$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: ZklxxClBT1WCcQoTUDQhtSwkXoWnnNNCHFBM3MK6wVM= Subject key identifier: 7C:B6:47:86:0C:88:CB:B7:E7:91:49:B9:7B:A2:08:A7:EB:51:2B:B1 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0163 Signing time: Wed 29 Oct 2025 03:47:44 +0000 Manifest this update: Wed 29 Oct 2025 03:47:44 +0000 Manifest next update: Wed 05 Nov 2025 03:47:44 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: ZuDP556GlBos1MvTEcduBJ9kE88oibA5leO8uk0H1N0=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Oct 29 03:47:44 2025 GMT Not After : Nov 5 03:47:44 2025 GMT Subject: CN=69018e60-2b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:ef:6e:a7:66:a9:34:b3:d8:cd:d8:6b:9f: 23:d4:04:4d:41:04:41:56:e3:53:f7:24:7d:64:31: b7:e5:9c:84:46:04:02:c7:bf:bc:98:86:eb:cc:c2: 2c:af:a1:a1:37:16:ef:66:37:8d:6c:01:1c:25:0f: 79:b7:d8:b0:69:0d:48:37:41:52:a1:49:dc:d2:4f: 7e:6e:66:61:ed:3d:81:e9:2c:58:62:6d:70:3d:d7: 6e:6b:7f:40:02:e9:f0:b9:f4:df:c2:0f:32:ed:03: af:95:a5:f0:2d:61:6d:1e:01:05:14:8c:60:0b:6f: 25:7d:eb:9b:df:7b:ac:3b:48:ec:42:ee:6d:16:3a: 10:e9:65:fa:0f:5b:58:23:48:cd:ea:08:eb:56:ae: 39:4b:ea:fe:cb:26:8d:8e:a8:99:00:5a:68:25:0d: f4:fa:6f:33:03:0d:db:d0:51:93:48:17:cd:8d:70: d2:df:e4:9b:cc:13:28:0f:6c:4a:fa:4b:8a:57:fd: c0:ed:2b:eb:02:6a:b9:13:e9:14:cc:c3:40:23:37: 52:8d:82:33:66:3f:30:da:79:51:4b:d7:c5:3a:a4: 8d:b9:6f:75:61:2d:eb:39:f7:6d:df:74:0b:14:42: 1c:16:ee:a8:d2:62:77:ba:81:ce:09:9f:a2:fb:c9: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:47:86:0C:88:CB:B7:E7:91:49:B9:7B:A2:08:A7:EB:51:2B:B1 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b9:af:84:6a:d5:9a:bf:5a:6b:8d:bd:76:7c:86:89:52:c5: 1f:03:d1:8a:d0:f1:d2:90:8a:a3:ab:3c:bf:90:3c:82:11:91: 60:f8:63:d8:aa:7c:4b:a9:bf:ab:75:c9:31:82:bf:a7:8a:e1: 2b:40:7a:a6:32:18:9d:27:0a:3c:00:ee:80:bf:14:01:7b:4a: f1:a6:16:6a:37:ba:0d:db:45:9d:80:66:21:fc:b2:85:c6:ad: b4:1b:ca:8f:18:03:57:fb:5e:8b:e5:80:c5:79:49:a0:5e:c5: 27:9b:5b:08:9e:ae:62:0d:1f:4c:56:4c:99:6a:11:be:6f:57: d3:29:c4:85:b4:61:f9:1a:65:84:dc:c4:0f:f4:14:25:aa:f5: 31:c9:29:7b:df:c7:9c:5d:4a:f5:09:3d:14:05:b8:2a:fd:14: a2:19:0e:18:84:9e:7d:3a:f2:ec:2d:3f:57:f5:b5:9a:8b:80: 52:31:3c:86:0d:96:b3:53:bc:b4:33:ee:bd:6e:5d:53:22:cc: 75:8e:98:91:20:be:07:5d:5c:12:bc:fb:ed:aa:cc:21:3a:2a: 1d:17:f0:15:dc:ae:08:0a:31:71:11:87:83:72:d1:81:18:5f: 1c:83:24:bc:27:6d:25:30:40:94:12:51:ef:f9:26:28:17:26: 6e:c6:b4:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUxMDI5MDM0NzQ0WhcNMjUxMTA1MDM0NzQ0WjAYMRYwFAYD VQQDEw02OTAxOGU2MC0yYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDjvbqdmqTSz2M3Ya58j1ARNQQRBVuNT9yR9ZDG35ZyERgQCx7+8mIbrzMIs r6GhNxbvZjeNbAEcJQ95t9iwaQ1IN0FSoUnc0k9+bmZh7T2B6SxYYm1wPddua39A AunwufTfwg8y7QOvlaXwLWFtHgEFFIxgC28lfeub33usO0jsQu5tFjoQ6WX6D1tY I0jN6gjrVq45S+r+yyaNjqiZAFpoJQ30+m8zAw3b0FGTSBfNjXDS3+SbzBMoD2xK +kuKV/3A7SvrAmq5E+kUzMNAIzdSjYIzZj8w2nlRS9fFOqSNuW91YS3rOfdt33QL FEIcFu6o0mJ3uoHOCZ+i+8lXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy2R4YM iMu355FJuXuiCKfrUSuxMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLua+EatWav1prjb12fIaJUsUfA9GK0PHSkIqjqzy/kDyCEZFg+GPY qnxLqb+rdckxgr+niuErQHqmMhidJwo8AO6AvxQBe0rxphZqN7oN20WdgGYh/LKF xq20G8qPGANX+16L5YDFeUmgXsUnm1sInq5iDR9MVkyZahG+b1fTKcSFtGH5GmWE 3MQP9BQlqvUxySl738ecXUr1CT0UBbgq/RSiGQ4YhJ59OvLsLT9X9bWai4BSMTyG DZazU7y0M+69bl1TIsx1jpiRIL4HXVwSvPvtqswhOiodF/AV3K4ICjFxEYeDctGB GF8cgyS8J20lMECUElHv+SYoFyZuxrSw -----END CERTIFICATE-----Generated at Thu Oct 30 08:25:57 2025 by rpki-client