$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: z+tb5sd8hHeL1bYPIsik9Jl1haxwe6MB8pAwZ/OxOEM= Subject key identifier: DC:C2:E0:65:8A:82:13:43:D2:CA:9C:41:05:E2:DC:03:33:1C:36:A0 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 080B Signing time: Sat 08 Nov 2025 19:54:47 +0000 Manifest this update: Sat 08 Nov 2025 19:54:47 +0000 Manifest next update: Sat 15 Nov 2025 19:54:47 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: DTOcUWP+FrrwI49G74gJ8ybHnIsaDyhINz3b2suKvdI=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 19:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Nov 8 19:54:47 2025 GMT Not After : Nov 15 19:54:47 2025 GMT Subject: CN=690fa007-252e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:09:33:25:52:43:79:25:9f:d4:03:c9:6f: c3:31:2e:82:00:f7:d1:85:57:eb:b9:5e:ab:3d:c4: aa:8d:41:3e:e5:61:1a:55:ef:b8:88:1b:ad:42:42: 6e:d6:98:ba:06:36:3b:da:f1:3a:8b:26:d0:12:b4: 96:a2:67:f8:31:21:6b:c7:f6:be:c6:b1:42:52:ff: 58:b9:aa:42:7c:d4:ba:4a:3b:e1:63:2e:3a:09:64: 2d:58:eb:dc:1e:5d:63:03:58:25:1a:f4:09:d0:e2: 94:8d:3c:9b:86:1e:93:21:f5:52:6e:07:de:1f:ad: be:fc:58:ba:f7:98:f9:b4:cd:60:63:5d:31:1e:ca: 46:f0:68:af:ed:15:e0:c1:16:79:75:f1:9b:ec:f3: 1d:87:7f:b3:78:55:4f:31:a8:77:72:2b:ed:17:0d: 7c:34:53:6a:61:43:8d:0a:5e:6d:0a:a0:5c:dc:f0: c0:96:eb:4d:59:e9:61:62:af:f3:1e:5f:aa:1c:c3: 11:b1:4e:b4:a8:45:bf:7a:f9:4b:7e:0c:53:6a:34: 5e:24:a4:7c:6b:e4:6e:b5:c3:1d:a4:32:89:32:f5: c4:14:cc:ef:44:0e:b9:b4:18:68:62:d2:be:97:62: 87:f2:e2:58:6e:b2:4e:18:b1:28:a7:9b:9f:0d:d9: 57:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:E0:65:8A:82:13:43:D2:CA:9C:41:05:E2:DC:03:33:1C:36:A0 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:1f:14:6c:81:96:72:a0:f5:73:19:0b:bb:08:f3:b5:a0: 90:1d:b3:9b:3c:76:f9:96:b8:9d:fc:d4:d7:4d:3b:81:ce:9e: 31:cf:34:38:21:5d:3e:4e:d2:d0:f2:b6:fa:6a:70:7e:ca:48: 01:df:1a:57:2a:f1:c8:f2:d1:85:d5:4a:ce:f1:c4:75:16:aa: c8:87:61:9b:a9:a2:c8:0d:ae:34:32:ed:d9:91:0a:f3:a0:78: 94:e4:3e:db:32:70:31:f8:76:81:f8:fa:b6:cd:fd:86:79:be: 63:f0:0f:0d:55:8d:75:57:24:fa:1c:8f:1e:55:f7:fe:8f:c7: 7a:90:77:b7:d2:e3:d5:42:cd:08:c8:06:3b:20:01:0d:bc:52: ce:b2:fe:91:6a:67:39:bb:44:2c:b4:3e:c8:75:6e:3f:af:a9: d6:3c:28:e9:38:b6:b3:81:94:15:19:12:91:70:9c:a0:b6:ed: b4:00:63:b9:93:c4:72:27:1c:35:74:1c:25:7d:71:7b:4c:0e: 03:e4:42:32:bf:cb:bf:c6:c6:7e:04:a5:e2:71:a3:b6:a2:86: 09:fe:79:b2:f9:a7:17:d2:16:e9:b2:e8:92:af:b7:ac:50:ff: 9d:ef:79:22:cc:a6:09:74:ae:7b:08:e6:71:8a:c3:4b:4a:65: ab:41:ea:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUxMTA4MTk1NDQ3WhcNMjUxMTE1MTk1NDQ3WjAYMRYwFAYD VQQDEw02OTBmYTAwNy0yNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6cJMyVSQ3kln9QDyW/DMS6CAPfRhVfruV6rPcSqjUE+5WEaVe+4iButQkJu 1pi6BjY72vE6iybQErSWomf4MSFrx/a+xrFCUv9YuapCfNS6SjvhYy46CWQtWOvc Hl1jA1glGvQJ0OKUjTybhh6TIfVSbgfeH62+/Fi695j5tM1gY10xHspG8Giv7RXg wRZ5dfGb7PMdh3+zeFVPMah3civtFw18NFNqYUONCl5tCqBc3PDAlutNWelhYq/z Hl+qHMMRsU60qEW/evlLfgxTajReJKR8a+RutcMdpDKJMvXEFMzvRA65tBhoYtK+ l2KH8uJYbrJOGLEop5ufDdlX/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzC4GWK ghND0sqcQQXi3AMzHDagMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWPB8UbIGWcqD1cxkLuwjztaCQHbObPHb5lrid/NTXTTuBzp4xzzQ4 IV0+TtLQ8rb6anB+ykgB3xpXKvHI8tGF1UrO8cR1FqrIh2GbqaLIDa40Mu3ZkQrz oHiU5D7bMnAx+HaB+Pq2zf2Geb5j8A8NVY11VyT6HI8eVff+j8d6kHe30uPVQs0I yAY7IAENvFLOsv6Ramc5u0QstD7IdW4/r6nWPCjpOLazgZQVGRKRcJygtu20AGO5 k8RyJxw1dBwlfXF7TA4D5EIyv8u/xsZ+BKXicaO2ooYJ/nmy+acX0hbpsuiSr7es UP+d73kizKYJdK57COZxisNLSmWrQeqf -----END CERTIFICATE-----Generated at Sun Nov 9 10:23:07 2025 by rpki-client