$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: 9cbpl5DiaC9ok0O4QYIVSaRz5FD62785rGuex3IWuhc= Subject key identifier: 21:2F:3F:A3:96:6C:A7:C3:12:BE:9B:7A:54:1C:CE:73:AB:82:10:4B Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 9F Signing time: Wed 05 Nov 2025 06:29:29 +0000 Manifest this update: Wed 05 Nov 2025 06:29:28 +0000 Manifest next update: Wed 12 Nov 2025 06:29:28 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: K37K/1teehKmri+RV8fS4ePvCl9/oTOOkoj7EeVkiRo=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Nov 5 06:29:28 2025 GMT Not After : Nov 12 06:29:28 2025 GMT Subject: CN=690aeec8-2fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3f:6e:62:7f:03:98:7c:f0:7d:a0:c7:2a:be: c0:fb:1f:8f:49:d2:84:22:91:4e:91:58:61:04:d0: df:d5:fe:1d:7b:d5:49:0e:05:55:12:f3:4f:e0:fc: 79:36:b6:ef:13:8b:4c:f6:49:d5:d3:63:0a:d0:3c: c9:66:3d:6e:ac:c9:b3:98:d4:3e:af:34:f7:fd:a4: 97:b0:ac:7d:96:e3:ac:8d:81:48:5a:01:77:e7:7d: 36:07:d0:30:23:5e:14:51:1d:f7:c1:da:6f:94:b1: 73:bc:02:da:0c:89:62:5c:ba:a0:fc:44:ea:ab:5d: c2:1f:e3:ca:7c:2f:cd:f5:65:4b:c6:72:c0:98:4a: b8:93:8a:39:08:a3:ce:f3:1d:5e:43:d8:40:63:83: ba:6a:08:70:c0:ef:a5:53:47:54:37:e6:f6:2c:6a: 99:77:a3:92:3a:e5:5c:b5:ae:eb:81:1c:cf:ff:c3: 9e:7c:0e:c1:e6:ab:d8:26:d2:79:cd:3c:88:fe:06: be:aa:e2:ef:35:e7:84:1e:9d:46:90:86:89:46:02: 5f:0e:6e:3f:25:03:a9:0f:a8:69:43:c6:7f:ae:36: f9:c0:91:8e:18:00:81:3a:40:b6:7f:19:b7:bd:92: 6e:4b:ad:c2:c2:8c:a1:5d:9f:0d:c9:d7:22:83:00: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2F:3F:A3:96:6C:A7:C3:12:BE:9B:7A:54:1C:CE:73:AB:82:10:4B X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:71:d6:4b:30:c3:e7:b3:a3:7f:f9:13:2f:aa:90:7a:66:fe: 50:75:b8:dd:03:54:d7:7e:61:14:d4:6b:17:48:42:5d:7c:cf: 1f:2d:f7:93:fb:32:02:10:d6:c1:62:7b:56:ae:39:1f:dc:34: 07:ca:c5:ec:4e:c7:e8:ed:aa:60:4f:e4:ab:fb:c5:e1:22:08: 8c:19:ec:ae:cd:03:5d:5e:9b:1f:83:dc:a5:21:7d:5e:11:ee: 47:5a:db:fa:64:83:50:b7:ef:d4:15:a5:44:9a:0e:9b:ab:bf: 6e:c1:be:32:b8:0b:96:39:c0:a1:bf:7a:3a:2b:fe:ce:cc:a1: 6a:7d:39:16:c6:35:0a:c8:2e:0a:af:81:c9:b2:be:d8:91:76: 4c:69:e5:b8:a0:ea:15:11:60:0a:f3:31:b3:a3:96:ea:9f:ab: be:21:dd:fb:c4:75:8e:bd:59:3e:16:0f:6f:32:fe:ef:5b:d5: ce:9a:74:55:14:6d:0a:dd:44:39:2a:88:17:8e:80:f1:51:5c: 96:60:42:35:5c:9b:e0:af:05:82:b5:09:9c:b0:74:b1:63:8c: d4:bd:11:bd:eb:36:b2:48:7d:af:10:2c:12:8b:94:df:77:e2: 42:14:05:65:2f:d2:d1:24:9c:8f:62:36:bf:81:40:91:61:02: 6b:74:58:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDk5QjcwQkYyMDI1RUREQ0RGOTJBNDdEMDRDQjc1NkFD QjA3M0RDNDUwHhcNMjUxMTA1MDYyOTI4WhcNMjUxMTEyMDYyOTI4WjAYMRYwFAYD VQQDEw02OTBhZWVjOC0yZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7j9uYn8DmHzwfaDHKr7A+x+PSdKEIpFOkVhhBNDf1f4de9VJDgVVEvNP4Px5 NrbvE4tM9knV02MK0DzJZj1urMmzmNQ+rzT3/aSXsKx9luOsjYFIWgF35302B9Aw I14UUR33wdpvlLFzvALaDIliXLqg/ETqq13CH+PKfC/N9WVLxnLAmEq4k4o5CKPO 8x1eQ9hAY4O6aghwwO+lU0dUN+b2LGqZd6OSOuVcta7rgRzP/8OefA7B5qvYJtJ5 zTyI/ga+quLvNeeEHp1GkIaJRgJfDm4/JQOpD6hpQ8Z/rjb5wJGOGACBOkC2fxm3 vZJuS63CwoyhXZ8NydcigwBK0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEvP6OW bKfDEr6belQcznOrghBLMB8GA1UdIwQYMBaAFJm3C/ICXt3N+SpH0Ey3Vqywc9xF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82REVGREI3MEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNjMzVLa2ZRVExkV3JMQnoz RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82REVGREI3MEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNj MzVLa2ZRVExkV3JMQnozRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBycdZLMMPns6N/+RMvqpB6Zv5QdbjdA1TXfmEU1GsXSEJdfM8fLfeT +zICENbBYntWrjkf3DQHysXsTsfo7apgT+Sr+8XhIgiMGeyuzQNdXpsfg9ylIX1e Ee5HWtv6ZINQt+/UFaVEmg6bq79uwb4yuAuWOcChv3o6K/7OzKFqfTkWxjUKyC4K r4HJsr7YkXZMaeW4oOoVEWAK8zGzo5bqn6u+Id37xHWOvVk+Fg9vMv7vW9XOmnRV FG0K3UQ5KogXjoDxUVyWYEI1XJvgrwWCtQmcsHSxY4zUvRG96zaySH2vECwSi5Tf d+JCFAVlL9LRJJyPYja/gUCRYQJrdFgV -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:34 2025 by rpki-client