$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: j473u/7Mw+tMs7Ukw1CBBlDpeMbf1382UOCkdpFshME= Subject key identifier: A2:97:FD:84:02:22:4F:06:68:1A:A9:FC:CF:27:99:86:B7:5F:CE:25 Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 0301 Signing time: Wed 05 Nov 2025 01:16:14 +0000 Manifest this update: Wed 05 Nov 2025 01:16:13 +0000 Manifest next update: Wed 12 Nov 2025 01:16:13 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: eZFd0GRzpr01frwxJyjCU6kLKH2lw4ANK+nSbuO0p68=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: t6gPHMURjmA0yTxJeNB9SOwe/egrKymREeoN93WnBuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Nov 5 01:16:13 2025 GMT Not After : Nov 12 01:16:13 2025 GMT Subject: CN=690aa55d-638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:55:21:48:e3:d6:28:c2:ca:01:84:2c:e1: f3:69:b4:25:ea:de:69:8e:86:f2:16:44:71:d8:cd: b1:66:ac:8f:3f:45:ac:93:a1:a2:91:c7:9f:b6:7e: 26:8f:96:c2:78:1f:50:60:33:0c:04:cb:3f:57:4b: c2:c4:e9:48:c6:9c:3e:ba:7c:f4:07:df:22:fd:71: 48:06:61:9b:21:12:74:3c:94:82:bb:7d:7d:35:41: a0:10:98:ee:d7:07:77:ce:4f:bf:5c:ca:c2:bb:6b: 1f:9c:57:97:a7:f2:63:c6:03:ff:5b:ba:8d:92:b0: 22:e2:b5:69:7b:9c:41:40:03:10:b4:af:bb:39:bc: bd:7d:b7:ad:28:42:10:c8:4b:23:f9:e7:0f:82:a1: 2a:2c:cf:a4:55:1d:da:bd:39:9a:84:65:94:94:45: 7e:7c:ae:c4:19:3e:d2:9b:a2:1d:ca:ee:9b:87:b5: 47:06:38:62:87:69:4e:89:27:8c:65:c8:c6:62:c3: 4e:fe:64:03:89:dc:93:93:e7:88:db:74:0c:db:38: e5:39:c1:0a:43:a5:52:3b:d8:d7:41:1e:2e:84:4a: 3f:37:fa:37:d4:7d:06:5e:0c:eb:e1:43:ce:db:16: 96:05:82:27:1c:c4:ab:c6:a2:75:44:5c:2e:6f:66: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:FD:84:02:22:4F:06:68:1A:A9:FC:CF:27:99:86:B7:5F:CE:25 X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f3:0f:21:74:ad:4c:41:6c:59:41:44:59:d1:1c:65:34:81: d7:4c:d7:e2:82:a0:6a:fa:ce:08:1a:a7:d5:0d:41:2e:77:41: 48:fa:bf:c3:29:60:35:44:ad:eb:c8:d9:4e:ce:e1:eb:bc:f0: a2:71:79:4c:23:80:2e:48:d2:12:17:e4:f7:2f:75:9c:1a:99: 59:4e:ce:1d:c4:23:f9:47:65:6d:46:06:48:ec:d9:0d:50:ce: e2:e5:53:1d:cf:04:20:c7:4d:a4:13:73:69:6b:56:66:6e:ce: c6:13:34:8c:74:eb:d2:96:d7:82:ac:bd:c5:2e:5f:7d:15:c2: 56:b5:aa:e3:e5:c1:9e:8b:61:05:f5:ff:73:9e:6f:f0:0d:ad: ee:44:cc:9a:8b:ac:1e:34:3f:be:34:77:3a:95:ec:b6:a3:0d: 19:b1:48:f2:b9:74:49:e7:e3:45:f7:23:6e:2d:84:84:88:38: 7e:74:df:ea:79:39:1b:e9:d8:98:a9:75:67:7e:e1:59:13:9d: 97:66:63:a4:44:2d:7f:36:ed:21:7c:31:3e:db:9e:ad:5a:4b: 75:72:85:2c:57:87:cb:23:50:1c:05:61:2e:3d:fc:61:49:c6: 82:6f:23:43:72:56:19:c2:53:85:f9:89:fe:2f:7f:b2:c4:7e: 38:78:bb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjUxMTA1MDExNjEzWhcNMjUxMTEyMDExNjEzWjAYMRYwFAYD VQQDEw02OTBhYTU1ZC02MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOxVIUjj1ijCygGELOHzabQl6t5pjobyFkRx2M2xZqyPP0Wsk6Gikceftn4m j5bCeB9QYDMMBMs/V0vCxOlIxpw+unz0B98i/XFIBmGbIRJ0PJSCu319NUGgEJju 1wd3zk+/XMrCu2sfnFeXp/JjxgP/W7qNkrAi4rVpe5xBQAMQtK+7Oby9fbetKEIQ yEsj+ecPgqEqLM+kVR3avTmahGWUlEV+fK7EGT7Sm6Idyu6bh7VHBjhih2lOiSeM ZcjGYsNO/mQDidyTk+eI23QM2zjlOcEKQ6VSO9jXQR4uhEo/N/o31H0GXgzr4UPO 2xaWBYInHMSrxqJ1RFwub2b3UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKX/YQC Ik8GaBqp/M8nmYa3X84lMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd8w8hdK1MQWxZQURZ0RxlNIHXTNfigqBq+s4IGqfVDUEud0FI+r/D KWA1RK3ryNlOzuHrvPCicXlMI4AuSNISF+T3L3WcGplZTs4dxCP5R2VtRgZI7NkN UM7i5VMdzwQgx02kE3Npa1Zmbs7GEzSMdOvSlteCrL3FLl99FcJWtarj5cGei2EF 9f9znm/wDa3uRMyai6weND++NHc6ley2ow0ZsUjyuXRJ5+NF9yNuLYSEiDh+dN/q eTkb6diYqXVnfuFZE52XZmOkRC1/Nu0hfDE+256tWkt1coUsV4fLI1AcBWEuPfxh ScaCbyNDclYZwlOF+Yn+L3+yxH44eLvd -----END CERTIFICATE-----Generated at Wed Nov 5 12:25:05 2025 by rpki-client