$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: tyUDOzX0eirrmdNshTjE3e5z9HcmHHSBp+xZOGqdXBA= Subject key identifier: 70:38:EA:35:E6:33:1B:09:90:FD:84:55:90:AE:3A:C9:1D:48:91:E8 Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 023C Signing time: Mon 03 Nov 2025 01:47:00 +0000 Manifest this update: Mon 03 Nov 2025 01:46:59 +0000 Manifest next update: Mon 10 Nov 2025 01:46:59 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: AZxq+wp46mCUFtC4FOzxnQiBVdF4GhtIfDIrDZM0kbI=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: Nov 3 01:46:59 2025 GMT Not After : Nov 10 01:46:59 2025 GMT Subject: CN=69080993-22cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:57:62:98:02:82:4e:eb:0e:bb:68:8e:1e: d6:e1:1c:39:ac:cf:4b:8b:52:cc:9e:96:cb:86:2a: fa:d7:75:e1:09:54:4a:f5:fa:b6:81:a7:81:29:e2: 11:4c:a6:22:48:8c:c8:5d:13:58:a6:e5:50:72:44: a8:81:d2:f9:d0:8e:89:b9:aa:02:13:c0:8f:ed:8d: 6c:50:b6:0f:ce:09:33:55:f5:7d:d5:15:00:17:02: ce:ed:aa:87:dc:13:67:a6:0f:9a:51:f7:a3:3a:07: 5d:83:6d:21:f5:77:62:54:86:4d:ea:91:f3:4e:1c: 34:27:e0:6b:cd:4a:87:cb:1e:e8:5b:f6:3d:54:10: 6d:5b:8d:f2:ea:43:20:ef:f3:02:2b:5e:17:fe:1d: 82:02:ab:88:ec:05:cb:8e:0a:37:0c:aa:99:78:d8: 51:a3:33:5f:73:91:0a:00:bf:84:71:77:05:ef:43: b7:79:60:43:40:31:22:a3:53:5e:4b:ca:b1:91:38: fd:78:78:0f:37:03:ff:a0:e9:06:76:5d:b8:24:89: be:92:09:f2:5a:87:b7:17:d3:72:c6:ec:7e:d3:1f: 7a:2f:75:9b:ea:2a:cc:53:8a:33:7d:39:8b:99:ee: 65:43:b9:fb:25:c4:dd:43:fb:90:fd:36:ab:cb:48: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:EA:35:E6:33:1B:09:90:FD:84:55:90:AE:3A:C9:1D:48:91:E8 X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:22:ff:02:32:07:5f:f4:e9:59:37:34:db:fe:4e:bf:70:e1: 6f:a1:0c:b1:2c:8a:8f:57:92:e3:e3:e0:7d:b2:4c:5d:3a:cc: 12:20:3e:a8:31:44:f8:5c:ad:35:77:3c:f9:3a:c8:ce:2f:45: f1:40:69:7d:14:76:c3:6c:2b:18:a3:45:ec:38:0a:1e:50:c1: e3:62:c7:aa:62:b1:52:0f:89:cb:b3:31:0e:7a:c2:52:87:f0: e8:6f:21:89:ec:dd:56:74:84:5b:e5:01:6d:f4:66:f8:f5:46: b9:ab:e3:eb:75:e9:84:45:cd:b4:ee:1c:53:34:18:32:44:3e: 99:61:ce:ba:57:79:d1:2e:88:6a:8b:e5:77:4a:d9:0b:95:ee: 3a:84:51:09:bd:85:45:01:5b:01:79:c0:f4:fe:63:89:55:11: c2:0b:6e:2d:28:80:9e:b2:27:54:64:fe:dc:9c:0d:28:ee:ef: f7:f8:69:c2:87:53:e3:de:d5:24:81:f5:b3:90:2c:85:ae:c0: 4b:16:8d:f8:8b:a8:41:23:a5:af:c6:9f:13:ab:5a:fd:2e:e7: 47:41:01:ed:64:f4:06:02:37:4a:85:5d:07:d6:e6:b4:bb:d3: 21:18:e0:d4:16:8f:fd:ce:88:8e:2e:40:78:72:87:cc:0f:ef: e6:0b:b9:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUxMTAzMDE0NjU5WhcNMjUxMTEwMDE0NjU5WjAYMRYwFAYD VQQDEw02OTA4MDk5My0yMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4lXYpgCgk7rDrtojh7W4Rw5rM9Li1LMnpbLhir613XhCVRK9fq2gaeBKeIR TKYiSIzIXRNYpuVQckSogdL50I6JuaoCE8CP7Y1sULYPzgkzVfV91RUAFwLO7aqH 3BNnpg+aUfejOgddg20h9XdiVIZN6pHzThw0J+BrzUqHyx7oW/Y9VBBtW43y6kMg 7/MCK14X/h2CAquI7AXLjgo3DKqZeNhRozNfc5EKAL+EcXcF70O3eWBDQDEio1Ne S8qxkTj9eHgPNwP/oOkGdl24JIm+kgnyWoe3F9Nyxux+0x96L3Wb6irMU4ozfTmL me5lQ7n7JcTdQ/uQ/Tary0gqoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHA46jXm MxsJkP2EVZCuOskdSJHoMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyIv8CMgdf9OlZNzTb/k6/cOFvoQyxLIqPV5Lj4+B9skxdOswSID6o MUT4XK01dzz5OsjOL0XxQGl9FHbDbCsYo0XsOAoeUMHjYseqYrFSD4nLszEOesJS h/DobyGJ7N1WdIRb5QFt9Gb49Ua5q+PrdemERc207hxTNBgyRD6ZYc66V3nRLohq i+V3StkLle46hFEJvYVFAVsBecD0/mOJVRHCC24tKICesidUZP7cnA0o7u/3+GnC h1Pj3tUkgfWzkCyFrsBLFo34i6hBI6Wvxp8Tq1r9LudHQQHtZPQGAjdKhV0H1ua0 u9MhGODUFo/9zoiOLkB4cofMD+/mC7mQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:54 2025 by rpki-client