$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json) Hash identifier: 7IV/O5Kr8LhHgZOnc/QZS/ivuq2MVTJVivljawZ/Gwc= Subject key identifier: 6C:CD:5A:6A:00:60:51:2A:8B:8E:FF:36:05:25:5F:AE:E1:A7:EE:0C Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft Manifest number: 07 Signing time: Mon 03 Nov 2025 08:05:01 +0000 Manifest this update: Mon 03 Nov 2025 08:05:01 +0000 Manifest next update: Mon 10 Nov 2025 08:05:01 +0000 Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: vzAbbwGiL72IcjlFmEewsLyxhHCguCRQVW/eZZGdy20=) 2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: NC1EW44txePxXOncUvp1UoY7Puvst1exL43E60v3h6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Validity Not Before: Nov 3 08:05:01 2025 GMT Not After : Nov 10 08:05:01 2025 GMT Subject: CN=6908622d-8fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:24:d6:c9:d1:a7:b9:f6:53:76:1f:ec:b6:16: 13:28:84:1b:c5:18:50:a3:2d:19:b9:2f:cd:50:ef: 9c:52:ed:43:ac:36:bb:2f:92:44:99:38:0a:55:2d: d5:b7:85:5f:58:c9:41:15:0c:ed:2a:47:01:55:6c: de:ff:1e:c5:63:c0:13:b3:80:93:77:27:d9:a2:66: e0:39:28:3b:81:9b:6e:67:61:b8:ab:c6:93:cd:41: fa:de:ee:fa:0d:1d:61:42:b7:9e:17:f7:55:92:3e: 77:fa:48:5b:93:92:3b:d0:28:5a:4a:0d:2f:53:4d: c3:18:05:2d:dd:e0:2a:5c:5a:b6:11:86:e7:a6:df: dc:a4:04:97:08:2d:0e:ab:e7:26:43:e5:ce:8c:f9: 72:be:af:ab:d3:cb:64:58:64:3d:d1:0e:06:55:bb: 3a:59:f4:48:6c:6d:4b:bf:a8:33:62:82:ef:18:dd: b4:0b:3a:7a:5f:a0:b5:de:bb:b0:7f:9e:ee:22:da: ad:04:19:a9:ba:0b:82:ac:30:6c:3b:25:10:3c:12: f1:71:12:11:c2:45:8e:9d:f8:da:72:78:20:b8:ef: 3a:c0:4d:b9:63:f3:d0:83:05:e6:28:1c:0f:9b:28: 8f:71:9d:24:19:d7:90:c8:49:07:d0:e4:a9:dc:17: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CD:5A:6A:00:60:51:2A:8B:8E:FF:36:05:25:5F:AE:E1:A7:EE:0C X509v3 Authority Key Identifier: keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6e:8f:90:63:76:5f:4f:8e:31:c9:85:75:42:74:cc:96:79: 5f:06:6d:99:02:97:82:2e:6b:02:e4:14:ad:d1:37:f6:7f:b6: cd:7e:9b:2a:92:b9:ce:ea:74:9b:81:2f:74:7f:2a:a4:d1:71: d6:8c:6b:3f:e0:b9:6c:c3:8a:ca:81:44:b2:26:09:a2:5b:6f: 50:c3:fe:d0:e1:7d:8a:2a:56:fe:25:60:f9:60:5e:ba:a7:17: 85:f4:a1:2d:8f:cd:a1:17:a6:46:26:a8:f9:a3:67:09:9e:f0: 0c:5c:18:b6:8a:a6:85:48:ec:6a:80:dd:1f:2a:1d:88:8f:29: 84:5b:1b:e1:68:27:a6:3e:fe:8d:b5:32:c8:4d:e4:c1:54:b4: 45:77:10:1c:d0:50:99:0c:be:2a:23:75:fd:85:ad:8b:bb:de: 47:a6:71:d1:e6:26:c7:ee:31:f7:b0:24:59:a9:8f:25:dd:d6: b0:53:44:6b:86:46:63:24:ab:e4:1c:67:df:1f:d6:51:28:3a: 4c:eb:af:b4:71:15:40:3f:7a:48:0d:3a:16:b3:02:08:81:bb: 79:f6:3e:dd:71:fb:cb:ec:3d:4d:0e:a4:71:e1:3a:ed:4d:d3: 7c:9d:2e:d1:02:9b:20:a4:2e:4b:02:95:20:78:6c:64:3c:72: 94:81:9f:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoRkM0QUY4NkU3MDA5OURBMEJBQUMyRUREQzc3RDFCRUY0 Qzc1QTg5NTAeFw0yNTExMDMwODA1MDFaFw0yNTExMTAwODA1MDFaMBgxFjAUBgNV BAMTDTY5MDg2MjJkLThmYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTJNbJ0ae59lN2H+y2FhMohBvFGFCjLRm5L81Q75xS7UOsNrsvkkSZOApVLdW3 hV9YyUEVDO0qRwFVbN7/HsVjwBOzgJN3J9miZuA5KDuBm25nYbirxpPNQfre7voN HWFCt54X91WSPnf6SFuTkjvQKFpKDS9TTcMYBS3d4CpcWrYRhuem39ykBJcILQ6r 5yZD5c6M+XK+r6vTy2RYZD3RDgZVuzpZ9EhsbUu/qDNigu8Y3bQLOnpfoLXeu7B/ nu4i2q0EGam6C4KsMGw7JRA8EvFxEhHCRY6d+NpyeCC47zrATblj89CDBeYoHA+b KI9xnSQZ15DISQfQ5KncF+q1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbM1aagBg USqLjv82BSVfruGn7gwwHwYDVR0jBBgwFoAU/Er4bnAJnaC6rC7dx30b70x1qJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzUzNzg0NUEwQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFDNnJDN2R4MzBiNzB4MXFK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0VyNGJuQUpuYUM2ckM3ZHgzMGI3MHgxcUpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzUzNzg0NUEwQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFD NnJDN2R4MzBiNzB4MXFKVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJuj5Bjdl9PjjHJhXVCdMyWeV8GbZkCl4IuawLkFK3RN/Z/ts1+myqS uc7qdJuBL3R/KqTRcdaMaz/guWzDisqBRLImCaJbb1DD/tDhfYoqVv4lYPlgXrqn F4X0oS2PzaEXpkYmqPmjZwme8AxcGLaKpoVI7GqA3R8qHYiPKYRbG+FoJ6Y+/o21 MshN5MFUtEV3EBzQUJkMviojdf2FrYu73kemcdHmJsfuMfewJFmpjyXd1rBTRGuG RmMkq+QcZ98f1lEoOkzrr7RxFUA/ekgNOhazAgiBu3n2Pt1x+8vsPU0OpHHhOu1N 03ydLtECmyCkLksClSB4bGQ8cpSBn6c= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:43 2025 by rpki-client