$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: YbeoSu9PiU+d2mK7fExQ8ySpvPVa8KEBI6gHM5McqGQ= Subject key identifier: B5:06:F0:B1:9C:85:34:EF:AD:E1:D1:F5:46:EE:05:E9:B0:48:57:EC Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01F6 Signing time: Wed 05 Nov 2025 02:45:06 +0000 Manifest this update: Wed 05 Nov 2025 02:45:06 +0000 Manifest next update: Wed 12 Nov 2025 02:45:06 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: 6Wiy0ejai/NPTWcOk1rkxy3sJ1HqstiLIdNz4AWkQr0=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Nov 5 02:45:06 2025 GMT Not After : Nov 12 02:45:06 2025 GMT Subject: CN=690aba32-0d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:51:86:7e:b0:0e:69:86:28:13:8b:21:ea: 83:9e:ac:8e:e7:dc:b2:28:99:40:95:1f:08:1e:ec: 02:47:09:cb:32:6b:68:c3:e7:34:c4:6d:c1:02:73: 4c:05:b3:2b:41:c7:1e:ec:c3:dc:d8:84:c1:63:5a: 27:3d:88:80:38:5f:12:72:08:a6:ec:0d:19:42:26: d7:90:70:10:8f:2f:d2:88:da:ed:0e:98:6b:30:7b: 31:84:a4:96:7e:10:58:e9:d5:aa:cc:c8:df:9a:6c: d4:dc:fd:98:9e:d4:d8:03:2b:2b:64:34:62:62:16: 98:93:4d:e3:38:5f:17:7d:ba:d0:8e:23:57:4d:94: 2b:14:56:0e:70:57:4d:93:c0:1f:eb:f7:02:10:49: 63:d3:30:3d:1b:cd:8d:cd:a2:64:d9:6e:0d:f0:92: 23:cc:e5:80:54:54:95:d4:a3:87:f1:c1:d5:85:3e: 5e:35:a4:17:31:fe:a1:09:18:cb:09:24:3b:c3:89: b9:66:b8:67:be:1b:6c:24:6c:96:6b:2a:65:33:a0: 43:01:2a:aa:8b:9f:1c:52:7e:72:9b:23:7b:79:ea: e3:29:be:8f:39:42:81:62:35:a8:76:d8:8a:75:6e: 34:2f:52:4f:3b:7c:c6:15:62:bd:58:53:57:2f:c3: 4f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:F0:B1:9C:85:34:EF:AD:E1:D1:F5:46:EE:05:E9:B0:48:57:EC X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:c0:16:af:55:98:39:a9:ed:0e:45:4a:8f:92:ac:3c:31: a6:97:fd:8b:8c:87:64:bd:2f:0d:70:78:e7:50:b0:0b:7f:60: a5:bd:b0:eb:2a:03:a0:cf:0f:21:8d:ea:64:7c:e1:b2:68:04: b0:bf:ed:cc:60:1f:68:cc:35:a5:e3:06:6e:ec:29:0c:70:09: ad:4d:3a:e5:47:7d:db:ce:d8:e1:c6:87:7d:41:cb:e1:5f:dd: 97:0c:98:60:fc:f2:72:9b:a6:d6:a4:98:4a:19:5f:79:58:78: a8:f1:9d:9c:e9:cb:fd:26:16:44:b3:a6:3b:2b:a1:7f:c2:ef: ed:ba:9f:ad:34:f3:55:a5:f0:cd:20:36:b2:73:33:11:39:c7: ee:81:51:94:05:f6:97:62:66:90:a6:6f:6f:d6:fd:51:34:c2: f3:cd:8a:a9:09:af:ce:a5:25:fc:7c:6a:bf:fb:89:60:40:5d: 51:c9:c8:94:2f:b3:d2:fe:c0:53:2b:9b:6b:3b:a5:63:cf:0c: 51:bf:65:ae:fe:3a:b4:4f:f3:cc:76:a9:a3:2e:d3:6f:fd:10: 12:f1:a5:22:fa:87:69:bf:0e:84:9b:ed:b5:0b:1f:08:21:d7: 9d:7e:8f:04:b5:ea:aa:0f:93:a3:0e:37:37:91:0e:02:bc:29: c9:2f:9d:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUxMTA1MDI0NTA2WhcNMjUxMTEyMDI0NTA2WjAYMRYwFAYD VQQDEw02OTBhYmEzMi0wZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JJRhn6wDmmGKBOLIeqDnqyO59yyKJlAlR8IHuwCRwnLMmtow+c0xG3BAnNM BbMrQcce7MPc2ITBY1onPYiAOF8Scgim7A0ZQibXkHAQjy/SiNrtDphrMHsxhKSW fhBY6dWqzMjfmmzU3P2YntTYAysrZDRiYhaYk03jOF8XfbrQjiNXTZQrFFYOcFdN k8Af6/cCEElj0zA9G82NzaJk2W4N8JIjzOWAVFSV1KOH8cHVhT5eNaQXMf6hCRjL CSQ7w4m5ZrhnvhtsJGyWayplM6BDASqqi58cUn5ymyN7eerjKb6POUKBYjWodtiK dW40L1JPO3zGFWK9WFNXL8NPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUG8LGc hTTvreHR9UbuBemwSFfsMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbo8AWr1WYOantDkVKj5KsPDGml/2LjIdkvS8NcHjnULALf2ClvbDr KgOgzw8hjepkfOGyaASwv+3MYB9ozDWl4wZu7CkMcAmtTTrlR33bztjhxod9Qcvh X92XDJhg/PJym6bWpJhKGV95WHio8Z2c6cv9JhZEs6Y7K6F/wu/tup+tNPNVpfDN IDayczMROcfugVGUBfaXYmaQpm9v1v1RNMLzzYqpCa/OpSX8fGq/+4lgQF1RyciU L7PS/sBTK5trO6VjzwxRv2Wu/jq0T/PMdqmjLtNv/RAS8aUi+odpvw6Em+21Cx8I Idedfo8EteqqD5OjDjc3kQ4CvCnJL52o -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:08 2025 by rpki-client