$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: lW1U75L2zVnUDw5YNkthy3DnYmhiz5DUYKzw68tUCCo= Subject key identifier: D4:85:BD:66:A6:5C:3D:5C:3D:34:05:16:BD:E0:39:32:28:78:FF:D1 Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 047D Signing time: Mon 03 Nov 2025 00:04:39 +0000 Manifest this update: Mon 03 Nov 2025 00:04:38 +0000 Manifest next update: Mon 10 Nov 2025 00:04:38 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: uo/n7WM+wUdDhLQCEOjX6OTcsbawlcuSVnfDjz1VhV8=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 2rxDZmn8FcPG24Wlb4Jg090ASKMT6CB+r3+3kvhWtoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Nov 3 00:04:38 2025 GMT Not After : Nov 10 00:04:38 2025 GMT Subject: CN=6907f197-2a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:ff:fa:ed:fe:72:00:e5:ec:47:7a:36:24: 34:23:68:32:cd:10:c1:8b:d6:fe:5d:4a:e8:6f:4f: 0e:a3:39:1c:57:63:59:87:60:61:a8:1b:37:6c:4c: 38:4b:cc:32:f0:de:d1:51:7b:40:8f:06:19:1f:07: f9:79:4d:aa:54:61:aa:55:e0:6a:da:65:a2:64:42: fb:2b:11:e6:c8:eb:04:28:8d:8f:eb:87:82:96:f7: 2a:4b:3f:88:44:a6:fe:8c:8a:c1:d1:27:f4:da:1c: 2f:b9:df:c1:2e:bc:68:df:04:37:5f:a4:58:ed:6c: e2:5f:9a:ad:77:1e:c7:a4:df:a9:34:90:7f:c0:7c: 15:10:9c:0f:57:6a:79:f0:7a:74:fb:51:78:c9:da: 2b:8a:b3:0c:9f:fb:64:cc:3f:d8:b5:6c:6a:ba:f0: ee:08:cd:47:4d:b6:58:87:ba:84:5c:10:0f:f7:46: ff:94:e3:65:c3:57:ad:66:02:ca:7c:2e:60:e7:1a: a7:a5:e7:b7:d4:45:c8:33:8d:45:fa:59:d3:b6:15: 22:c3:65:a1:09:84:77:0d:3f:c2:4b:cb:76:15:c9: bc:31:40:3c:62:2b:e5:b1:13:5b:d8:2b:52:9a:83: da:64:58:d0:4c:32:0f:6f:c8:cf:38:ad:2b:75:06: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:BD:66:A6:5C:3D:5C:3D:34:05:16:BD:E0:39:32:28:78:FF:D1 X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a3:72:03:90:12:9e:26:0c:d3:49:b6:51:75:06:d3:e7:78: 17:b9:10:8a:db:33:99:f4:24:78:45:a8:96:f5:49:d8:f3:ef: 14:99:cc:a9:8c:5d:f1:ad:13:5b:0c:88:7e:fc:2e:99:0b:af: 35:6a:dc:51:49:fa:eb:ff:0b:41:80:1c:f8:e1:db:1a:06:49: cf:a8:c2:6d:81:98:7e:d8:82:22:b1:c2:8a:b6:52:12:3a:f6: b9:ae:05:ef:a1:c3:29:1c:46:0e:fc:9a:96:14:ee:28:bf:79: 25:f8:72:a9:37:5c:72:ff:c2:33:b5:1b:b2:20:87:fd:ed:62: bc:61:5e:1f:e2:66:a6:ec:05:8f:c5:25:1d:39:ad:2e:91:43: b3:d1:0f:e1:48:04:cb:70:0c:15:bf:aa:c3:6e:49:32:3f:b0: df:78:2b:da:bb:85:fc:b5:1f:35:90:32:5d:15:95:a6:62:63: ef:6c:1b:9f:29:1d:c6:a4:99:b5:ee:f5:b6:53:a2:67:f7:c0: 81:00:74:6a:f4:d8:ef:1b:f9:12:fa:6d:98:19:52:1c:ca:6a: 11:45:dd:32:81:07:eb:19:71:50:75:5c:de:b4:58:59:1a:96: 10:43:e0:11:6a:0d:d5:79:b8:c5:1b:3a:fa:45:8e:bf:b4:96: 8f:50:22:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjUxMTAzMDAwNDM4WhcNMjUxMTEwMDAwNDM4WjAYMRYwFAYD VQQDEw02OTA3ZjE5Ny0yYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPv/+u3+cgDl7Ed6NiQ0I2gyzRDBi9b+XUrob08OozkcV2NZh2BhqBs3bEw4 S8wy8N7RUXtAjwYZHwf5eU2qVGGqVeBq2mWiZEL7KxHmyOsEKI2P64eClvcqSz+I RKb+jIrB0Sf02hwvud/BLrxo3wQ3X6RY7WziX5qtdx7HpN+pNJB/wHwVEJwPV2p5 8Hp0+1F4ydorirMMn/tkzD/YtWxquvDuCM1HTbZYh7qEXBAP90b/lONlw1etZgLK fC5g5xqnpee31EXIM41F+lnTthUiw2WhCYR3DT/CS8t2Fcm8MUA8YivlsRNb2CtS moPaZFjQTDIPb8jPOK0rdQZTmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSFvWam XD1cPTQFFr3gOTIoeP/RMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWo3IDkBKeJgzTSbZRdQbT53gXuRCK2zOZ9CR4RaiW9UnY8+8Umcyp jF3xrRNbDIh+/C6ZC681atxRSfrr/wtBgBz44dsaBknPqMJtgZh+2IIiscKKtlIS Ova5rgXvocMpHEYO/JqWFO4ov3kl+HKpN1xy/8IztRuyIIf97WK8YV4f4mam7AWP xSUdOa0ukUOz0Q/hSATLcAwVv6rDbkkyP7DfeCvau4X8tR81kDJdFZWmYmPvbBuf KR3GpJm17vW2U6Jn98CBAHRq9NjvG/kS+m2YGVIcymoRRd0ygQfrGXFQdVzetFhZ GpYQQ+ARag3VebjFGzr6RY6/tJaPUCJ5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:31 2025 by rpki-client