$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json) Hash identifier: 1QFFjK4muZFw+vyGepA26xemVxD3bBGdn6aAu7nMSUM= Subject key identifier: 56:2C:6B:78:F3:39:DC:3A:CF:8B:2B:3C:66:63:C0:00:8E:15:07:A9 Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft Manifest number: 01AB Signing time: Mon 03 Nov 2025 03:09:49 +0000 Manifest this update: Mon 03 Nov 2025 03:09:49 +0000 Manifest next update: Mon 10 Nov 2025 03:09:49 +0000 Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: taP8823a5zEskQWfLwJmF54twIwESPYRUT3B0MuP9do=) 2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: EJtO7SCnq7WD6CVqUE1wDTBTGe53mImtDfushaYOSys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B675, serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Validity Not Before: Nov 3 03:09:49 2025 GMT Not After : Nov 10 03:09:49 2025 GMT Subject: CN=69081cfd-72de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:bd:9c:29:41:3d:70:dd:8a:49:b9:be:d5: 98:41:4b:3b:b4:5c:35:e5:e6:4c:1e:1f:a5:40:c7: fa:17:ff:01:91:b0:5d:77:ae:79:c4:26:f3:11:02: ab:ff:a3:e1:c9:89:77:53:89:47:5d:cb:db:bc:52: d5:08:aa:bb:cb:d6:69:d1:96:ca:eb:af:2b:bc:4b: 44:37:1f:14:e2:52:2f:bd:8a:52:03:cb:44:46:82: 8b:ec:5a:18:1d:d6:c5:fb:ec:e0:c2:d4:a6:39:4f: ca:b0:71:3c:85:94:c1:06:75:51:41:a0:cc:31:08: f3:20:39:e2:68:dd:4a:1d:a8:75:58:7b:2a:4e:44: 5d:05:ef:48:6f:5e:a4:4a:7e:9e:b4:c5:5a:76:f7: 9f:a6:4d:36:96:17:33:c1:9f:1b:be:33:66:9f:c9: 16:68:cc:e5:48:a1:82:38:0b:a0:58:00:cb:82:7d: 97:19:c9:d3:dd:59:46:d8:ed:f6:0a:5a:f3:f2:49: 5d:7e:ee:de:d0:25:96:4e:44:e9:d7:87:d3:93:63: e9:75:ac:4b:c3:20:5a:e1:47:05:68:cb:9e:a0:6b: be:dc:8b:f5:d9:0e:4c:15:e5:a8:6f:e0:23:4c:58: fa:82:0e:65:b1:cd:c2:41:8c:a3:60:09:8b:66:82: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2C:6B:78:F3:39:DC:3A:CF:8B:2B:3C:66:63:C0:00:8E:15:07:A9 X509v3 Authority Key Identifier: keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cf:a4:45:43:4a:09:11:77:d6:78:7a:71:b8:74:ef:a4:f7: 4a:c3:58:1d:87:23:54:90:eb:25:59:b0:9e:8e:8a:64:21:7d: b1:ba:6a:8c:f8:91:1c:8d:49:7c:34:8c:6e:39:01:72:87:ba: a6:08:6f:b2:97:96:fa:2f:bf:f1:b0:4d:25:77:46:17:b8:a5: c7:e9:18:dc:44:8c:d2:92:0c:28:91:03:b4:9b:bb:df:c4:e7: 02:85:29:b2:da:a3:99:79:89:d9:25:e4:2a:cb:f3:4f:fd:4a: 13:24:27:e6:74:96:1d:80:60:1f:7d:51:2b:f4:92:9c:20:76: ee:8f:6d:9b:19:d7:b0:46:80:28:37:27:aa:61:b9:03:9a:b3: 38:ea:60:17:24:90:74:21:8c:be:04:db:df:72:c0:89:1f:44: 91:b9:0e:c6:41:42:e2:02:05:0c:b5:99:2d:c0:ae:39:dd:d2: 67:2e:1e:ee:ea:0f:f1:4a:e4:2f:31:fe:b6:16:e1:e9:73:be: b2:54:ae:f7:f3:c8:22:31:24:77:73:e9:93:98:66:d7:b4:fb: b3:57:9e:3e:12:89:a6:c5:1f:83:a6:4f:b3:52:fa:51:e0:12: 6f:a4:22:d9:fa:b6:3c:5c:fc:df:cf:06:7d:3f:fd:7e:81:59: 61:02:ab:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3 NTY4NDNGOEEwHhcNMjUxMTAzMDMwOTQ5WhcNMjUxMTEwMDMwOTQ5WjAYMRYwFAYD VQQDEw02OTA4MWNmZC03MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6W9nClBPXDdikm5vtWYQUs7tFw15eZMHh+lQMf6F/8BkbBdd655xCbzEQKr /6PhyYl3U4lHXcvbvFLVCKq7y9Zp0ZbK668rvEtENx8U4lIvvYpSA8tERoKL7FoY HdbF++zgwtSmOU/KsHE8hZTBBnVRQaDMMQjzIDniaN1KHah1WHsqTkRdBe9Ib16k Sn6etMVadvefpk02lhczwZ8bvjNmn8kWaMzlSKGCOAugWADLgn2XGcnT3VlG2O32 Clrz8kldfu7e0CWWTkTp14fTk2PpdaxLwyBa4UcFaMueoGu+3Iv12Q5MFeWob+Aj TFj6gg5lsc3CQYyjYAmLZoJuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYsa3jz Odw6z4srPGZjwACOFQepMB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCz6RFQ0oJEXfWeHpxuHTvpPdKw1gdhyNUkOslWbCejopkIX2xumqM +JEcjUl8NIxuOQFyh7qmCG+yl5b6L7/xsE0ld0YXuKXH6RjcRIzSkgwokQO0m7vf xOcChSmy2qOZeYnZJeQqy/NP/UoTJCfmdJYdgGAffVEr9JKcIHbuj22bGdewRoAo NyeqYbkDmrM46mAXJJB0IYy+BNvfcsCJH0SRuQ7GQULiAgUMtZktwK453dJnLh7u 6g/xSuQvMf62FuHpc76yVK7388giMSR3c+mTmGbXtPuzV54+EommxR+Dpk+zUvpR 4BJvpCLZ+rY8XPzfzwZ9P/1+gVlhAqvC -----END CERTIFICATE-----Generated at Tue Nov 4 01:04:03 2025 by rpki-client