$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json) Hash identifier: WI/y9Dc9TqEdsKWgz69sgP6Rzv+XM+D0B6djB2uynqA= Subject key identifier: BF:D0:40:55:CE:CC:E8:07:25:37:20:EF:2A:AB:22:A8:06:B2:E7:38 Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft Manifest number: 052C Signing time: Sun 02 Nov 2025 23:29:50 +0000 Manifest this update: Sun 02 Nov 2025 23:29:49 +0000 Manifest next update: Sun 09 Nov 2025 23:29:49 +0000 Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: 4IyFf0Oq+eIRSuxfA/RBo/Xcpt2t+/3bNqa3N3EBhjg=) 2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: gvY7yNXsc8f6BaNnDgo1s6r58BRk/opgVjfKstxIGuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Validity Not Before: Nov 2 23:29:49 2025 GMT Not After : Nov 9 23:29:49 2025 GMT Subject: CN=6907e96e-f96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:6c:1a:13:b3:02:a3:2a:e7:26:61:eb:0f: 0d:c0:9e:c7:c5:e1:ae:50:c6:c3:ca:b0:19:61:da: 41:be:de:e9:f8:d9:88:70:56:a2:fb:dd:8e:b4:5f: a2:74:d6:f0:a8:5b:8a:77:8e:ca:ff:81:5d:52:4a: 4e:86:8b:a6:1f:62:4d:0e:35:15:d6:25:09:ae:b6: 91:d6:8b:6f:9c:ae:c7:5a:40:47:5d:b4:7b:10:c7: 44:0d:d5:6b:93:52:26:5f:ca:7e:f2:87:0c:70:82: c9:4f:95:5b:a8:9b:84:c3:c0:10:e8:d0:87:78:cb: ae:a6:7e:ad:61:ae:5e:d1:74:ba:cb:e8:10:45:ef: 91:29:3a:ab:6f:e2:0a:01:22:26:d6:fe:88:05:98: 26:5d:34:43:93:1b:3b:82:e7:41:82:37:00:12:93: fd:e8:7b:6e:57:a3:05:00:e0:c5:51:6a:94:7b:65: 2b:5b:c7:b7:05:b5:e9:00:1f:d7:24:00:8d:f8:35: 6b:74:bd:1b:35:91:4e:76:d5:5f:80:52:7c:2b:0c: be:13:af:50:5a:59:f9:0e:aa:d6:24:19:ee:a8:5d: 44:47:ba:b1:59:c5:92:5e:25:de:70:00:8c:ee:d4: cc:4d:90:d0:d0:bd:a6:7f:82:35:89:3e:e3:34:7b: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:40:55:CE:CC:E8:07:25:37:20:EF:2A:AB:22:A8:06:B2:E7:38 X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:49:a8:54:e7:0c:81:46:60:ab:4e:ca:78:c0:db:f6:b9:10: 8e:20:e8:ed:28:7f:08:62:8a:91:67:a2:bd:dd:34:7a:65:e5: 53:ce:2e:78:87:c8:ce:1d:1c:1d:ca:e4:b6:88:05:bb:70:72: 85:5c:b9:01:d9:be:91:c0:29:e8:9d:c2:d2:cd:ee:a9:cd:47: 5c:52:b9:64:d2:44:d8:d5:53:20:9e:71:2f:b8:fb:41:db:0d: bc:dc:3e:26:90:2a:92:99:25:9d:51:cd:f6:be:61:21:1e:d9: 19:fc:a6:d9:c9:02:12:b0:6d:f8:48:f9:48:0f:67:06:a9:4e: 96:7e:c7:f9:e6:a1:54:b9:01:08:50:df:85:11:41:e3:77:ac: 19:da:6d:ab:6a:ec:db:1b:07:3d:39:37:8c:22:86:a3:4d:a7: fe:88:93:3a:54:84:3f:1a:e2:ac:74:4d:62:da:d2:64:ab:a4: 1e:d5:ea:f6:76:d9:47:77:c4:6d:a1:5c:27:ae:c2:1e:47:be: 1b:86:a7:fc:ff:2d:fc:c2:e3:78:be:a9:e7:19:57:60:64:ad: 1c:6b:8a:c4:c4:8f:9e:42:cf:4c:d2:a0:f7:4d:7a:71:73:95: 52:a5:d0:07:08:db:ca:b7:39:67:4a:f8:11:61:99:38:28:ec: f9:03:6f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjUxMTAyMjMyOTQ5WhcNMjUxMTA5MjMyOTQ5WjAYMRYwFAYD VQQDEw02OTA3ZTk2ZS1mOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjtsGhOzAqMq5yZh6w8NwJ7HxeGuUMbDyrAZYdpBvt7p+NmIcFai+92OtF+i dNbwqFuKd47K/4FdUkpOhoumH2JNDjUV1iUJrraR1otvnK7HWkBHXbR7EMdEDdVr k1ImX8p+8ocMcILJT5VbqJuEw8AQ6NCHeMuupn6tYa5e0XS6y+gQRe+RKTqrb+IK ASIm1v6IBZgmXTRDkxs7gudBgjcAEpP96HtuV6MFAODFUWqUe2UrW8e3BbXpAB/X JACN+DVrdL0bNZFOdtVfgFJ8Kwy+E69QWln5DqrWJBnuqF1ER7qxWcWSXiXecACM 7tTMTZDQ0L2mf4I1iT7jNHsGGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/QQFXO zOgHJTcg7yqrIqgGsuc4MB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y ZmdqWElQVEFsbVFiU2h5TVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOSahU5wyBRmCrTsp4wNv2uRCOIOjtKH8IYoqRZ6K93TR6ZeVTzi54 h8jOHRwdyuS2iAW7cHKFXLkB2b6RwCnoncLSze6pzUdcUrlk0kTY1VMgnnEvuPtB 2w283D4mkCqSmSWdUc32vmEhHtkZ/KbZyQISsG34SPlID2cGqU6Wfsf55qFUuQEI UN+FEUHjd6wZ2m2rauzbGwc9OTeMIoajTaf+iJM6VIQ/GuKsdE1i2tJkq6Qe1er2 dtlHd8RtoVwnrsIeR74bhqf8/y38wuN4vqnnGVdgZK0ca4rExI+eQs9M0qD3TXpx c5VSpdAHCNvKtzlnSvgRYZk4KOz5A29n -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:07 2025 by rpki-client