$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json) Hash identifier: xk9QCZl0nXFNzjbK9FtVvpY6H9YrX0WjOQUT/SP0DA8= Subject key identifier: 9B:0B:1C:0D:FD:A4:2D:4A:85:D6:5F:7D:98:95:6A:D3:15:CF:60:E4 Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft Manifest number: 0687 Signing time: Sun 02 Nov 2025 22:26:14 +0000 Manifest this update: Sun 02 Nov 2025 22:26:14 +0000 Manifest next update: Sun 09 Nov 2025 22:26:14 +0000 Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: CpMjGtRRShm5xOYNgornFfNFnJDXIPn5HqCtBm9WXgY=) 2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: lK7bGVCygyPQRcWZjT3XlPriu2CyfUJlUxTwi2dzB50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Validity Not Before: Nov 2 22:26:14 2025 GMT Not After : Nov 9 22:26:14 2025 GMT Subject: CN=6907da86-7392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:cc:e1:37:2f:4d:4c:07:a2:c6:28:3f:a5: 9b:98:84:38:48:a5:e3:84:67:49:74:a8:06:23:2c: 4e:da:82:57:f9:28:e2:07:c5:cb:bf:aa:ee:1e:57: 9e:76:a5:46:c8:85:fc:74:98:a4:10:12:a8:fa:2d: c9:c7:f2:c6:c7:70:7f:d3:ee:a0:ad:6a:e5:87:6b: c2:f9:35:95:85:e5:9a:9f:f7:46:b2:6b:1e:2f:74: 1e:81:fe:06:a6:f4:0b:76:9e:f9:13:4a:47:ec:0b: 8a:48:3b:39:c1:92:92:b0:a3:74:4f:b7:f0:86:81: c2:6e:75:08:50:02:1f:ae:bf:01:5a:62:e6:9c:af: 42:d9:76:0a:03:6b:55:46:c6:dc:7c:2a:17:e8:20: 4d:81:ef:2f:df:c2:6b:9e:01:ea:8e:75:a3:b5:f6: f9:a5:44:d5:18:4b:f7:fb:9e:bd:ac:f1:a9:d8:d1: f3:e3:83:2e:2b:69:fe:cb:50:26:a0:a1:7d:b9:b3: dc:e1:df:39:05:cf:ea:f0:ca:e4:46:2d:31:a7:88: 24:4b:4c:ff:87:54:15:a2:49:d8:d8:5e:f8:ca:6d: b5:61:ee:99:4d:bd:b7:a3:38:0b:7f:7a:3c:c9:3c: 3d:a4:11:5b:92:96:6e:f6:3f:b3:2c:4d:7e:1f:a5: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:1C:0D:FD:A4:2D:4A:85:D6:5F:7D:98:95:6A:D3:15:CF:60:E4 X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:01:fd:c9:f2:8a:ec:0b:bb:6e:e9:f0:3a:99:48:a4:9b:c8: 49:ec:50:9b:51:0f:b1:54:70:9b:fe:66:89:74:4f:c1:6b:d8: 13:85:d0:92:61:10:a3:e8:0c:2e:d3:4e:54:60:06:34:35:5c: bb:3c:a7:b5:db:98:c9:cf:38:6e:09:af:65:ce:56:49:69:f5: ce:3e:cc:99:74:ef:7d:d1:f0:6e:8f:c9:e6:49:59:f2:f2:eb: 36:e3:9e:ac:9a:e4:68:03:35:59:4f:ff:58:c0:9f:88:3b:b0: 03:82:c1:37:30:f3:45:b3:28:bc:4c:25:05:b3:c6:18:51:0f: fc:33:52:3f:54:f9:07:55:52:3b:2c:ec:b1:ad:1e:07:5b:97: 00:2f:b4:5b:dd:a0:e9:44:a3:33:ed:e0:b0:6b:cb:ef:ec:48: 7a:12:73:17:3a:da:24:56:ae:23:b2:c9:22:1d:14:fa:36:7f: a6:ab:6e:58:6c:b2:5a:ad:4b:db:e0:5d:33:d4:36:bc:44:e5: 36:a7:77:13:16:c2:e2:51:bd:db:f1:9a:34:85:3b:e3:e6:79: 70:bc:83:87:65:cd:13:74:ad:44:31:17:89:db:11:72:63:04: 1d:57:d7:5b:48:f2:d7:e4:27:02:3d:26:4d:31:02:71:a1:ce: c5:dd:98:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjUxMTAyMjIyNjE0WhcNMjUxMTA5MjIyNjE0WjAYMRYwFAYD VQQDEw02OTA3ZGE4Ni03MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cLM4TcvTUwHosYoP6WbmIQ4SKXjhGdJdKgGIyxO2oJX+SjiB8XLv6ruHlee dqVGyIX8dJikEBKo+i3Jx/LGx3B/0+6grWrlh2vC+TWVheWan/dGsmseL3Qegf4G pvQLdp75E0pH7AuKSDs5wZKSsKN0T7fwhoHCbnUIUAIfrr8BWmLmnK9C2XYKA2tV RsbcfCoX6CBNge8v38JrngHqjnWjtfb5pUTVGEv3+569rPGp2NHz44MuK2n+y1Am oKF9ubPc4d85Bc/q8MrkRi0xp4gkS0z/h1QVoknY2F74ym21Ye6ZTb23ozgLf3o8 yTw9pBFbkpZu9j+zLE1+H6WmOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsLHA39 pC1KhdZffZiVatMVz2DkMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACAf3J8orsC7tu6fA6mUikm8hJ7FCbUQ+xVHCb/maJdE/Ba9gThdCS YRCj6Awu005UYAY0NVy7PKe125jJzzhuCa9lzlZJafXOPsyZdO990fBuj8nmSVny 8us2456smuRoAzVZT/9YwJ+IO7ADgsE3MPNFsyi8TCUFs8YYUQ/8M1I/VPkHVVI7 LOyxrR4HW5cAL7Rb3aDpRKMz7eCwa8vv7Eh6EnMXOtokVq4jsskiHRT6Nn+mq25Y bLJarUvb4F0z1Da8ROU2p3cTFsLiUb3b8Zo0hTvj5nlwvIOHZc0TdK1EMReJ2xFy YwQdV9dbSPLX5CcCPSZNMQJxoc7F3Zhr -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:10 2025 by rpki-client