$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: kGS4VVfryQD9iw/3rt0s2xg1U3NXud7f19hiGYpdgTA= Subject key identifier: FA:A8:51:B7:7F:F2:B5:60:41:E0:A9:F3:D2:27:B6:F5:59:B5:EA:08 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 01F1 Signing time: Mon 03 Nov 2025 02:36:13 +0000 Manifest this update: Mon 03 Nov 2025 02:36:12 +0000 Manifest next update: Mon 10 Nov 2025 02:36:12 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: 65M+Jtl1EA6a+ddJp+zs0KTmnYbIDDaam8K341dVotU=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 8oKi9g3FW28uCT296akypss1lnTC3S8VPwt27zeBIKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Nov 3 02:36:12 2025 GMT Not After : Nov 10 02:36:12 2025 GMT Subject: CN=6908151c-329d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:39:e8:ea:4d:e2:79:5b:cb:05:61:0e:4b: db:b3:05:49:b0:15:0f:41:0f:79:bc:12:fe:9d:61: 7d:f4:36:16:c0:05:e5:a5:10:24:43:83:25:46:a7: 58:7c:d7:62:e6:31:4d:f2:d0:2e:6c:20:c8:ff:53: 76:f7:83:6e:a5:05:bb:e4:0f:c1:bc:d7:b4:e7:b3: 96:02:d3:2a:b7:61:26:a9:41:d4:f1:5d:91:6a:ad: 07:a3:8d:71:18:d5:8a:31:0a:43:0d:6d:a6:d7:08: 00:30:3b:a3:24:aa:d0:f2:82:b2:99:0b:c1:83:76: f2:be:65:a0:7d:c1:dc:b2:22:22:0c:5c:20:09:b2: 33:36:f8:8a:45:89:29:86:26:f5:fd:81:33:b7:76: e0:63:a6:6b:2d:3d:66:06:1a:92:8b:dc:f9:8f:cf: 18:33:c9:1e:85:1c:22:cc:32:b3:f2:fa:92:1a:c4: 4b:64:e2:ef:7e:d2:b1:2e:c9:9e:97:ec:87:8e:fc: 83:26:81:b7:c1:fb:66:44:55:be:9a:db:75:ea:4f: 25:5a:75:73:05:ef:c3:e9:5c:74:70:d2:06:fb:83: 86:8b:c7:18:3c:6c:1b:50:af:cd:7c:f6:45:b3:38: 21:ea:8d:f7:16:7e:69:0b:90:9e:68:58:eb:ab:be: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:51:B7:7F:F2:B5:60:41:E0:A9:F3:D2:27:B6:F5:59:B5:EA:08 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:96:7d:7d:45:89:06:d3:a1:d2:c4:74:43:d9:4e:75:ae: 7a:7c:3f:f4:fe:5e:a3:c5:d6:b3:13:ec:70:b8:f1:b5:75:96: b3:ae:c7:07:20:ca:5a:a9:7c:22:b8:2b:ed:b7:53:ca:dc:be: 0a:40:fd:49:50:67:9b:15:9e:b1:42:04:8a:09:c9:2a:48:4e: 30:0b:85:bd:cc:1b:2a:07:f1:40:7b:1f:cf:cc:cc:12:3b:12: 8c:21:48:09:89:42:55:8c:c4:a4:97:81:93:ef:42:f3:61:7e: 0f:18:1d:66:c4:aa:12:a6:be:b4:fa:6b:64:42:d3:df:f2:d3: 4f:7b:a5:cd:2f:9f:6b:d9:fb:28:d1:42:a1:f8:07:cd:b6:ac: fc:83:34:43:be:64:46:9a:2b:3d:6c:50:7c:09:83:6a:23:72: c9:2a:50:55:74:66:eb:77:08:c7:d1:db:c5:37:79:1f:9f:ec: b1:00:b5:23:9b:47:c5:ed:87:bf:db:f1:9f:52:0f:31:ac:02: 6c:eb:d9:80:2f:eb:e5:03:3c:e4:75:58:5b:0f:e1:a5:c3:b9: 27:68:67:61:a6:f4:b3:1b:57:19:99:e7:95:85:c1:5d:40:1a: 41:6f:65:26:1a:f1:c0:57:04:27:80:7f:9c:0b:c8:0e:f1:02: b1:69:4c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjUxMTAzMDIzNjEyWhcNMjUxMTEwMDIzNjEyWjAYMRYwFAYD VQQDEw02OTA4MTUxYy0zMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy056OpN4nlbywVhDkvbswVJsBUPQQ95vBL+nWF99DYWwAXlpRAkQ4MlRqdY fNdi5jFN8tAubCDI/1N294NupQW75A/BvNe057OWAtMqt2EmqUHU8V2Raq0Ho41x GNWKMQpDDW2m1wgAMDujJKrQ8oKymQvBg3byvmWgfcHcsiIiDFwgCbIzNviKRYkp hib1/YEzt3bgY6ZrLT1mBhqSi9z5j88YM8kehRwizDKz8vqSGsRLZOLvftKxLsme l+yHjvyDJoG3wftmRFW+mtt16k8lWnVzBe/D6Vx0cNIG+4OGi8cYPGwbUK/NfPZF szgh6o33Fn5pC5CeaFjrq776VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqoUbd/ 8rVgQeCp89IntvVZteoIMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUmJZ9fUWJBtOh0sR0Q9lOda56fD/0/l6jxdazE+xwuPG1dZazrscH IMpaqXwiuCvtt1PK3L4KQP1JUGebFZ6xQgSKCckqSE4wC4W9zBsqB/FAex/PzMwS OxKMIUgJiUJVjMSkl4GT70LzYX4PGB1mxKoSpr60+mtkQtPf8tNPe6XNL59r2fso 0UKh+AfNtqz8gzRDvmRGmis9bFB8CYNqI3LJKlBVdGbrdwjH0dvFN3kfn+yxALUj m0fF7Ye/2/GfUg8xrAJs69mAL+vlAzzkdVhbD+Glw7knaGdhpvSzG1cZmeeVhcFd QBpBb2UmGvHAVwQngH+cC8gO8QKxaUwp -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:09 2025 by rpki-client