$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: BHQIojUSR2klygtHC/Z9C7AvsFq9BBVUD3kg4nToo6A= Subject key identifier: E1:66:C1:4B:16:AA:B2:9F:B1:A0:44:02:FA:97:B9:87:97:D4:10:1D Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 04A4 Signing time: Wed 05 Nov 2025 00:02:46 +0000 Manifest this update: Wed 05 Nov 2025 00:02:46 +0000 Manifest next update: Wed 12 Nov 2025 00:02:46 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: UvMAyuiH2hSHAqgG6QHujEo1ps4QhVYBk/F/uDnfEKg=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Nov 5 00:02:46 2025 GMT Not After : Nov 12 00:02:46 2025 GMT Subject: CN=690a9426-8d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:7f:b0:a6:93:f1:c2:04:d7:30:ee:a0:fd: 02:f5:da:04:52:b7:84:db:9f:bc:fe:55:26:cc:07: af:42:84:c0:ee:8a:36:37:ac:26:4e:45:1d:fd:dc: 03:2d:43:c4:08:b4:38:6e:67:47:34:e8:0b:b4:ba: 9b:91:19:e2:fb:d1:67:a8:a7:d1:6a:72:32:81:78: 66:c3:bc:ac:2f:0f:35:ac:87:23:0b:4b:e4:82:7b: f9:45:7d:79:5f:45:19:27:39:05:e2:86:c3:ea:d4: 9c:5e:17:41:47:b4:60:80:eb:d6:56:d4:98:e0:45: fc:b9:1f:39:ec:d9:82:aa:20:c0:19:fd:2b:41:9a: 67:5e:87:6d:5d:3c:12:1a:a9:eb:f4:bf:ba:57:03: 0d:ec:23:1b:b9:a9:a3:af:89:67:2a:a1:0c:63:0b: 4f:a9:ac:c0:e3:0a:37:06:55:1f:70:cc:04:c3:1a: 6b:e4:f3:94:63:37:06:40:dd:62:ab:9e:00:f0:d3: 61:33:bf:ea:4a:5b:9f:96:c6:a8:1b:57:8d:30:2e: 3a:52:82:29:75:b0:48:b9:aa:27:e1:35:c8:1d:6b: 83:11:b1:dc:26:7d:c3:97:37:cc:48:4f:28:ec:1a: c8:eb:4b:70:a5:eb:f7:0d:f0:02:eb:e4:64:f0:8f: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:66:C1:4B:16:AA:B2:9F:B1:A0:44:02:FA:97:B9:87:97:D4:10:1D X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:75:01:74:0f:65:95:a8:ac:b0:c7:69:e0:6b:0f:24:36:76: c7:11:f6:b4:a2:04:e7:3f:37:b0:80:ad:bc:c5:c1:e8:f2:d1: bc:50:71:6f:9f:7f:26:cd:1b:fd:5e:60:5e:34:d8:18:13:e3: 4c:2c:64:c9:da:a1:68:e6:f7:4f:af:a9:74:69:4d:d1:42:cc: 36:0e:5a:3f:fc:00:75:b0:aa:39:ad:8f:05:a1:35:cc:4c:97: f1:31:2c:2c:38:58:4c:d0:8f:a9:53:dd:1c:ed:87:aa:a0:2c: 8e:6d:cd:87:64:0c:dc:30:9e:cb:fc:ee:bf:dd:1e:7a:35:ab: bc:17:29:59:0d:27:f4:25:87:3f:3a:98:a7:fe:49:27:86:88: 9b:48:58:a1:94:92:54:ea:87:5b:48:8a:0a:31:8c:28:74:00: 59:bc:c6:e5:29:a8:d7:6f:79:78:6a:c1:86:f4:12:ab:e5:b8: 68:f5:9a:c9:4b:da:5e:bb:80:b1:99:cc:3a:72:f5:be:98:fc: c7:da:bd:2c:7a:b0:87:0b:2a:22:42:ea:12:13:ba:fe:0f:46: 8e:1e:4d:65:59:74:e0:8a:8d:0e:6f:aa:69:3f:17:77:88:64: 6f:b9:9c:9c:e6:f0:cb:f1:a7:b6:a2:e3:f3:a5:48:13:a8:12: ff:ae:54:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUxMTA1MDAwMjQ2WhcNMjUxMTEyMDAwMjQ2WjAYMRYwFAYD VQQDEw02OTBhOTQyNi04ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZJ/sKaT8cIE1zDuoP0C9doEUreE25+8/lUmzAevQoTA7oo2N6wmTkUd/dwD LUPECLQ4bmdHNOgLtLqbkRni+9FnqKfRanIygXhmw7ysLw81rIcjC0vkgnv5RX15 X0UZJzkF4obD6tScXhdBR7RggOvWVtSY4EX8uR857NmCqiDAGf0rQZpnXodtXTwS Gqnr9L+6VwMN7CMbuamjr4lnKqEMYwtPqazA4wo3BlUfcMwEwxpr5POUYzcGQN1i q54A8NNhM7/qSluflsaoG1eNMC46UoIpdbBIuaon4TXIHWuDEbHcJn3DlzfMSE8o 7BrI60twpev3DfAC6+Rk8I/IuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFmwUsW qrKfsaBEAvqXuYeX1BAdMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABdQF0D2WVqKywx2ngaw8kNnbHEfa0ogTnPzewgK28xcHo8tG8UHFv n38mzRv9XmBeNNgYE+NMLGTJ2qFo5vdPr6l0aU3RQsw2Dlo//AB1sKo5rY8FoTXM TJfxMSwsOFhM0I+pU90c7YeqoCyObc2HZAzcMJ7L/O6/3R56Nau8FylZDSf0JYc/ Opin/kknhoibSFihlJJU6odbSIoKMYwodABZvMblKajXb3l4asGG9BKr5bho9ZrJ S9peu4Cxmcw6cvW+mPzH2r0serCHCyoiQuoSE7r+D0aOHk1lWXTgio0Ob6ppPxd3 iGRvuZyc5vDL8ae2ouPzpUgTqBL/rlTE -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:25 2025 by rpki-client