$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: Pvgb4FZhRlw+7/WQOyQ5P8+1pHc594BRYQ2B4UjcXb0= Subject key identifier: 2E:EF:90:1A:10:75:5A:7A:21:0B:34:B7:41:63:9D:B4:2B:75:E4:79 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 085E Signing time: Sun 02 Nov 2025 20:36:04 +0000 Manifest this update: Sun 02 Nov 2025 20:36:04 +0000 Manifest next update: Sun 09 Nov 2025 20:36:04 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: A81XpZaT/UMyT5KFYvuAPr/QUTmhA+Fs0Gp65VfOTZ8=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: uybnkX1k8gPyTR5CU7p1ceux1tCfl8jTIgkNDS2MSjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Nov 2 20:36:04 2025 GMT Not After : Nov 9 20:36:04 2025 GMT Subject: CN=6907c0b4-37bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:62:0d:83:cc:ca:72:ce:62:79:53:5d:27: fc:3e:ec:4d:4e:da:6c:04:6c:05:d1:7c:ce:5d:2a: 12:43:0d:4c:a4:a5:9e:fd:f6:99:aa:6f:f8:d8:a0: 9b:d1:2c:3d:5e:e0:7c:9d:3f:5d:90:95:e5:79:f3: f8:8b:9b:62:8a:c1:ee:4c:d9:9e:e9:78:b4:3e:76: 55:29:0d:24:78:5f:1b:4a:81:20:70:a9:13:ce:a9: e5:3e:f2:ad:11:60:e2:0f:f4:41:ce:6a:c5:3a:dc: 92:2e:91:b7:bf:1e:32:13:dd:f6:1f:59:fc:a9:78: 26:1f:03:b3:78:09:74:f9:1f:a4:75:45:58:d4:3b: 91:9f:51:4d:af:6c:27:f5:b1:7c:00:66:1c:fa:0d: ef:7b:00:1c:bd:63:df:da:dc:33:7a:b5:33:1f:15: d0:53:68:a8:45:22:06:55:77:01:56:11:e2:a6:2f: 09:27:fa:26:54:de:94:e0:98:56:1e:1c:51:c6:44: 42:c8:2d:b6:7a:e0:62:b2:17:36:00:f8:75:9f:a1: b2:3c:4c:9a:b3:f4:ad:ec:81:30:f2:70:a8:2b:c2: 48:fe:e8:b8:ae:7f:1a:de:7a:0c:37:7e:e2:11:76: 72:fa:2b:71:11:cc:38:57:f8:16:c8:00:fd:f0:5e: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EF:90:1A:10:75:5A:7A:21:0B:34:B7:41:63:9D:B4:2B:75:E4:79 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:18:52:cd:79:20:16:6b:d4:f1:8e:56:08:4c:11:dd:ca:3d: 9b:0b:70:6b:4c:55:0f:32:d3:f2:da:5b:44:61:f9:4d:9e:d4: d5:ec:c4:43:bd:d8:d7:fa:00:5c:93:ba:9f:b8:5c:f1:ff:47: cd:0d:e7:00:fa:2e:12:17:ea:2b:f2:9c:6b:96:36:33:fd:f1: fc:6d:f2:7f:e5:11:f1:79:4c:41:a1:50:4e:e4:94:98:6d:18: 77:02:a1:20:fe:5c:0d:5e:34:fe:0a:a0:0c:b3:84:18:05:28: 72:22:94:3a:60:4b:ca:95:bf:ab:52:0b:56:92:88:9b:58:84: a9:4c:77:2f:2d:2a:84:b6:50:39:0b:44:28:00:b4:22:42:7c: d2:83:4a:14:24:c1:fb:50:95:10:cd:fe:59:eb:09:fa:98:2c: 17:7d:92:23:0c:60:1c:5c:00:ed:b6:47:e7:87:ff:4f:0e:06: 7b:18:d2:93:a7:34:dd:e8:f3:50:56:0f:e2:c0:c1:fd:23:2f: a0:fb:6b:86:f6:42:2c:99:79:7e:5d:e6:0f:e4:a1:9c:0f:42: 34:3f:c4:98:97:10:d6:55:6e:ea:cd:1a:e7:46:ca:67:1b:1d: 25:55:1f:d4:36:b8:6d:0a:a0:fe:44:98:e4:d2:23:c0:cf:8f: 1a:55:e5:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUxMTAyMjAzNjA0WhcNMjUxMTA5MjAzNjA0WjAYMRYwFAYD VQQDEw02OTA3YzBiNC0zN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32hiDYPMynLOYnlTXSf8PuxNTtpsBGwF0XzOXSoSQw1MpKWe/faZqm/42KCb 0Sw9XuB8nT9dkJXlefP4i5tiisHuTNme6Xi0PnZVKQ0keF8bSoEgcKkTzqnlPvKt EWDiD/RBzmrFOtySLpG3vx4yE932H1n8qXgmHwOzeAl0+R+kdUVY1DuRn1FNr2wn 9bF8AGYc+g3vewAcvWPf2twzerUzHxXQU2ioRSIGVXcBVhHipi8JJ/omVN6U4JhW HhxRxkRCyC22euBishc2APh1n6GyPEyas/St7IEw8nCoK8JI/ui4rn8a3noMN37i EXZy+itxEcw4V/gWyAD98F4PnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7vkBoQ dVp6IQs0t0FjnbQrdeR5MB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSGFLNeSAWa9TxjlYITBHdyj2bC3BrTFUPMtPy2ltEYflNntTV7MRD vdjX+gBck7qfuFzx/0fNDecA+i4SF+or8pxrljYz/fH8bfJ/5RHxeUxBoVBO5JSY bRh3AqEg/lwNXjT+CqAMs4QYBShyIpQ6YEvKlb+rUgtWkoibWISpTHcvLSqEtlA5 C0QoALQiQnzSg0oUJMH7UJUQzf5Z6wn6mCwXfZIjDGAcXADttkfnh/9PDgZ7GNKT pzTd6PNQVg/iwMH9Iy+g+2uG9kIsmXl+XeYP5KGcD0I0P8SYlxDWVW7qzRrnRspn Gx0lVR/UNrhtCqD+RJjk0iPAz48aVeUW -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:55 2025 by rpki-client