9:8c:21:60:6a:06: 46:7b:16:de:80:a8:d8:19:4b:91:77:50:a5:15:4e:c6:12:d6: e2:2f:46:01:ea:49:8f:00:80:96:29:cb:b6:11:74:6d:9a:e2: 65:a1:30:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUxMTAyMjIwODQwWhcNMjUxMTA5MjIwODQwWjAYMRYwFAYD VQQDEw02OTA3ZDY2OS03MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TolndWE9Wo2rtDRIOmggmwM6W3aTEopCX9ZRzjRL+OFXGqQHAVjFU30SwxH w0Wn2I4up4iTBBCwZE0IkdIca++qkQoqdOJWVRfLA0BNdKrBr0fd0Y1raFKcLUy9 IRbw2CBYw53SID77cPLe5eF/i9Isp8dmwy01/UI7wkKVeQ5Uj5JJwpy9SOPeQrbE Wkibxh6hfE+u04AlOFHN9wLIZxD+NrRZf7sEDhgslFvgaFpCpVMMeT2CXS9bkq/K Y2aEocE4u8ksnZdV1qOSLqwtshsA8f5wamMkuPJFi6z4T9Qzs2VKEkU7QuR6vbIx OX4CzM4Wfmc1+2iLmeLyT3/ZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu7i9YE fuXoCQcR/4TblP34jxclMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF56I7i4zzqkDSS32y23HY51PLGrU5jrzUYF3tptTKmXmRD+BcvOIZ CQXFssDDjgVg4e01idWG+Rxt5YfBnveaxbBuHgqof7zwlj6lC7ICuz0VEv8yhC+Q eHx4UgzdNQHLj+DvOnGUfC7zEJVHKUkzQjLOONe5NSRXoHUXiGxyeMGRSri+19gl ImV8CFQXFiGEjOPCMVviolbRkCcNfgHN9NsMZ7ocufPFZZC8TxICeP4vIAIuPYg+ 9u+cpT0Us37JTTYmzW9Z9Jr9Q/Y8RU3KJ+WpjCFgagZGexbegKjYGUuRd1ClFU7G EtbiL0YB6kmPAICWKcu2EXRtmuJloTCQ -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:46 2025 by rpki-client