$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft File: peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json) Hash identifier: dnwlazkiqF66VvJg/zzsCgRSzuK+MvuOXMXVZX/Gu4g= Subject key identifier: 0A:EC:AC:3B:89:96:4D:F8:7C:2E:E6:A1:61:2D:B7:75:55:6C:BA:AA Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 Certificate issuer: /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft Manifest number: 14FE Signing time: Sun 02 Nov 2025 18:40:25 +0000 Manifest this update: Sun 02 Nov 2025 18:40:24 +0000 Manifest next update: Sun 09 Nov 2025 18:40:24 +0000 Files and hashes: 1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: MT3808MkU6lLp/EbbdgIdMWfKGucF5R7Zg7T3H2M59k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1 Validity Not Before: Nov 2 18:40:24 2025 GMT Not After : Nov 9 18:40:24 2025 GMT Subject: CN=6907a598-a6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a4:27:57:f1:b2:ea:23:ba:2e:b9:fe:f5:da: bf:88:38:58:43:0d:0b:85:6a:1f:e3:a1:4d:92:ad: 61:c5:2d:3d:5c:3d:dd:2f:b1:6a:51:fb:f6:4c:3d: 0e:ae:ff:f5:c8:13:e0:1b:67:2c:1e:04:0c:75:bd: 06:b0:9f:74:e3:d9:e9:8c:c7:59:7a:b9:17:03:9c: 2b:41:87:89:b3:9c:f1:cc:29:53:ff:ae:27:7b:fd: f1:b1:70:04:2f:91:01:47:f4:c5:eb:5b:f5:af:35: d4:31:41:de:c9:82:95:0d:da:e9:61:aa:d9:df:e0: ec:e9:d5:e7:0c:6d:fa:5b:40:3c:61:13:cc:d7:d7: 5e:26:3c:e9:54:76:ca:44:61:26:63:9f:ff:e5:f2: ae:6e:80:3d:bf:79:d6:b7:fb:cb:11:78:8f:3e:91: ec:7e:e1:a5:90:85:1f:43:71:89:a4:62:df:58:f7: 5a:fe:eb:8b:b6:82:fe:2d:94:19:ef:a1:02:dc:fd: 82:fb:6d:74:7e:ff:35:35:84:e6:4e:22:62:a5:e3: a6:ac:fe:c8:0c:7f:08:3b:f7:cd:19:43:95:c6:b4: 03:ad:1f:32:ca:4c:45:9a:30:70:36:f4:f2:43:a6: 27:76:b0:f6:d4:7d:69:32:11:df:3a:fa:fa:5c:b3: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EC:AC:3B:89:96:4D:F8:7C:2E:E6:A1:61:2D:B7:75:55:6C:BA:AA X509v3 Authority Key Identifier: keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:21:3e:5a:31:56:8d:8a:ae:05:ad:02:29:47:dc:4e:34:28: 85:28:5e:5d:02:d8:26:6b:a3:36:dc:42:3e:67:37:c9:bf:34: b5:ae:af:b6:d4:2f:12:b7:0f:0f:a1:21:30:15:ae:ef:f1:94: 43:78:bd:f5:4b:82:fb:f5:60:5c:4a:26:8c:52:0d:1c:85:88: e2:83:97:4b:41:2c:2e:94:31:6c:ea:77:cd:24:97:b3:6d:0a: 5b:8e:50:1e:06:d3:e0:2b:c3:67:d0:df:73:2c:96:c1:23:fe: 0e:e8:de:4b:ad:72:e5:40:d1:28:fd:72:03:57:56:4c:b5:96: b7:40:4a:8b:89:e0:50:51:d0:b1:84:5b:d6:ee:d4:9e:03:ec: 50:c6:38:82:fa:28:c4:b3:6d:d2:b3:22:01:0e:e1:79:a5:90: 17:48:ef:ae:4f:18:e4:42:66:ae:49:09:be:bc:d9:a5:b0:c7: 14:24:cb:d5:63:87:ec:ff:db:d7:25:c1:c1:71:d0:51:ec:fd: f4:6f:2d:61:78:33:65:ab:dd:c0:0b:41:fd:db:64:b0:f4:aa: 51:4f:26:27:a9:03:f3:7c:c0:8e:b4:c7:92:79:3c:46:81:da: 11:bd:2a:9b:1f:ac:b4:22:e8:ce:c6:a5:84:2c:e7:c8:8f:63: c4:ff:40:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy NDE3OTA5QjEwHhcNMjUxMTAyMTg0MDI0WhcNMjUxMTA5MTg0MDI0WjAYMRYwFAYD VQQDEw02OTA3YTU5OC1hNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7aQnV/Gy6iO6Lrn+9dq/iDhYQw0LhWof46FNkq1hxS09XD3dL7FqUfv2TD0O rv/1yBPgG2csHgQMdb0GsJ9049npjMdZerkXA5wrQYeJs5zxzClT/64ne/3xsXAE L5EBR/TF61v1rzXUMUHeyYKVDdrpYarZ3+Ds6dXnDG36W0A8YRPM19deJjzpVHbK RGEmY5//5fKuboA9v3nWt/vLEXiPPpHsfuGlkIUfQ3GJpGLfWPda/uuLtoL+LZQZ 76EC3P2C+210fv81NYTmTiJipeOmrP7IDH8IO/fNGUOVxrQDrR8yykxFmjBwNvTy Q6YndrD21H1pMhHfOvr6XLOkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArsrDuJ lk34fC7moWEtt3VVbLqqMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHIT5aMVaNiq4FrQIpR9xONCiFKF5dAtgma6M23EI+ZzfJvzS1rq+2 1C8Stw8PoSEwFa7v8ZRDeL31S4L79WBcSiaMUg0chYjig5dLQSwulDFs6nfNJJez bQpbjlAeBtPgK8Nn0N9zLJbBI/4O6N5LrXLlQNEo/XIDV1ZMtZa3QEqLieBQUdCx hFvW7tSeA+xQxjiC+ijEs23SsyIBDuF5pZAXSO+uTxjkQmauSQm+vNmlsMcUJMvV Y4fs/9vXJcHBcdBR7P30by1heDNlq93AC0H922Sw9KpRTyYnqQPzfMCOtMeSeTxG gdoRvSqbH6y0IujOxqWELOfIj2PE/0B4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:20 2025 by rpki-client