$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: Lc8XING0GnKmPh7UoUOpxU8kUSUism2zubNeZnh0Cd4= Subject key identifier: D8:84:04:EA:B5:A1:A2:6B:91:98:B0:C4:97:72:7F:09:67:E5:FB:45 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2BF7 Signing time: Tue 04 Nov 2025 15:34:53 +0000 Manifest this update: Tue 04 Nov 2025 15:34:53 +0000 Manifest next update: Tue 11 Nov 2025 15:34:53 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: FHU5VQc13HJVMplrxmcxDTJ3A8A6ni5mHxhIsHWQtT8=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11272 (0x2c08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: Nov 4 15:34:53 2025 GMT Not After : Nov 11 15:34:53 2025 GMT Subject: CN=690a1d1d-96e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:de:41:29:7e:f9:36:c8:ea:0c:cc:9b:c2: 41:95:44:d0:0f:63:b8:f8:1f:7d:97:b0:e8:5d:5d: 03:08:3d:31:c4:2c:3d:33:fb:74:4a:a5:ad:a3:7c: 77:2a:bb:fa:0f:95:8d:ea:31:27:f6:09:52:34:9a: a3:7e:ff:2c:ac:e5:29:11:17:ec:93:b9:1c:81:f5: 27:f1:d2:c0:38:3a:a5:7f:f0:36:60:cb:a6:84:af: 63:69:0f:2b:69:47:0e:30:66:b2:25:e7:fb:c9:80: 8b:c4:8d:4a:b3:a3:8f:33:26:18:78:07:19:e9:c7: 10:f3:64:0f:03:b2:12:96:71:0a:f6:98:95:e4:79: de:66:42:87:2a:b6:9a:bc:02:42:51:70:3c:97:7e: ee:ef:a2:66:18:64:7f:14:34:ee:6c:67:c8:3c:e1: da:9a:c1:d8:f8:87:f7:89:07:fe:c7:6d:49:e4:c2: ae:68:89:cd:4e:2d:64:06:03:4b:32:d6:9a:e6:a5: d0:d5:ad:90:cf:7a:c8:2a:c6:99:01:90:c0:dd:f7: 6a:c5:bb:2e:c3:dc:9d:79:58:63:00:d3:c5:bd:a8: cc:a9:56:c9:45:a3:fd:ce:5c:08:e0:d3:0e:d2:35: 7f:c9:31:28:44:f2:dc:a1:44:cd:bc:1b:09:ae:11: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:84:04:EA:B5:A1:A2:6B:91:98:B0:C4:97:72:7F:09:67:E5:FB:45 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b8:ca:8e:99:c7:eb:47:5c:7c:9f:e5:80:e6:09:9e:59:1c: aa:82:61:bb:a6:74:9d:71:89:49:e5:ed:24:d5:b5:e3:dc:c3: 2e:62:0b:a3:30:4d:61:18:c8:98:cb:ff:80:0d:91:38:a4:ad: 9a:4d:da:c8:99:cc:e2:55:9d:90:1b:ca:e9:66:23:ae:f7:f5: a9:8a:23:ee:30:ba:84:1d:80:eb:95:e0:f2:1c:48:a7:8b:4c: e9:51:0a:a7:b2:da:d8:d1:51:d5:99:57:89:73:e4:9c:2c:e5: 8b:39:88:e1:cf:93:00:8f:3c:c7:87:11:c8:bc:aa:d7:d1:8c: 54:5e:09:e5:eb:99:ec:70:b7:d8:c2:af:cb:a9:50:46:97:dd: 27:1f:9c:f8:d1:b8:56:ad:71:d5:36:a3:80:58:0d:cf:ac:88: 41:58:b1:7d:58:86:b2:c9:78:55:a1:ec:ed:b9:4f:80:a2:f7: 8f:05:e9:bd:da:44:c0:92:06:3b:0f:8a:2a:c3:f3:10:bd:64: 38:e2:7e:9d:e6:41:35:8b:a6:71:c8:d6:ee:14:9c:20:98:8e: 81:e8:58:e6:ec:93:4b:fa:b6:ea:15:70:b2:c2:15:d0:7b:19: b7:2b:a9:df:d4:82:c5:5d:42:52:2c:e2:3b:93:69:31:24:e5: 96:15:d8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUxMTA0MTUzNDUzWhcNMjUxMTExMTUzNDUzWjAYMRYwFAYD VQQDEw02OTBhMWQxZC05NmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL/eQSl++TbI6gzMm8JBlUTQD2O4+B99l7DoXV0DCD0xxCw9M/t0SqWto3x3 Krv6D5WN6jEn9glSNJqjfv8srOUpERfsk7kcgfUn8dLAODqlf/A2YMumhK9jaQ8r aUcOMGayJef7yYCLxI1Ks6OPMyYYeAcZ6ccQ82QPA7ISlnEK9piV5HneZkKHKraa vAJCUXA8l37u76JmGGR/FDTubGfIPOHamsHY+If3iQf+x21J5MKuaInNTi1kBgNL Mtaa5qXQ1a2Qz3rIKsaZAZDA3fdqxbsuw9ydeVhjANPFvajMqVbJRaP9zlwI4NMO 0jV/yTEoRPLcoUTNvBsJrhFYWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiEBOq1 oaJrkZiwxJdyfwln5ftFMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEuMqOmcfrR1x8n+WA5gmeWRyqgmG7pnSdcYlJ5e0k1bXj3MMuYguj ME1hGMiYy/+ADZE4pK2aTdrImcziVZ2QG8rpZiOu9/WpiiPuMLqEHYDrleDyHEin i0zpUQqnstrY0VHVmVeJc+ScLOWLOYjhz5MAjzzHhxHIvKrX0YxUXgnl65nscLfY wq/LqVBGl90nH5z40bhWrXHVNqOAWA3PrIhBWLF9WIayyXhVoeztuU+AovePBem9 2kTAkgY7D4oqw/MQvWQ44n6d5kE1i6ZxyNbuFJwgmI6B6Fjm7JNL+rbqFXCywhXQ exm3K6nf1ILFXUJSLOI7k2kxJOWWFdiw -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:21 2025 by rpki-client