$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json) Hash identifier: VoJnpsBpi6709nyvh75udqk/r2cP4eD78eOHmx4r7cA= Subject key identifier: EB:1C:03:5D:32:EC:A8:40:51:0F:C6:9F:D7:4A:1A:23:1D:0C:25:02 Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft Manifest number: 08A4 Signing time: Sun 02 Nov 2025 20:27:56 +0000 Manifest this update: Sun 02 Nov 2025 20:27:56 +0000 Manifest next update: Sun 09 Nov 2025 20:27:56 +0000 Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: sLtCZXLNTma6zQFKgRxQ3e/hzV6V4TxYK/241TDLKUs=) 2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: +DtZkxjJJ+EZoGvTSPZPjG2CpgddUnM6RS0QhmWQQPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Validity Not Before: Nov 2 20:27:56 2025 GMT Not After : Nov 9 20:27:56 2025 GMT Subject: CN=6907becc-e787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:fc:fb:df:a6:9b:19:f3:9c:9a:0d:9e:b8: bb:58:c1:cb:17:ea:88:74:64:35:93:c6:a6:3a:8b: d3:dd:42:e8:53:5c:6c:09:b9:06:03:1c:5a:90:0f: 6f:88:ee:9e:b8:58:48:0e:ec:bf:f0:06:f4:c3:de: be:a9:83:0c:82:bd:77:b7:ad:96:48:4b:ee:19:2a: ca:40:f6:40:a8:1e:99:45:85:de:c6:21:52:75:2f: 4d:e9:21:0e:25:91:85:8a:2b:18:f0:1c:d3:1e:9e: 80:a3:3b:04:c7:ce:49:a1:18:7a:f8:c0:50:76:0d: d8:4d:37:7e:e2:12:61:97:f8:0e:6d:5c:f0:c7:65: 1c:59:8f:38:ae:8a:7d:c9:3f:41:b4:84:23:ab:58: 26:e8:d7:ad:1f:da:59:30:b9:5a:6a:55:75:6b:4a: f6:89:57:37:f0:f9:55:fb:32:21:9f:6c:e5:d3:d2: ba:0c:ca:cc:1f:00:5d:69:0d:90:a3:a3:a2:ff:40: 09:65:42:ae:a0:d4:c7:32:6b:c7:3d:c7:04:aa:94: ab:97:36:78:71:57:5b:46:ae:ba:29:cc:ee:3d:d0: da:d7:6c:02:73:23:cc:67:4e:af:01:d2:1d:f3:b3: 3d:42:84:62:38:be:f9:17:7f:a3:52:fd:0a:66:ed: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1C:03:5D:32:EC:A8:40:51:0F:C6:9F:D7:4A:1A:23:1D:0C:25:02 X509v3 Authority Key Identifier: keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d3:a2:9a:c7:06:74:c9:8e:ff:ea:61:5d:bb:4f:11:fc:02: 0e:b4:30:d4:ff:32:da:65:12:f4:aa:e5:90:59:89:77:cb:12: 0f:7c:2d:49:5c:2b:9b:ef:c3:54:1c:ba:20:5b:31:37:69:bc: 2b:82:76:be:c5:8d:3f:c1:41:38:87:e7:b1:a4:e8:a2:1f:61: 60:84:0a:e5:cf:5a:a9:89:4c:e0:78:90:6e:27:e4:cf:51:9b: 0a:46:2d:1a:d9:8c:5b:b8:b7:53:bc:a6:44:40:76:f5:09:d4: 6a:01:1b:d5:2d:ec:ae:aa:fa:b0:a7:eb:fd:10:7a:29:ec:2f: 2e:0c:c2:43:fc:1a:a8:35:01:b5:a4:11:a4:b0:ee:a7:2a:09: 7c:ac:81:88:20:b2:ae:3b:c4:bb:17:50:e4:cc:4b:ff:e3:81: b5:32:c5:53:16:4f:6d:b1:f0:02:5f:08:cc:69:46:d4:d7:14: ac:e8:ae:6e:e3:c5:2a:e7:39:1b:4b:db:6b:77:9f:b1:76:0c: 84:b9:b6:93:01:ca:63:cd:cb:6d:d7:cf:bd:d6:64:82:e0:84: ca:37:af:2e:a2:f5:42:78:5f:e1:d6:ee:fe:1d:12:a0:1d:7a: 47:cf:00:9e:a9:76:0a:41:ec:55:ae:6b:0f:e6:bc:33:33:d5: b4:a7:b2:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5 NjZFRkM4QzcwHhcNMjUxMTAyMjAyNzU2WhcNMjUxMTA5MjAyNzU2WjAYMRYwFAYD VQQDEw02OTA3YmVjYy1lNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HX8+9+mmxnznJoNnri7WMHLF+qIdGQ1k8amOovT3ULoU1xsCbkGAxxakA9v iO6euFhIDuy/8Ab0w96+qYMMgr13t62WSEvuGSrKQPZAqB6ZRYXexiFSdS9N6SEO JZGFiisY8BzTHp6AozsEx85JoRh6+MBQdg3YTTd+4hJhl/gObVzwx2UcWY84rop9 yT9BtIQjq1gm6NetH9pZMLlaalV1a0r2iVc38PlV+zIhn2zl09K6DMrMHwBdaQ2Q o6Oi/0AJZUKuoNTHMmvHPccEqpSrlzZ4cVdbRq66KczuPdDa12wCcyPMZ06vAdId 87M9QoRiOL75F3+jUv0KZu0G9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOscA10y 7KhAUQ/Gn9dKGiMdDCUCMB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5 NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu06KaxwZ0yY7/6mFdu08R/AIOtDDU/zLaZRL0quWQWYl3yxIPfC1J XCub78NUHLogWzE3abwrgna+xY0/wUE4h+expOiiH2FghArlz1qpiUzgeJBuJ+TP UZsKRi0a2YxbuLdTvKZEQHb1CdRqARvVLeyuqvqwp+v9EHop7C8uDMJD/BqoNQG1 pBGksO6nKgl8rIGIILKuO8S7F1DkzEv/44G1MsVTFk9tsfACXwjMaUbU1xSs6K5u 48Uq5zkbS9trd5+xdgyEubaTAcpjzctt18+91mSC4ITKN68uovVCeF/h1u7+HRKg HXpHzwCeqXYKQexVrmsP5rwzM9W0p7K9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:47 2025 by rpki-client