$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: m1iNN+AMslqlkbeF8A28yy1vAXA2syBrOR+gEBvBVFI= Subject key identifier: 89:96:13:DA:A5:76:1A:13:49:70:31:1D:C2:3C:16:D9:AE:8B:F6:05 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: EB Signing time: Mon 03 Nov 2025 05:19:55 +0000 Manifest this update: Mon 03 Nov 2025 05:19:54 +0000 Manifest next update: Mon 10 Nov 2025 05:19:54 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: CLOya73gwYtGXEe9to1iIHffb3GxJoL+3S7XxbeEJps=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: DO2YJbZIejvhdRtGsWt15hXuGZ1AtCApUsm5r0ZPTOY=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: uNvFYFvkjJZjp/LZ4h4+VeJimlHrCmp4OMSUdPIoHFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Nov 3 05:19:54 2025 GMT Not After : Nov 10 05:19:54 2025 GMT Subject: CN=69083b7a-0a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9c:08:d9:d4:4d:17:b5:29:90:87:81:8c:0c: 30:e0:97:b7:72:a3:e7:d6:db:e6:3c:64:0a:0a:73: 66:d9:28:92:4b:ab:86:f4:6f:a5:80:cd:04:28:8e: 49:b4:89:a5:f1:e8:43:74:2c:70:9e:3d:9c:10:bb: 4e:4f:30:1a:12:45:ed:89:b8:c6:87:47:2d:f4:2e: 52:58:da:dd:94:7a:39:82:de:aa:ea:50:2a:e8:d2: 8c:eb:bb:26:b7:4e:d1:31:00:36:6c:b1:96:69:67: 38:22:e9:a6:0b:44:94:c8:62:25:42:b5:af:f3:1c: 54:51:b1:34:db:5b:ad:a6:4e:a4:f8:bc:97:24:71: bc:a1:01:a3:b4:0a:4b:2a:f3:eb:b4:51:18:17:d4: b9:97:f9:5b:2d:c9:ab:09:93:50:60:be:9d:4b:ad: f9:c4:2f:07:23:21:89:95:3f:6a:e5:bc:dc:b3:35: 72:b9:b8:87:36:fc:14:df:5d:da:f8:7b:62:83:f3: d1:6e:50:00:ac:24:f8:42:f6:ba:04:de:c5:a1:9b: a5:29:57:5a:c2:a8:8a:45:74:75:26:0c:93:4e:a8: bd:cf:ff:7b:ff:17:a0:4e:74:56:51:22:67:e5:70: c7:ab:3d:f9:c9:56:b2:b1:1d:7c:f9:56:e2:2d:48: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:96:13:DA:A5:76:1A:13:49:70:31:1D:C2:3C:16:D9:AE:8B:F6:05 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:39:b0:25:3b:1f:79:99:5c:d0:8d:7f:66:44:01:4c:cc:56: 7c:e0:fd:94:27:9e:f7:b5:d6:2d:d1:fb:bf:91:54:00:3f:fb: a0:d6:a0:4b:1a:48:08:55:9f:41:f0:ac:c2:ed:59:4d:88:5d: b0:eb:bb:38:6c:8a:88:83:36:bb:23:e5:71:f6:de:a7:1f:43: 14:30:37:0a:ff:a9:e4:c9:35:4b:04:bb:85:db:7d:34:bb:93: 3d:5e:0a:cd:27:2c:1d:00:4b:91:59:9b:0b:8f:48:19:ff:68: 4c:54:fe:92:96:64:e5:da:f1:cd:4b:89:09:64:30:55:80:24: d5:86:48:c8:4f:86:a3:18:ac:75:b5:dd:7d:fc:f4:4a:32:c5: c3:e4:b4:a8:c1:be:86:eb:d4:fc:f3:e1:d0:4f:ac:ea:f1:80: f1:0d:bf:e3:17:38:90:58:20:ee:19:7d:52:32:0d:97:7a:bc: f1:f0:d6:32:ef:12:53:87:f1:64:a4:ba:95:59:e0:bc:ff:f1: f3:64:ed:36:fe:c5:23:61:5b:2c:67:d3:10:47:54:86:57:be: c1:a9:e9:58:a1:ce:c7:c4:3b:33:78:17:fc:52:21:ed:16:f7: f0:29:2a:30:f5:7a:d0:80:ce:24:71:ec:24:c0:6b:88:48:25: 8f:75:4d:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUxMTAzMDUxOTU0WhcNMjUxMTEwMDUxOTU0WjAYMRYwFAYD VQQDEw02OTA4M2I3YS0wYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pwI2dRNF7UpkIeBjAww4Je3cqPn1tvmPGQKCnNm2SiSS6uG9G+lgM0EKI5J tIml8ehDdCxwnj2cELtOTzAaEkXtibjGh0ct9C5SWNrdlHo5gt6q6lAq6NKM67sm t07RMQA2bLGWaWc4IummC0SUyGIlQrWv8xxUUbE021utpk6k+LyXJHG8oQGjtApL KvPrtFEYF9S5l/lbLcmrCZNQYL6dS635xC8HIyGJlT9q5bzcszVyubiHNvwU313a +Htig/PRblAArCT4Qva6BN7FoZulKVdawqiKRXR1JgyTTqi9z/97/xegTnRWUSJn 5XDHqz35yVaysR18+VbiLUgQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImWE9ql dhoTSXAxHcI8Ftmui/YFMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ObAlOx95mVzQjX9mRAFMzFZ84P2UJ573tdYt0fu/kVQAP/ug1qBL GkgIVZ9B8KzC7VlNiF2w67s4bIqIgza7I+Vx9t6nH0MUMDcK/6nkyTVLBLuF2300 u5M9XgrNJywdAEuRWZsLj0gZ/2hMVP6SlmTl2vHNS4kJZDBVgCTVhkjIT4ajGKx1 td19/PRKMsXD5LSowb6G69T88+HQT6zq8YDxDb/jFziQWCDuGX1SMg2Xerzx8NYy 7xJTh/FkpLqVWeC8//HzZO02/sUjYVssZ9MQR1SGV77BqelYoc7HxDszeBf8UiHt FvfwKSow9XrQgM4kcewkwGuISCWPdU2d -----END CERTIFICATE-----Generated at Tue Nov 4 11:25:51 2025 by rpki-client