$ rpki-client -vvf rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft File: 2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft (raw, json) Hash identifier: F6lGCivoB/gfsUp4KPxK56Z8SYwnKsknjfvaiR3QOoI= Subject key identifier: 85:87:ED:CF:15:12:45:26:69:05:BA:5C:CF:B7:19:EF:A0:E7:05:84 Authority key identifier: DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71 Certificate issuer: /CN=A9150FA6/serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft Manifest number: 07 Signing time: Mon 03 Nov 2025 08:04:13 +0000 Manifest this update: Mon 03 Nov 2025 08:04:12 +0000 Manifest next update: Mon 10 Nov 2025 08:04:12 +0000 Files and hashes: 1: 2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl (hash: oPjIbw7+KRwlsshf8w516rCv9U2sb2jDygXttTgjZcM=) 2: 154E8BACB58F11F0B4ABC646C4F9AE02.roa (hash: K7ApF1q0nE+oNoll3XB7aSCUFGQ0tkcUujT1HA2Nsxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150FA6, serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471 Validity Not Before: Nov 3 08:04:12 2025 GMT Not After : Nov 10 08:04:12 2025 GMT Subject: CN=690861fc-9692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:df:1c:14:ae:b4:6d:06:ef:78:89:c1:ce: 4a:9d:b0:53:5b:56:7c:37:0d:ea:c9:1f:7f:6b:1d: a1:3a:8f:a8:23:8c:12:af:46:d5:33:cb:c9:e7:b2: 56:ea:27:e2:1f:cf:1c:20:6f:29:39:aa:4c:8b:d3: ee:07:52:26:6f:bf:d6:49:08:18:c6:d5:b9:7f:76: 1e:91:93:cd:b6:8a:c3:9b:0b:43:cc:3a:b9:c5:7f: 17:5a:a3:78:cb:2c:96:ba:c3:6b:86:09:c1:92:e7: 92:b9:93:69:b9:34:ff:e0:3f:b9:5a:c7:80:1f:7b: 7b:bc:04:bd:5d:61:19:88:a3:ba:d0:a6:93:7a:05: 1c:65:1a:2f:63:fa:c3:e3:49:32:ff:ca:f4:79:7c: e6:50:0d:16:39:92:56:52:96:4e:98:0b:44:79:d3: f7:97:5a:e5:9f:90:77:52:dd:a9:58:5d:e7:da:c1: c9:30:04:8a:2f:60:7b:b6:63:99:8c:d4:60:10:95: a1:8b:37:44:b8:43:26:e5:f5:ca:9b:e1:b9:ef:b4: 76:06:d5:84:3b:38:a8:6a:ec:36:10:12:6e:48:08: 4d:cb:da:e3:18:23:8a:99:14:15:71:14:35:7e:61: cf:d4:e8:b1:1c:02:31:cf:4f:ac:c3:cc:43:da:d0: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:ED:CF:15:12:45:26:69:05:BA:5C:CF:B7:19:EF:A0:E7:05:84 X509v3 Authority Key Identifier: keyid:DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c3:03:e7:51:40:d9:2b:33:c6:d0:81:8b:ca:86:69:77:89: 1d:76:fc:96:4f:25:2e:83:5d:68:e4:fe:5c:e5:fe:30:14:11: 00:b2:c3:c7:b2:bc:99:a6:a7:d2:81:d0:1b:70:d2:cc:6f:68: e8:8f:d2:1c:3f:9d:1e:7a:a4:9a:3f:c7:03:06:59:be:a3:5b: 36:e3:c5:a6:0b:77:35:6e:d1:ab:68:4c:50:8f:1a:06:c2:ec: cb:9e:98:02:5e:a2:d2:a4:bd:a8:b8:13:5b:dc:34:ee:62:22: 1e:4e:1c:e8:18:fd:d5:f3:a5:1c:bd:ba:d1:bd:ec:db:e6:f9: d1:13:77:b4:a6:b8:e5:fa:77:89:f4:e6:18:a2:8d:5b:40:33: 1c:2b:7a:17:16:aa:8e:35:f1:88:81:b5:56:84:65:d8:b3:cf: 47:14:db:3a:93:33:54:8e:2b:f8:c8:aa:02:1a:d2:a6:1b:b1: 09:e4:a7:d8:b6:af:3c:8d:5d:c9:a0:a1:fd:de:32:83:f2:9b: 74:70:cd:5e:e2:dc:1b:dc:cf:99:20:2d:a2:37:54:7f:87:c3: c9:e3:db:72:6e:c3:5e:88:c6:17:2d:be:b5:f2:a4:70:65:f0: 83:7c:23:26:42:68:97:93:96:b5:64:44:2d:f8:30:07:a7:ba: 72:85:79:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MEZBNjExMC8GA1UEBRMoREE2MEU4MDI2NjU3MDM3OTM4MEE2RjdBM0VFMjNCOUQw RTU0NjQ3MTAeFw0yNTExMDMwODA0MTJaFw0yNTExMTAwODA0MTJaMBgxFjAUBgNV BAMTDTY5MDg2MWZjLTk2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkqd8cFK60bQbveInBzkqdsFNbVnw3DerJH39rHaE6j6gjjBKvRtUzy8nnslbq J+Ifzxwgbyk5qkyL0+4HUiZvv9ZJCBjG1bl/dh6Rk822isObC0PMOrnFfxdao3jL LJa6w2uGCcGS55K5k2m5NP/gP7lax4Afe3u8BL1dYRmIo7rQppN6BRxlGi9j+sPj STL/yvR5fOZQDRY5klZSlk6YC0R50/eXWuWfkHdS3alYXefawckwBIovYHu2Y5mM 1GAQlaGLN0S4Qybl9cqb4bnvtHYG1YQ7OKhq7DYQEm5ICE3L2uMYI4qZFBVxFDV+ Yc/U6LEcAjHPT6zDzEPa0HqzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhYftzxUS RSZpBbpcz7cZ76DnBYQwHwYDVR0jBBgwFoAU2mDoAmZXA3k4Cm96PuI7nQ5UZHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRkE2L0FCRjNEMDFDQjNG QTExRjBBMEFDNDQ3QUM0RjlBRTAyLzJtRG9BbVpYQTNrNENtOTZQdUk3blE1VVpI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm1Eb0FtWlhBM2s0Q205NlB1STduUTVVWkhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw RkE2L0FCRjNEMDFDQjNGQTExRjBBMEFDNDQ3QUM0RjlBRTAyLzJtRG9BbVpYQTNr NENtOTZQdUk3blE1VVpIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPDA+dRQNkrM8bQgYvKhml3iR12/JZPJS6DXWjk/lzl/jAUEQCyw8ey vJmmp9KB0Btw0sxvaOiP0hw/nR56pJo/xwMGWb6jWzbjxaYLdzVu0atoTFCPGgbC 7MuemAJeotKkvai4E1vcNO5iIh5OHOgY/dXzpRy9utG97Nvm+dETd7SmuOX6d4n0 5hiijVtAMxwrehcWqo418YiBtVaEZdizz0cU2zqTM1SOK/jIqgIa0qYbsQnkp9i2 rzyNXcmgof3eMoPym3RwzV7i3Bvcz5kgLaI3VH+Hw8nj23Juw16IxhctvrXypHBl 8IN8IyZCaJeTlrVkRC34MAenunKFedg= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:54 2025 by rpki-client