$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: Ykjtq54mMfY1jk7b/03IQNuDZhXXxTs6PVpmvEG/HeU= Subject key identifier: 6E:61:31:C0:40:4F:FC:01:0F:23:6C:05:D6:8C:73:A3:D8:FA:BE:1C Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 01B2 Signing time: Mon 03 Nov 2025 03:20:32 +0000 Manifest this update: Mon 03 Nov 2025 03:20:32 +0000 Manifest next update: Mon 10 Nov 2025 03:20:32 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: MJj2CjFVQIMDLSs08ZcG1Il24bgmmmwMmdQuDUbAqiM=) 2: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: 0lzHMRu/BEbN9XyM7Nn7lU0Tdf9VP7CQevvwrhAJ9I4=) 3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: ySS8x+DTKoqsAepHwvR2qHqY0ZCmV9P1QKOa76HzTlg=) 4: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: oQkH3u9NTYvKUYQPQlkbYyuLgyzF8QlzdxljTJ0MaOk=) 5: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: 2gtTc6ZU74S7+Yus2EBYeK424P/75ngpI7OxmlHbzq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Nov 3 03:20:32 2025 GMT Not After : Nov 10 03:20:32 2025 GMT Subject: CN=69081f80-c012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:b1:86:5c:c7:11:78:e4:5c:01:58:4e:0f: 28:2d:47:da:3f:3f:ed:dd:97:a6:0a:d8:5d:08:11: fe:d1:db:de:f7:d6:ae:03:9f:52:76:d5:1f:f4:6e: 03:ce:dc:e4:b0:3f:f8:6d:f6:77:85:a0:fd:e3:db: 85:b2:3a:b8:ff:1d:71:e9:ab:29:40:62:02:bc:26: 7c:06:60:a3:92:db:b6:d4:f2:72:af:1b:64:fe:eb: df:ff:71:36:88:17:62:fb:b3:da:9a:31:be:92:bd: 91:a4:1b:c6:5c:90:a1:71:13:ca:dd:f6:74:ce:bc: 38:3e:39:54:32:99:92:cd:cc:a2:e7:bf:08:51:bf: a4:ed:d4:95:73:12:2f:29:d9:6d:0c:12:0f:ca:8f: 46:7e:f4:2b:81:42:37:78:30:76:e6:0b:16:a1:18: a9:b9:93:de:4a:13:ac:b8:dd:82:aa:c8:4e:1f:d9: 1f:a5:6d:5b:b8:b7:1f:1c:09:ae:f2:f9:a3:d7:18: fb:e6:01:18:47:ac:22:38:95:f8:32:3f:90:2e:06: ba:fc:ce:bb:d1:d9:2b:88:0f:c5:7e:f5:8d:eb:e2: e7:c0:81:83:bf:1c:7f:b2:6b:36:14:3f:5c:1b:08: 48:bd:c5:28:bc:9d:1b:84:e9:41:86:ad:6a:80:57: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:31:C0:40:4F:FC:01:0F:23:6C:05:D6:8C:73:A3:D8:FA:BE:1C X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c8:50:47:4f:b7:b6:6f:ff:6e:a6:fb:8a:12:f1:02:46:b4: 98:b6:15:01:b5:02:e4:66:d8:f7:8d:e9:6f:cf:4f:ae:8d:73: ee:90:e9:13:af:df:7f:d6:ae:e4:59:25:2c:1a:f5:3b:7c:07: 4a:b8:c8:5a:50:fe:9d:c4:e2:3f:68:a2:13:af:be:4a:28:ea: 43:f5:e6:aa:48:f8:31:94:8a:3e:86:4b:7d:68:6e:4c:25:f4: a6:83:57:a2:75:3b:25:9e:7c:f5:68:0c:84:04:34:6a:ed:17: 4c:b0:d6:1c:9e:94:68:cf:c6:8b:b8:37:ea:a5:85:64:28:12: e3:18:7e:80:cf:1f:0a:b0:3d:d6:22:01:de:23:40:cb:90:d5: 67:b4:78:22:50:dd:26:a7:9e:29:27:2d:14:cb:1e:6d:44:86: 79:0e:26:a0:14:1a:fa:5a:a3:f8:a0:7e:29:98:42:5e:96:23: f7:a5:c8:b3:e1:6f:ea:a3:34:06:6d:8e:d1:50:76:87:ec:30: 3e:fa:a8:bc:ed:76:39:83:7c:41:3e:e3:d1:d6:30:55:00:a4: f7:24:28:8f:20:a5:4d:79:a8:c6:1d:97:c2:46:e1:fa:9a:9e: 79:c7:e7:e2:3c:6f:c4:fd:31:d7:b9:09:1a:49:33:57:2b:02: c6:ea:e2:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUxMTAzMDMyMDMyWhcNMjUxMTEwMDMyMDMyWjAYMRYwFAYD VQQDEw02OTA4MWY4MC1jMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmX+xhlzHEXjkXAFYTg8oLUfaPz/t3ZemCthdCBH+0dve99auA59SdtUf9G4D ztzksD/4bfZ3haD949uFsjq4/x1x6aspQGICvCZ8BmCjktu21PJyrxtk/uvf/3E2 iBdi+7PamjG+kr2RpBvGXJChcRPK3fZ0zrw4PjlUMpmSzcyi578IUb+k7dSVcxIv KdltDBIPyo9GfvQrgUI3eDB25gsWoRipuZPeShOsuN2CqshOH9kfpW1buLcfHAmu 8vmj1xj75gEYR6wiOJX4Mj+QLga6/M670dkriA/FfvWN6+LnwIGDvxx/sms2FD9c GwhIvcUovJ0bhOlBhq1qgFcB6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5hMcBA T/wBDyNsBdaMc6PY+r4cMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2yFBHT7e2b/9upvuKEvECRrSYthUBtQLkZtj3jelvz0+ujXPukOkT r99/1q7kWSUsGvU7fAdKuMhaUP6dxOI/aKITr75KKOpD9eaqSPgxlIo+hkt9aG5M JfSmg1eidTslnnz1aAyEBDRq7RdMsNYcnpRoz8aLuDfqpYVkKBLjGH6Azx8KsD3W IgHeI0DLkNVntHgiUN0mp54pJy0Uyx5tRIZ5DiagFBr6WqP4oH4pmEJeliP3pciz 4W/qozQGbY7RUHaH7DA++qi87XY5g3xBPuPR1jBVAKT3JCiPIKVNeajGHZfCRuH6 mp55x+fiPG/E/THXuQkaSTNXKwLG6uLL -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:09 2025 by rpki-client