$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: bmn5Yana++nzKD/JmB+KF78yVhTO3qV9VL9tLkwd+ic= Subject key identifier: CD:CE:3C:3D:34:4C:96:05:11:E5:2C:CC:93:E8:8F:A4:9F:09:74:1B Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: CA Signing time: Mon 03 Nov 2025 05:47:38 +0000 Manifest this update: Mon 03 Nov 2025 05:47:38 +0000 Manifest next update: Mon 10 Nov 2025 05:47:38 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: FVjhJKZ7xFvqjJyjmnSn7Ne5LGW32VnLTKiSBqLmDtk=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Nov 3 05:47:38 2025 GMT Not After : Nov 10 05:47:38 2025 GMT Subject: CN=690841fa-1b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:a6:a4:b6:e6:95:7e:2a:1f:ca:a1:d7:7c: 5f:30:f1:81:90:c0:23:d4:d4:59:a3:d2:42:79:5a: e9:a7:73:5f:ba:5c:56:b1:42:89:21:bc:59:1c:96: a1:90:b8:bc:f1:70:3c:5e:3d:1a:02:4a:70:1c:59: d6:16:ef:16:93:44:61:9d:f6:49:47:60:bb:60:e6: fe:b3:b0:2a:58:3d:87:e8:1c:b8:21:57:86:12:2f: 36:fa:6a:c6:0d:aa:7c:a6:b1:21:26:20:f6:1c:e7: bf:87:37:e6:3a:dc:1a:f7:5e:69:4c:d9:91:f9:13: ff:44:ff:bf:08:9f:be:df:21:c5:e5:82:7d:6a:e5: f9:4d:2d:99:c6:20:80:56:ee:58:fe:cc:da:a7:c0: ca:5d:14:15:17:2d:cc:5b:c9:89:d4:55:3e:e5:af: 4a:9f:07:66:31:73:c0:6e:ac:f4:bf:7b:9a:75:a0: 00:7c:17:c5:45:f0:77:e3:63:f6:dd:13:04:9a:11: 56:56:22:60:80:ef:78:28:0a:ae:f3:90:4c:a5:9d: 22:dc:f4:57:c8:72:e1:0f:6c:ce:17:66:42:6a:8a: 8f:f8:c1:5b:33:36:c7:51:46:58:bb:7d:2d:28:f1: b1:c0:d6:5c:66:8d:bc:e7:7c:61:1a:56:30:4d:b1: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:3C:3D:34:4C:96:05:11:E5:2C:CC:93:E8:8F:A4:9F:09:74:1B X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:52:44:79:7f:44:bb:3c:b7:1d:71:58:36:7e:66:8c:7e:27: 8f:36:a4:e1:57:f2:e6:cb:b9:a5:1b:fc:20:9f:e8:43:fe:40: 1c:df:59:45:4b:e8:77:f0:be:54:97:3a:c4:29:58:48:5d:48: ab:fa:74:5c:e3:47:33:ab:56:73:10:fe:67:36:db:0c:cd:9f: a6:2d:a5:c9:59:05:66:db:9b:c4:8f:d2:d9:bf:d8:d5:d1:97: 3f:81:58:e5:89:3a:9c:10:23:4d:52:c3:a5:9b:14:b7:c8:18: 35:96:6f:04:ce:ce:36:54:de:a2:55:15:1d:f5:7f:31:51:01: 7f:cd:9a:86:dc:f4:16:13:f5:e3:78:c4:86:ba:84:ea:59:75: fa:e4:3f:ef:29:a9:cf:5a:72:d7:ff:5f:f6:af:be:c0:19:e8: c8:cb:14:a0:6b:56:ec:b8:0a:8b:51:1e:60:13:59:28:22:3c: 71:7d:ef:d0:53:87:f4:56:e3:ac:94:a0:6c:60:c8:37:37:87: a6:cd:5a:4f:e4:48:69:bc:58:68:f4:c9:b5:a6:77:2f:8c:05: e5:ca:a5:b6:0c:e5:1e:42:2b:47:51:8c:a8:29:fe:12:77:a8: ad:89:45:4d:f5:36:f0:78:0b:26:30:3c:07:88:24:94:d7:ec: 98:60:1b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUxMTAzMDU0NzM4WhcNMjUxMTEwMDU0NzM4WjAYMRYwFAYD VQQDEw02OTA4NDFmYS0xYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1umpLbmlX4qH8qh13xfMPGBkMAj1NRZo9JCeVrpp3NfulxWsUKJIbxZHJah kLi88XA8Xj0aAkpwHFnWFu8Wk0RhnfZJR2C7YOb+s7AqWD2H6By4IVeGEi82+mrG Dap8prEhJiD2HOe/hzfmOtwa915pTNmR+RP/RP+/CJ++3yHF5YJ9auX5TS2ZxiCA Vu5Y/szap8DKXRQVFy3MW8mJ1FU+5a9KnwdmMXPAbqz0v3uadaAAfBfFRfB342P2 3RMEmhFWViJggO94KAqu85BMpZ0i3PRXyHLhD2zOF2ZCaoqP+MFbMzbHUUZYu30t KPGxwNZcZo2853xhGlYwTbFU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3OPD00 TJYFEeUszJPoj6SfCXQbMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUUkR5f0S7PLcdcVg2fmaMfiePNqThV/Lmy7mlG/wgn+hD/kAc31lF S+h38L5UlzrEKVhIXUir+nRc40czq1ZzEP5nNtsMzZ+mLaXJWQVm25vEj9LZv9jV 0Zc/gVjliTqcECNNUsOlmxS3yBg1lm8Ezs42VN6iVRUd9X8xUQF/zZqG3PQWE/Xj eMSGuoTqWXX65D/vKanPWnLX/1/2r77AGejIyxSga1bsuAqLUR5gE1koIjxxfe/Q U4f0VuOslKBsYMg3N4emzVpP5EhpvFho9Mm1pncvjAXlyqW2DOUeQitHUYyoKf4S d6itiUVN9TbweAsmMDwHiCSU1+yYYBuA -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:18 2025 by rpki-client