$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: ZrrI0cld/8cugq332ZC7NWZAddt2YEZ1OSrxXPqUIW4= Subject key identifier: 49:DF:49:97:43:12:2A:F4:E5:44:F9:30:41:0C:6D:7A:2A:D0:56:F0 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E64 Signing time: Tue 04 Nov 2025 17:49:58 +0000 Manifest this update: Tue 04 Nov 2025 17:49:57 +0000 Manifest next update: Tue 11 Nov 2025 17:49:57 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: ptqSwssj79c806nogzbBNVN754j2NIF1vkztxIJst6M=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3693 (0xe6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Nov 4 17:49:57 2025 GMT Not After : Nov 11 17:49:57 2025 GMT Subject: CN=690a3cc6-34ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:23:db:fd:70:af:b0:20:e5:e2:cb:4c:03: 69:e3:f9:65:2f:69:d3:91:ca:21:16:82:55:d3:09: 05:31:c0:ec:9e:32:3d:06:1e:ed:7b:f4:11:1f:d1: db:81:4a:49:de:ec:d5:7c:ae:71:a1:70:0a:21:75: dc:f5:36:e4:a9:5e:9e:87:c5:9d:d0:06:96:72:f5: 18:65:5a:88:1e:4f:3c:07:62:33:40:96:ef:57:40: 2a:65:cb:69:3b:b3:8e:2c:d7:47:bc:d1:b1:9a:a2: 90:10:4a:5f:f7:89:16:41:73:77:54:48:25:ec:5c: f7:12:3f:71:ad:d0:be:0f:96:ba:af:0b:67:b1:be: bf:c4:8d:3d:e6:da:ef:95:a6:7a:f2:b7:5a:90:a7: 2d:e5:e5:7c:a7:0c:b3:f1:e3:59:6e:6d:e5:52:d6: 19:74:d1:e8:27:ea:b0:09:0b:e4:e3:e6:37:b0:d8: 31:5e:0d:4c:6e:1a:38:7b:9d:cb:2a:66:43:ee:3b: f7:64:7e:72:6d:17:17:94:d8:b8:b5:4c:f1:43:6f: 33:8b:97:d5:7f:9e:75:25:04:73:e0:1c:46:24:dc: 74:82:e2:27:83:a7:02:35:01:3a:1d:ec:74:30:97: fd:b1:7b:16:2e:0b:9d:72:b7:8a:70:06:3b:b3:36: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DF:49:97:43:12:2A:F4:E5:44:F9:30:41:0C:6D:7A:2A:D0:56:F0 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:79:55:43:f8:e5:0a:b7:c2:4c:c5:90:85:00:79:24:c4:99: c8:32:8e:2a:2f:dc:e4:61:75:f6:7b:91:18:c0:64:26:dd:1e: 9d:98:a1:bc:60:76:28:37:79:4b:6f:21:1f:48:e2:c5:61:45: ca:c5:a2:0e:15:15:9c:40:de:3b:25:96:2d:9b:03:44:84:dc: ba:65:1a:3a:c7:76:5e:9f:58:86:25:4c:f2:8f:8d:7d:af:04: f4:d0:95:33:03:2f:6e:3c:b4:26:e9:67:91:41:2e:06:ce:e5: 4d:82:4b:bc:85:e7:4f:4e:8a:82:07:9e:f9:78:df:ef:9b:ae: 21:cb:73:53:5e:4b:08:a7:de:82:34:9c:51:21:35:90:92:9d: d7:2f:99:29:f7:0a:4a:60:4d:f1:ee:7a:f1:af:92:cf:d7:65: 0a:19:a6:ee:7a:c5:c8:3d:90:c0:58:87:dd:80:75:68:07:35: 6a:cd:a4:ea:85:1e:c7:b4:f8:e6:a4:14:43:b0:00:1e:24:76: 82:79:d2:3a:45:27:b8:ce:9c:45:c2:86:89:67:1d:1d:71:17: 33:6f:bb:cd:17:a9:4c:39:50:93:2a:be:b2:32:ae:8a:4c:74: 89:14:5e:74:07:a2:b3:41:41:89:af:8b:0b:0a:ec:51:3d:e0: f7:10:3f:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUxMTA0MTc0OTU3WhcNMjUxMTExMTc0OTU3WjAYMRYwFAYD VQQDEw02OTBhM2NjNi0zNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjMj2/1wr7Ag5eLLTANp4/llL2nTkcohFoJV0wkFMcDsnjI9Bh7te/QRH9Hb gUpJ3uzVfK5xoXAKIXXc9TbkqV6eh8Wd0AaWcvUYZVqIHk88B2IzQJbvV0AqZctp O7OOLNdHvNGxmqKQEEpf94kWQXN3VEgl7Fz3Ej9xrdC+D5a6rwtnsb6/xI095trv laZ68rdakKct5eV8pwyz8eNZbm3lUtYZdNHoJ+qwCQvk4+Y3sNgxXg1Mbho4e53L KmZD7jv3ZH5ybRcXlNi4tUzxQ28zi5fVf551JQRz4BxGJNx0guIng6cCNQE6Hex0 MJf9sXsWLgudcreKcAY7szaabwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnfSZdD Eir05UT5MEEMbXoq0FbwMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAReVVD+OUKt8JMxZCFAHkkxJnIMo4qL9zkYXX2e5EYwGQm3R6dmKG8 YHYoN3lLbyEfSOLFYUXKxaIOFRWcQN47JZYtmwNEhNy6ZRo6x3Zen1iGJUzyj419 rwT00JUzAy9uPLQm6WeRQS4GzuVNgku8hedPToqCB575eN/vm64hy3NTXksIp96C NJxRITWQkp3XL5kp9wpKYE3x7nrxr5LP12UKGabuesXIPZDAWIfdgHVoBzVqzaTq hR7HtPjmpBRDsAAeJHaCedI6RSe4zpxFwoaJZx0dcRczb7vNF6lMOVCTKr6yMq6K THSJFF50B6KzQUGJr4sLCuxRPeD3ED/C -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:29 2025 by rpki-client