$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: dKy3kkrsTz2JDUWucCQJ6n9l0HBqMnsBp/m7Go5cs30= Subject key identifier: 9B:B4:55:DC:06:2B:C6:45:C3:D2:FD:71:0B:D5:CB:E8:12:7D:67:81 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0ACB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0AC5 Signing time: Sun 02 Nov 2025 19:25:09 +0000 Manifest this update: Sun 02 Nov 2025 19:25:08 +0000 Manifest next update: Sun 09 Nov 2025 19:25:08 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: dk/O/uptBtZEtMoQ1zcQvX3+2TiQh8AOK4TTYhN+tfw=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2763 (0xacb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Nov 2 19:25:08 2025 GMT Not After : Nov 9 19:25:08 2025 GMT Subject: CN=6907b015-b48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1b:e9:01:15:0d:21:37:0d:9a:0a:f3:94:cd: ee:4d:a3:15:c0:73:4f:7a:39:f4:e4:f6:d7:41:84: cd:45:14:bb:40:02:89:07:54:09:55:68:ab:f4:42: 65:9a:ef:17:57:d3:b2:45:14:9d:0a:f4:dd:07:8f: c9:61:e9:8a:f6:00:d8:5a:8f:6f:c5:0a:ca:95:17: 1c:64:5e:f4:f2:a2:ba:ff:2d:68:09:2f:3e:a6:a1: 60:67:58:3d:99:dc:73:05:81:4e:aa:f0:a0:60:3b: 71:a5:24:ff:fe:15:eb:9e:c3:7a:e1:dc:f8:3e:35: 27:7d:b5:97:7b:b4:15:c2:27:e4:b7:ea:7a:3e:57: ea:10:27:6e:00:4a:e8:79:96:a6:82:59:42:ee:65: 79:64:ce:b7:f4:e4:2c:8f:26:fd:8e:6e:08:0e:2d: 05:3f:eb:98:6d:96:c9:77:56:91:3b:e0:f9:d5:70: db:8f:cf:19:e0:79:a2:81:61:16:bb:af:ab:0d:47: 10:87:65:13:d7:e6:dc:ef:85:3a:9d:2c:18:77:c7: 21:a8:1a:ae:c1:de:10:46:8c:a5:2a:68:28:82:74: 89:f8:4f:f7:36:e2:9c:6f:4f:0d:58:d6:08:ce:87: 71:e0:86:64:c4:4f:ad:03:5a:70:b4:f7:8e:e9:62: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:55:DC:06:2B:C6:45:C3:D2:FD:71:0B:D5:CB:E8:12:7D:67:81 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:27:aa:54:c3:d8:99:6e:d9:5d:f4:24:dd:f8:47:20:91: 99:fe:e1:81:a0:af:49:38:97:46:26:7f:24:11:3e:6d:79:d3: d9:d3:9c:12:0e:45:68:0a:0d:5f:c8:89:86:33:ab:4a:de:03: b7:90:7a:47:03:f7:2c:ee:ca:36:e5:5f:3b:f1:50:3c:75:5c: 27:31:3c:b1:11:43:17:90:53:03:87:92:36:0a:a6:94:57:8d: fe:03:e7:97:15:f6:fd:91:fa:99:f8:2a:f4:87:1a:2e:32:1e: d2:b4:d5:66:e0:04:84:2c:42:9b:e1:aa:f4:26:39:ac:89:b8: ef:43:71:c0:e0:d0:0e:67:da:15:e4:aa:aa:4e:62:1b:bc:bd: 2e:16:98:3a:6c:d5:25:88:5a:0b:d8:bb:a0:03:c7:ab:4d:88: d0:16:4c:cc:7b:5c:da:e1:99:08:36:67:23:19:c6:0c:c9:b6: 86:83:6c:73:79:cf:0e:7f:12:b2:05:51:ed:ad:3a:c2:69:2e: 8b:58:4e:57:e6:3a:69:42:f7:40:29:12:b3:03:8f:da:19:02: cd:29:87:fb:f2:a3:a3:68:a5:bf:cd:f9:e6:f0:cd:04:bc:a5: 0b:63:05:40:53:20:37:8a:eb:a0:26:62:1a:02:8d:62:7f:05: 46:46:bc:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUxMTAyMTkyNTA4WhcNMjUxMTA5MTkyNTA4WjAYMRYwFAYD VQQDEw02OTA3YjAxNS1iNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xvpARUNITcNmgrzlM3uTaMVwHNPejn05PbXQYTNRRS7QAKJB1QJVWir9EJl mu8XV9OyRRSdCvTdB4/JYemK9gDYWo9vxQrKlRccZF708qK6/y1oCS8+pqFgZ1g9 mdxzBYFOqvCgYDtxpST//hXrnsN64dz4PjUnfbWXe7QVwifkt+p6PlfqECduAEro eZamgllC7mV5ZM639OQsjyb9jm4IDi0FP+uYbZbJd1aRO+D51XDbj88Z4HmigWEW u6+rDUcQh2UT1+bc74U6nSwYd8chqBquwd4QRoylKmgognSJ+E/3NuKcb08NWNYI zodx4IZkxE+tA1pwtPeO6WKkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu0VdwG K8ZFw9L9cQvVy+gSfWeBMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpVieqVMPYmW7ZXfQk3fhHIJGZ/uGBoK9JOJdGJn8kET5tedPZ05wS DkVoCg1fyImGM6tK3gO3kHpHA/cs7so25V878VA8dVwnMTyxEUMXkFMDh5I2CqaU V43+A+eXFfb9kfqZ+Cr0hxouMh7StNVm4ASELEKb4ar0JjmsibjvQ3HA4NAOZ9oV 5KqqTmIbvL0uFpg6bNUliFoL2LugA8erTYjQFkzMe1za4ZkINmcjGcYMybaGg2xz ec8OfxKyBVHtrTrCaS6LWE5X5jppQvdAKRKzA4/aGQLNKYf78qOjaKW/zfnm8M0E vKULYwVAUyA3iuugJmIaAo1ifwVGRrwg -----END CERTIFICATE-----Generated at Tue Nov 4 08:31:16 2025 by rpki-client