$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: l18XnN82Blp+GCnZGvCmC4K2QHFMfXKlQaCH94Wk//A= Subject key identifier: 0E:F8:20:A0:6E:41:03:B5:41:61:FB:50:1A:8D:53:09:5C:8E:82:B1 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 0126 Signing time: Mon 03 Nov 2025 04:42:31 +0000 Manifest this update: Mon 03 Nov 2025 04:42:31 +0000 Manifest next update: Mon 10 Nov 2025 04:42:31 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: KotSb4TAdgc6xG8lRpDvVMo/L120JR1ndX/ugdDZTOg=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Nov 3 04:42:31 2025 GMT Not After : Nov 10 04:42:31 2025 GMT Subject: CN=690832b7-0575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:49:79:0b:97:8a:78:37:d6:f9:31:cf:a2: 70:18:7e:f8:00:de:8c:1f:81:c3:d1:2c:62:4a:bd: 47:f2:cb:51:73:89:d4:86:2f:5f:b3:cc:9e:0f:b2: e3:f3:93:96:67:be:ad:fe:6b:ce:70:30:ec:21:a8: 67:d7:09:9c:89:63:9e:2b:e0:bc:54:58:ca:10:97: e3:40:d8:d0:5a:9e:ef:18:f7:ae:6e:b6:09:ab:56: 2f:82:21:f8:4d:e9:2d:be:5d:00:4f:62:29:91:ac: df:ac:4c:5a:fd:90:48:d1:62:43:63:9d:cc:df:1c: 36:63:af:72:99:1c:af:0a:f9:29:99:0b:c9:e4:22: f3:06:84:42:43:24:17:f9:f2:9c:e0:97:36:aa:c3: e4:fe:f9:a3:29:72:d2:03:be:73:81:51:01:53:cc: c5:b0:68:69:dd:c9:fe:40:3a:e2:6b:a4:a3:83:ce: 26:21:cc:3c:86:e5:53:b4:3c:48:f6:90:95:66:00: e5:cc:d6:e7:fc:09:be:87:09:0c:19:d7:25:42:b3: 0e:05:29:1f:6b:f3:cc:de:88:9d:a9:77:bb:2c:23: 1f:e1:b1:5d:db:cd:98:22:5e:ed:df:e3:97:f7:be: ec:4c:91:b5:5e:35:37:66:b2:1e:11:91:22:db:68: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:20:A0:6E:41:03:B5:41:61:FB:50:1A:8D:53:09:5C:8E:82:B1 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:af:6f:ae:58:e7:ae:d0:99:10:c0:3b:96:b5:80:dc:dc:6b: 62:4c:ce:87:b2:46:d8:85:3e:17:a0:ae:87:57:8e:90:fb:af: 04:17:61:a5:fe:16:b8:6f:88:c5:5c:27:f8:ed:e2:c9:91:93: 62:36:f2:db:06:b9:37:59:d4:11:f5:81:73:e9:f2:64:f8:d0: e5:df:67:3b:4d:5e:a7:30:e7:35:d8:f3:43:2e:4a:66:d1:8c: 22:c9:15:74:1d:75:71:dd:4f:5f:11:23:57:97:1f:67:a5:1f: 7b:74:00:fb:e4:6b:5a:26:cc:12:fc:aa:2b:6b:59:0f:a2:f5: 1e:2d:eb:40:b9:d6:6a:10:8b:f0:86:dc:23:00:b4:7f:e9:2a: 4d:81:f5:98:3e:62:65:8e:2c:07:9f:6a:fa:66:53:96:81:68: 8c:85:22:7a:00:7c:49:07:50:65:43:61:69:a9:f0:f5:4c:c5: 82:69:61:bf:97:d9:0c:b8:87:86:62:fd:46:e0:b2:05:7e:03: a9:01:4c:ce:e8:dc:2e:22:12:82:94:d8:d4:eb:28:d8:26:55: b1:2a:b0:4d:0b:ec:0b:56:34:35:70:a1:9a:70:1b:5d:4f:ce: 15:af:46:8e:26:6b:03:e2:b4:7a:91:ca:91:cf:8d:ae:ef:73: b0:e1:ca:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUxMTAzMDQ0MjMxWhcNMjUxMTEwMDQ0MjMxWjAYMRYwFAYD VQQDEw02OTA4MzJiNy0wNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn1JeQuXing31vkxz6JwGH74AN6MH4HD0SxiSr1H8stRc4nUhi9fs8yeD7Lj 85OWZ76t/mvOcDDsIahn1wmciWOeK+C8VFjKEJfjQNjQWp7vGPeubrYJq1YvgiH4 Tektvl0AT2IpkazfrExa/ZBI0WJDY53M3xw2Y69ymRyvCvkpmQvJ5CLzBoRCQyQX +fKc4Jc2qsPk/vmjKXLSA75zgVEBU8zFsGhp3cn+QDria6Sjg84mIcw8huVTtDxI 9pCVZgDlzNbn/Am+hwkMGdclQrMOBSkfa/PM3oidqXe7LCMf4bFd282YIl7t3+OX 977sTJG1XjU3ZrIeEZEi22i0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA74IKBu QQO1QWH7UBqNUwlcjoKxMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+r2+uWOeu0JkQwDuWtYDc3GtiTM6HskbYhT4XoK6HV46Q+68EF2Gl /ha4b4jFXCf47eLJkZNiNvLbBrk3WdQR9YFz6fJk+NDl32c7TV6nMOc12PNDLkpm 0YwiyRV0HXVx3U9fESNXlx9npR97dAD75GtaJswS/Kora1kPovUeLetAudZqEIvw htwjALR/6SpNgfWYPmJljiwHn2r6ZlOWgWiMhSJ6AHxJB1BlQ2FpqfD1TMWCaWG/ l9kMuIeGYv1G4LIFfgOpAUzO6NwuIhKClNjU6yjYJlWxKrBNC+wLVjQ1cKGacBtd T84Vr0aOJmsD4rR6kcqRz42u73Ow4cqa -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:46 2025 by rpki-client