$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: UmlwajuHrZbB7fJ0dEBeHcYSADxWdiv2vH5z50/7uYE= Subject key identifier: 6D:8A:E0:17:9C:AA:DD:FB:D4:B1:69:F0:73:F0:6D:C4:6C:79:17:B7 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 1734 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 170C Signing time: Tue 04 Nov 2025 16:44:49 +0000 Manifest this update: Tue 04 Nov 2025 16:44:49 +0000 Manifest next update: Tue 11 Nov 2025 16:44:49 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: cvmQ5TGqAJS2QPZ9L4glcYHhw0M8tB0dfZ1iSvZOOQI=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5940 (0x1734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Nov 4 16:44:49 2025 GMT Not After : Nov 11 16:44:49 2025 GMT Subject: CN=690a2d81-9c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:1d:57:33:04:33:11:ab:74:d7:85:9a:94: 03:91:fd:2a:3f:3b:f7:4f:16:14:56:e0:a2:ab:ff: 93:26:2a:da:dc:2a:62:cb:9f:ff:1d:6d:39:e7:7a: b1:97:77:98:96:d3:20:71:c4:2f:8e:4e:ce:03:53: a1:a8:0b:1b:fa:28:d9:50:20:4b:c6:a3:c2:e7:14: 6c:39:ac:03:78:a0:bc:6a:7c:be:9c:99:04:48:f3: fc:55:15:08:28:7a:f8:40:f8:42:ff:35:ac:1b:68: d7:1d:1d:20:2f:43:ed:98:90:d6:21:3f:26:12:8b: 57:84:93:78:e4:91:77:cf:89:af:1f:d5:d5:20:19: 3b:08:44:b1:8d:e0:57:14:cb:69:da:d1:30:56:8b: 24:27:65:cf:d7:fc:a2:15:88:62:46:ff:0d:e9:35: b9:2a:c6:98:06:b6:d8:c4:48:d1:d4:3f:d0:91:0c: 7b:82:73:1d:c9:5f:dd:30:f2:2f:b5:58:31:20:fe: d0:15:67:7a:16:ae:f5:91:70:a3:75:51:f7:98:a1: 57:4c:e2:30:07:0e:03:b0:52:02:d3:53:ab:8e:d6: 32:e7:72:76:07:45:44:f3:3b:0a:39:1a:68:7a:d0: 06:2c:6f:32:fb:73:36:71:e6:0b:7a:8c:04:74:92: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8A:E0:17:9C:AA:DD:FB:D4:B1:69:F0:73:F0:6D:C4:6C:79:17:B7 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d7:ef:47:05:95:76:41:6d:8a:ed:a5:bd:97:bf:c1:7e:ff: 67:c4:0b:fd:e3:e8:ee:bb:14:ac:db:cc:5f:98:60:5a:39:14: 31:9e:eb:b5:15:73:0c:ef:10:3e:d0:f5:c6:09:3f:b3:0f:e0: ba:58:35:a0:e4:2c:46:c6:93:a5:0c:28:38:42:53:c8:5d:95: 2c:e6:dd:57:d4:92:70:4e:a9:92:62:29:47:ac:a9:05:d6:af: 94:88:19:ff:9e:b7:b6:a8:6d:81:57:c8:29:a8:48:b3:20:83: 16:2f:fb:0f:05:8c:e8:aa:9e:45:34:bd:71:71:b9:48:f5:69: 59:42:5a:c6:09:ab:c2:dc:be:03:05:bb:1b:c0:69:dc:9d:d1: ad:5d:b0:2e:3a:d1:68:32:15:7e:4c:ed:ef:77:e7:0a:20:61: a5:eb:86:be:f1:34:59:5d:8e:72:44:e1:04:a5:be:1b:ff:ec: 6c:0d:16:d9:a5:b1:07:1b:08:5f:81:5a:0c:5f:20:3f:ef:cd: af:7f:7a:7d:f9:ab:de:1f:ea:de:31:e3:c9:5f:f0:59:5a:16: 6b:d7:21:96:30:03:01:1e:bd:e4:53:03:ca:7e:1d:ec:42:d7: 5c:fe:29:49:e6:31:a1:b8:a1:7d:1b:b8:7d:a1:45:54:c6:e0: c1:b5:0e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUxMTA0MTY0NDQ5WhcNMjUxMTExMTY0NDQ5WjAYMRYwFAYD VQQDEw02OTBhMmQ4MS05YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHgdVzMEMxGrdNeFmpQDkf0qPzv3TxYUVuCiq/+TJira3Cpiy5//HW0553qx l3eYltMgccQvjk7OA1OhqAsb+ijZUCBLxqPC5xRsOawDeKC8any+nJkESPP8VRUI KHr4QPhC/zWsG2jXHR0gL0PtmJDWIT8mEotXhJN45JF3z4mvH9XVIBk7CESxjeBX FMtp2tEwVoskJ2XP1/yiFYhiRv8N6TW5KsaYBrbYxEjR1D/QkQx7gnMdyV/dMPIv tVgxIP7QFWd6Fq71kXCjdVH3mKFXTOIwBw4DsFIC01OrjtYy53J2B0VE8zsKORpo etAGLG8y+3M2ceYLeowEdJJJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2K4Bec qt371LFp8HPwbcRseRe3MB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu1+9HBZV2QW2K7aW9l7/Bfv9nxAv94+juuxSs28xfmGBaORQxnuu1 FXMM7xA+0PXGCT+zD+C6WDWg5CxGxpOlDCg4QlPIXZUs5t1X1JJwTqmSYilHrKkF 1q+UiBn/nre2qG2BV8gpqEizIIMWL/sPBYzoqp5FNL1xcblI9WlZQlrGCavC3L4D BbsbwGncndGtXbAuOtFoMhV+TO3vd+cKIGGl64a+8TRZXY5yROEEpb4b/+xsDRbZ pbEHGwhfgVoMXyA/782vf3p9+aveH+reMePJX/BZWhZr1yGWMAMBHr3kUwPKfh3s Qtdc/ilJ5jGhuKF9G7h9oUVUxuDBtQ6j -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:49 2025 by rpki-client