$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: Ih4OLZ9fhw+hY9BTKkG9iO3PL3M2yLuInsk9tbC/gpw= Subject key identifier: 12:25:5D:A8:08:D1:44:D9:D3:33:D8:4E:8C:4F:8C:D9:F9:AA:A9:98 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 0863 Signing time: Sun 02 Nov 2025 20:38:09 +0000 Manifest this update: Sun 02 Nov 2025 20:38:09 +0000 Manifest next update: Sun 09 Nov 2025 20:38:09 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: R7WqCAI7WgsHTR2tKtlKMY4h5aTIL7B2NJAadyerHas=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Nov 2 20:38:09 2025 GMT Not After : Nov 9 20:38:09 2025 GMT Subject: CN=6907c131-727a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:78:d5:e9:2a:24:9c:3b:df:11:cc:e8:b3: 50:62:c1:22:7f:47:70:06:fe:3a:d0:8a:30:8e:a8: c7:d0:b3:3d:23:f3:ba:81:92:44:0d:b2:37:69:af: 26:09:9e:d2:8e:11:e9:c4:9f:82:cb:af:c2:1e:f7: de:9d:87:30:ea:ba:19:10:50:e8:7b:7c:60:0e:b0: b7:42:7e:60:ec:cc:3c:6d:58:bc:86:d5:8a:e8:46: 02:5f:a9:b2:69:d1:29:82:c4:c7:d2:56:b8:b5:f6: f6:12:13:07:f2:9e:56:9c:fb:e7:5c:c7:85:71:0d: 9a:82:f7:93:50:37:69:86:af:f9:01:7a:3a:84:35: 77:a6:3b:a4:bf:ec:40:96:c8:2f:fd:ac:39:d1:68: ec:80:38:e4:34:10:51:a7:fa:46:94:89:be:6e:fc: 93:49:b2:3a:4d:f1:88:27:38:b2:a5:80:d0:f5:5a: 27:35:92:a3:24:ca:75:53:4e:a0:b1:6c:b8:f1:28: b4:6b:a9:74:c5:cc:19:ed:83:15:d8:71:2b:f1:f9: 75:76:bb:a8:94:02:02:65:67:93:bd:34:a7:b5:81: 10:16:ed:be:55:8e:cd:f3:bd:74:48:1b:a1:67:8e: eb:c5:82:f0:3e:12:69:94:64:3d:a7:af:09:93:bb: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:25:5D:A8:08:D1:44:D9:D3:33:D8:4E:8C:4F:8C:D9:F9:AA:A9:98 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ba:06:6b:29:11:14:9a:68:59:57:89:3e:a2:11:99:c2:5e: bf:16:70:8e:60:f8:24:28:f5:90:0c:c9:c2:94:23:5b:ef:06: f8:10:3f:af:b7:62:83:73:6b:bb:b8:e2:67:9b:04:78:5d:52: 36:cc:08:0d:72:f4:d5:16:40:2b:ee:87:e9:9d:34:28:38:e1: 09:e2:90:24:e4:03:1a:e1:df:d8:96:6b:c8:b4:8d:de:44:34: 4d:a6:65:6b:0d:02:c0:36:56:48:23:25:59:16:f5:31:a1:43: 42:b7:cc:95:18:f3:77:6b:9b:95:7b:0c:e6:83:07:43:16:36: 0f:f6:fc:9b:5d:7f:ae:7a:66:0f:bf:d2:8d:6c:b1:43:23:34: cd:68:82:85:43:1b:96:d7:e2:45:74:0a:8d:d4:f0:0b:6c:ff: 83:1d:c0:41:09:bb:34:c4:8e:1b:68:f6:77:8f:7d:18:70:f8: fe:ed:67:90:d4:b2:ee:a1:92:46:e7:24:09:f8:cc:f1:ba:45: db:48:b7:f3:ad:dc:6b:bc:56:d8:ac:99:5f:17:42:cd:0b:76: 18:d6:96:8a:54:d4:b6:c2:93:6b:08:33:cd:7e:4c:a5:dc:17: d8:5a:ff:5d:f7:51:82:0b:18:e8:c1:2a:82:2e:ab:6e:43:60: a7:1a:7d:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUxMTAyMjAzODA5WhcNMjUxMTA5MjAzODA5WjAYMRYwFAYD VQQDEw02OTA3YzEzMS03MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkR41ekqJJw73xHM6LNQYsEif0dwBv460IowjqjH0LM9I/O6gZJEDbI3aa8m CZ7SjhHpxJ+Cy6/CHvfenYcw6roZEFDoe3xgDrC3Qn5g7Mw8bVi8htWK6EYCX6my adEpgsTH0la4tfb2EhMH8p5WnPvnXMeFcQ2agveTUDdphq/5AXo6hDV3pjukv+xA lsgv/aw50WjsgDjkNBBRp/pGlIm+bvyTSbI6TfGIJziypYDQ9VonNZKjJMp1U06g sWy48Si0a6l0xcwZ7YMV2HEr8fl1druolAICZWeTvTSntYEQFu2+VY7N8710SBuh Z47rxYLwPhJplGQ9p68Jk7thUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIlXagI 0UTZ0zPYToxPjNn5qqmYMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ugZrKREUmmhZV4k+ohGZwl6/FnCOYPgkKPWQDMnClCNb7wb4ED+v t2KDc2u7uOJnmwR4XVI2zAgNcvTVFkAr7ofpnTQoOOEJ4pAk5AMa4d/YlmvItI3e RDRNpmVrDQLANlZIIyVZFvUxoUNCt8yVGPN3a5uVewzmgwdDFjYP9vybXX+uemYP v9KNbLFDIzTNaIKFQxuW1+JFdAqN1PALbP+DHcBBCbs0xI4baPZ3j30YcPj+7WeQ 1LLuoZJG5yQJ+MzxukXbSLfzrdxrvFbYrJlfF0LNC3YY1paKVNS2wpNrCDPNfkyl 3BfYWv9d91GCCxjowSqCLqtuQ2CnGn3x -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:24 2025 by rpki-client