$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: v8IrsJlDNG5v2LsQBOxxCZs8jvJ86s2eE7Kr+Iks0JE= Subject key identifier: 41:81:1A:3E:9D:54:AC:6A:DC:44:B1:68:5E:8B:B1:24:83:88:E4:A8 Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 56 Signing time: Mon 03 Nov 2025 07:10:38 +0000 Manifest this update: Mon 03 Nov 2025 07:10:37 +0000 Manifest next update: Mon 10 Nov 2025 07:10:37 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: 6qEkTT+M1cRQXI5xyDe/CFfFq7h/xmahnHVGTCm9JfE=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Nov 3 07:10:37 2025 GMT Not After : Nov 10 07:10:37 2025 GMT Subject: CN=6908556e-00f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:b1:45:1b:ce:a8:4d:74:65:d5:d7:03:68: 90:4e:42:68:60:23:29:56:48:1a:48:b8:0a:4b:9f: 4f:dd:97:45:3f:0d:db:c4:76:63:ed:1a:ae:d9:27: 7b:98:ec:f0:aa:54:30:6b:c3:f0:57:d0:0a:6a:c4: a8:1c:d7:6c:8a:b2:5e:1e:64:cb:b9:a1:64:75:52: 54:3b:8b:16:bd:32:3a:7b:65:fa:5a:c2:b9:98:23: cc:69:dc:cb:78:3a:0c:d2:54:a4:42:48:ea:ae:f6: 3b:1e:98:2a:71:cb:70:37:59:a1:be:b1:5e:06:13: fb:5b:e7:67:ef:b6:9e:2e:e9:34:4d:94:ef:a5:e0: d6:7d:47:59:b4:83:67:31:ae:01:e6:80:44:7e:7e: 22:b8:95:57:68:07:f7:6e:a9:fd:e3:42:db:30:e5: 0d:3e:ff:74:71:75:d7:c3:be:58:ed:ae:d4:4d:0a: 62:73:2f:a1:1a:6b:61:d2:c9:ae:f5:70:ba:5b:8b: 61:9a:19:b0:b7:db:48:c4:d9:6f:fb:46:bc:e9:ff: 4e:ec:14:f8:1d:98:38:cd:f3:6e:b4:ec:c5:a6:e3: d8:34:33:f9:aa:8a:56:8a:f3:75:19:30:fc:93:7c: 20:8e:1b:7f:7d:f4:f0:ab:c2:87:33:a9:5d:ad:d8: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:1A:3E:9D:54:AC:6A:DC:44:B1:68:5E:8B:B1:24:83:88:E4:A8 X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3f:a1:02:89:39:09:61:b7:73:a9:2f:7a:1b:b8:a8:83:33: c0:1e:23:31:2d:0a:53:32:cf:cd:ba:96:c2:f0:4b:40:f6:72: 4a:5f:90:cf:14:16:c9:a7:87:c9:b8:2f:38:3c:d8:c5:36:bd: b1:4a:3c:5e:70:9f:ed:42:a1:c4:9b:88:6d:83:b1:ce:ae:fa: 63:ea:66:3e:6f:7e:d5:90:93:c1:75:0d:e7:8b:85:fd:88:10: c6:e3:97:87:27:32:02:88:a3:2c:fa:6f:94:5c:a2:71:c5:30: 48:6b:9e:de:06:4a:44:ce:a2:a3:09:77:39:04:92:fa:b3:71: 69:36:22:91:5f:4c:94:5e:8c:d1:85:4d:b1:72:10:c8:31:88: e6:5e:67:8e:be:c0:cd:94:a0:bc:0f:a1:24:1a:b4:e9:0b:9d: 4e:a3:80:dd:3e:69:c8:0a:41:db:66:ad:65:aa:3d:ce:27:57: 72:72:1f:e6:37:fd:d2:ac:28:0f:28:09:6c:c8:b0:cf:95:e9: 00:a6:87:6c:21:bb:40:da:74:33:1e:e7:0b:4f:78:8f:df:69: e3:be:eb:56:8a:7b:7d:7c:fc:e1:8a:f3:a6:22:d2:2b:47:67: 76:09:bc:ba:f4:cd:9e:51:5f:5d:cf:a2:01:1a:e7:d6:8c:f0: bd:6f:99:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTExMDMwNzEwMzdaFw0yNTExMTAwNzEwMzdaMBgxFjAUBgNV BAMTDTY5MDg1NTZlLTAwZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX7LFFG86oTXRl1dcDaJBOQmhgIylWSBpIuApLn0/dl0U/DdvEdmPtGq7ZJ3uY 7PCqVDBrw/BX0ApqxKgc12yKsl4eZMu5oWR1UlQ7ixa9Mjp7ZfpawrmYI8xp3Mt4 OgzSVKRCSOqu9jsemCpxy3A3WaG+sV4GE/tb52fvtp4u6TRNlO+l4NZ9R1m0g2cx rgHmgER+fiK4lVdoB/duqf3jQtsw5Q0+/3RxddfDvljtrtRNCmJzL6Eaa2HSya71 cLpbi2GaGbC320jE2W/7Rrzp/07sFPgdmDjN82607MWm49g0M/mqilaK83UZMPyT fCCOG3999PCrwoczqV2t2Ce9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQYEaPp1U rGrcRLFoXouxJIOI5KgwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQ/oQKJOQlht3OpL3obuKiDM8AeIzEtClMyz826lsLwS0D2ckpfkM8U Fsmnh8m4Lzg82MU2vbFKPF5wn+1CocSbiG2Dsc6u+mPqZj5vftWQk8F1DeeLhf2I EMbjl4cnMgKIoyz6b5RconHFMEhrnt4GSkTOoqMJdzkEkvqzcWk2IpFfTJRejNGF TbFyEMgxiOZeZ46+wM2UoLwPoSQatOkLnU6jgN0+acgKQdtmrWWqPc4nV3JyH+Y3 /dKsKA8oCWzIsM+V6QCmh2whu0DadDMe5wtPeI/faeO+61aKe318/OGK86Yi0itH Z3YJvLr0zZ5RX13PogEa59aM8L1vmSA= -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:18 2025 by rpki-client