$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft File: cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json) Hash identifier: 6w3G1EitsVq2IFC8bmXfkjWaywzlmByuC7SHLkuBPZ4= Subject key identifier: D2:7A:57:DD:FC:5F:0D:C2:7E:5F:93:9A:3B:35:6B:45:02:3C:E4:62 Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft Manifest number: 0C7F Signing time: Tue 04 Nov 2025 18:33:51 +0000 Manifest this update: Tue 04 Nov 2025 18:33:50 +0000 Manifest next update: Tue 11 Nov 2025 18:33:50 +0000 Files and hashes: 1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: w/IFn5cU7RD0d5fJiUeSBXgW6bO99X+7XGIUjFZGu68=) 2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: W7K6VRN1QzgBc/gpj+6wHuV7YMhiZeiqUU+WpyRDJ4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136655, serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Validity Not Before: Nov 4 18:33:50 2025 GMT Not After : Nov 11 18:33:50 2025 GMT Subject: CN=690a470f-cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:c7:b2:ee:ad:de:74:9f:e0:34:de:a9:be: 3e:cb:7d:71:6f:bd:aa:8c:f1:9b:8f:af:ac:50:83: 68:c0:75:2c:84:23:95:b9:a2:9f:57:ff:78:20:c1: d5:2c:39:e7:b6:41:af:29:37:cb:6e:84:fc:5c:8b: ff:84:6f:0a:31:37:26:b5:eb:e9:05:29:da:45:e2: 82:0e:53:a9:03:f8:0d:e2:f9:46:90:17:18:59:65: fd:9e:30:3d:f9:55:1c:56:77:ec:46:79:87:ef:34: 11:2f:6e:85:05:12:65:86:21:d2:4b:c7:2b:08:cf: 21:84:d4:1d:95:21:7f:43:0a:f0:8c:4f:80:cf:1f: cd:d6:f8:58:0c:b4:3d:e2:2d:71:93:1a:78:7c:08: 45:7f:85:a6:0f:92:4b:93:d0:cd:4a:1d:e3:59:93: dd:8d:96:74:dd:04:58:6b:a3:1c:70:47:9f:46:a5: fc:a1:74:53:7a:31:95:bb:d5:9c:64:72:6e:93:e0: 43:d5:f9:88:91:38:a1:77:3e:92:20:7e:45:a9:80: 2d:96:67:63:81:f9:54:f9:f0:7f:88:e8:be:36:96: 09:86:51:79:32:0a:c0:82:c8:4d:44:2f:fb:d2:36: 71:51:3a:c2:f3:51:b8:0b:89:25:81:fc:74:8d:ca: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:57:DD:FC:5F:0D:C2:7E:5F:93:9A:3B:35:6B:45:02:3C:E4:62 X509v3 Authority Key Identifier: keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d9:e1:13:ad:07:29:65:63:90:f1:97:29:d2:49:49:f9:20: 0c:bf:1c:00:1c:31:a8:77:9c:c7:01:f2:6a:ce:2a:c9:a6:0a: 0f:9a:b8:d1:ba:46:34:78:0d:98:03:03:9c:4f:78:93:2d:0e: 7a:12:3b:1b:0b:7c:24:9d:43:7c:f7:d4:5f:97:cd:1f:a5:2e: 1f:34:57:45:1b:3a:c5:cd:a9:8e:ab:c6:39:23:d7:2a:1d:52: d5:02:0e:8a:7a:1c:b2:d3:99:81:01:df:2e:62:e0:be:06:0e: dc:d5:84:74:82:b9:78:7c:87:98:8e:38:5c:84:97:54:27:8f: 7d:e5:25:6d:a7:33:22:f7:de:5f:7f:95:4b:28:42:88:e1:c6: bc:fb:13:75:55:e1:d1:58:ee:92:66:dd:b2:7b:fd:d9:8d:1e: cc:4b:11:88:5b:0c:05:37:e7:be:7a:50:55:1a:6b:73:d4:99: 12:42:20:b4:aa:ff:9c:30:e7:11:61:38:6d:1f:aa:7f:c6:f7: eb:b0:5a:57:0c:e0:10:77:29:c0:5b:b8:3e:8e:9b:c8:7c:d3: 4b:65:ab:ba:a4:41:ae:ec:b5:77:62:64:a6:c8:31:7a:eb:de: 14:55:f8:af:db:ba:27:3e:e3:b1:49:05:79:1a:b7:d5:78:17: 79:b6:49:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NTUxMTAvBgNVBAUTKDcwNTc5RjdGNUYxQjIxREZDOURFNjY3QzZCM0MyMUYx NkY4N0Q1NzIwHhcNMjUxMTA0MTgzMzUwWhcNMjUxMTExMTgzMzUwWjAYMRYwFAYD VQQDEw02OTBhNDcwZi1jZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsLHsu6t3nSf4DTeqb4+y31xb72qjPGbj6+sUINowHUshCOVuaKfV/94IMHV LDnntkGvKTfLboT8XIv/hG8KMTcmtevpBSnaReKCDlOpA/gN4vlGkBcYWWX9njA9 +VUcVnfsRnmH7zQRL26FBRJlhiHSS8crCM8hhNQdlSF/QwrwjE+Azx/N1vhYDLQ9 4i1xkxp4fAhFf4WmD5JLk9DNSh3jWZPdjZZ03QRYa6MccEefRqX8oXRTejGVu9Wc ZHJuk+BD1fmIkTihdz6SIH5FqYAtlmdjgflU+fB/iOi+NpYJhlF5MgrAgshNRC/7 0jZxUTrC81G4C4klgfx0jcpSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ6V938 Xw3Cfl+Tmjs1a0UCPORiMB8GA1UdIwQYMBaAFHBXn39fGyHfyd5mfGs8IfFvh9Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY1NS9GNzA3RjQ2NDBB OTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4YklkX0ozbVo4YXp3aDhXLUgx WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGZWZmMThiSWRfSjNtWjhhendoOFctSDFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY1NS9GNzA3RjQ2NDBBOTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4Yklk X0ozbVo4YXp3aDhXLUgxWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2eETrQcpZWOQ8Zcp0klJ+SAMvxwAHDGod5zHAfJqzirJpgoPmrjR ukY0eA2YAwOcT3iTLQ56EjsbC3wknUN899Rfl80fpS4fNFdFGzrFzamOq8Y5I9cq HVLVAg6Kehyy05mBAd8uYuC+Bg7c1YR0grl4fIeYjjhchJdUJ4995SVtpzMi995f f5VLKEKI4ca8+xN1VeHRWO6SZt2ye/3ZjR7MSxGIWwwFN+e+elBVGmtz1JkSQiC0 qv+cMOcRYThtH6p/xvfrsFpXDOAQdynAW7g+jpvIfNNLZau6pEGu7LV3YmSmyDF6 694UVfiv27onPuOxSQV5GrfVeBd5tkm7 -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:29 2025 by rpki-client