$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: xcq5pfM9W9z4dPtO4zb+V2pD++5vB02zD6rRWCzxMsQ= Subject key identifier: 64:AF:79:DE:86:61:5F:7E:AF:29:03:14:3F:A0:D3:C2:CD:5B:47:77 Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 2B Signing time: Mon 03 Nov 2025 07:40:04 +0000 Manifest this update: Mon 03 Nov 2025 07:40:03 +0000 Manifest next update: Mon 10 Nov 2025 07:40:03 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: UwA9eDp7938uD6+/te/pGByO6uL630cUJJPN50Gg6Kg=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: Nov 3 07:40:03 2025 GMT Not After : Nov 10 07:40:03 2025 GMT Subject: CN=69085c54-b5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:15:66:d3:c6:a1:09:56:d8:4e:73:d2:87: dd:4c:b5:9d:8f:a7:9d:ef:51:77:80:8b:60:5a:f2: 6e:ed:59:f3:ef:b9:9a:06:88:6d:9e:b3:af:11:94: 2c:30:52:27:fd:73:c7:04:e5:8d:dd:f3:eb:2c:88: c6:50:e4:71:ec:7b:b1:81:e6:87:11:6a:1b:8a:aa: ba:21:0e:27:bc:a2:cd:25:fd:b0:7a:2b:02:75:83: 6a:a4:77:3a:8b:30:e9:cf:68:eb:92:0c:41:2b:ac: 56:35:7c:32:97:d8:60:60:ee:30:24:fc:a7:e2:a8: ce:44:01:3d:c8:2e:90:37:f2:74:15:94:d4:55:25: d1:55:77:da:98:77:3e:0e:b7:38:8c:27:1a:44:bb: 55:7d:89:1d:a5:93:56:f2:0c:0c:2c:e0:6b:59:ac: 3a:86:56:ee:ca:11:bf:58:df:12:f3:84:fb:7b:9c: 6f:e9:92:20:8c:df:dc:86:59:cb:a1:d5:84:4e:ec: 58:2f:21:0b:fc:48:45:de:6f:e9:b1:aa:0e:15:e3: aa:b9:d0:9e:5c:e4:dd:5c:07:41:d3:b7:a2:8c:d1: e0:d2:eb:fd:b2:d6:7b:54:00:c7:42:5d:a7:68:3d: 9f:aa:92:7a:9e:81:a5:9f:e0:f4:7f:61:54:94:b6: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AF:79:DE:86:61:5F:7E:AF:29:03:14:3F:A0:D3:C2:CD:5B:47:77 X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:6e:48:9e:27:e0:d4:4a:dc:b8:8d:b7:ba:9d:bd:1d:f2:a1: 48:56:b8:f6:1e:ce:51:1f:a9:7f:88:93:3a:66:34:d3:7f:25: 19:2c:03:fc:4f:68:5a:ba:a3:c8:dd:7d:e2:63:6c:d8:01:07: 12:7d:f7:fe:43:58:c4:ed:bb:2e:1c:1d:54:00:1b:13:0f:f5: 69:a1:a2:19:50:16:d8:9f:ea:35:f5:6a:2e:e7:ee:3d:96:b7: a9:b2:d1:73:8d:c5:aa:e1:70:86:6c:e6:3a:37:24:22:80:aa: c7:ea:37:31:f0:01:f6:d4:83:ac:91:f0:8f:f9:d5:4a:1a:4d: d5:90:bc:ec:b6:38:00:f0:5e:95:b0:e5:35:53:7e:b2:d0:f6: 45:7e:0a:01:b5:3b:a5:6e:ad:d0:77:d2:99:95:fe:68:a2:4d: d8:13:1b:c1:d0:5a:ad:e8:55:24:03:a7:bc:d3:c2:cf:c3:f1: bf:57:ac:b3:fd:86:fd:65:ed:4e:12:07:dc:ff:35:aa:22:5f: 77:f0:69:dc:65:f9:f1:2e:31:17:90:d1:23:cb:81:7f:3c:b2: 68:d8:8e:3b:72:36:01:21:02:2e:dc:0a:3e:51:3a:62:67:43: 85:ea:e3:f3:4b:f4:b4:65:1d:35:89:83:58:3c:7e:31:0e:08: 84:f9:f6:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUREQTExMC8GA1UEBRMoRTUxMDIwOEZEMzkwNDJFMzM2NjIxMzBBNDJBOEY4M0ZF RUNGQkU3NDAeFw0yNTExMDMwNzQwMDNaFw0yNTExMTAwNzQwMDNaMBgxFjAUBgNV BAMTDTY5MDg1YzU0LWI1YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwgxVm08ahCVbYTnPSh91MtZ2Pp53vUXeAi2Ba8m7tWfPvuZoGiG2es68RlCww Uif9c8cE5Y3d8+ssiMZQ5HHse7GB5ocRahuKqrohDie8os0l/bB6KwJ1g2qkdzqL MOnPaOuSDEErrFY1fDKX2GBg7jAk/KfiqM5EAT3ILpA38nQVlNRVJdFVd9qYdz4O tziMJxpEu1V9iR2lk1byDAws4GtZrDqGVu7KEb9Y3xLzhPt7nG/pkiCM39yGWcuh 1YRO7FgvIQv8SEXeb+mxqg4V46q50J5c5N1cB0HTt6KM0eDS6/2y1ntUAMdCXado PZ+qknqegaWf4PR/YVSUtvmVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZK953oZh X36vKQMUP6DTws1bR3cwHwYDVR0jBBgwFoAU5RAgj9OQQuM2YhMKQqj4P+7PvnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RERBLzgwQUMwOTg2Nzk2 RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVJBZ2o5T1FRdU0yWWhNS1FxajRQLTdQdm5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RERBLzgwQUMwOTg2Nzk2RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVN MlloTUtRcWo0UC03UHZuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALNuSJ4n4NRK3LiNt7qdvR3yoUhWuPYezlEfqX+IkzpmNNN/JRksA/xP aFq6o8jdfeJjbNgBBxJ99/5DWMTtuy4cHVQAGxMP9WmhohlQFtif6jX1ai7n7j2W t6my0XONxarhcIZs5jo3JCKAqsfqNzHwAfbUg6yR8I/51UoaTdWQvOy2OADwXpWw 5TVTfrLQ9kV+CgG1O6VurdB30pmV/miiTdgTG8HQWq3oVSQDp7zTws/D8b9XrLP9 hv1l7U4SB9z/NaoiX3fwadxl+fEuMReQ0SPLgX88smjYjjtyNgEhAi7cCj5ROmJn Q4Xq4/NL9LRlHTWJg1g8fjEOCIT59ug= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:59 2025 by rpki-client