$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: T2SaF/CE+FKYUwNQSEaMe5KTotxwMoAs2X16k0iKTkA= Subject key identifier: 18:F4:7C:CF:FA:BF:EC:04:44:19:29:0E:7D:78:A6:63:57:A3:88:26 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 0835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 082A Signing time: Sun 02 Nov 2025 20:49:47 +0000 Manifest this update: Sun 02 Nov 2025 20:49:47 +0000 Manifest next update: Sun 09 Nov 2025 20:49:47 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: 6aNPYjAfn8nr8PoChF9SAhoopFU6NWLTr7P8WH09YJo=) 2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Nov 2 20:49:47 2025 GMT Not After : Nov 9 20:49:47 2025 GMT Subject: CN=6907c3eb-97ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:d3:4d:87:ec:75:e7:00:c5:2e:49:c2:e2: e9:98:0c:76:25:8c:5a:aa:96:4f:c7:f7:80:f6:c9: 29:ac:64:78:57:fa:37:dc:95:be:85:d9:7d:49:61: 07:6e:26:7f:3e:5e:64:b3:da:8c:fa:20:94:91:d0: d5:d9:bf:9d:ec:88:1b:d8:9f:ec:cc:45:e5:d5:c6: 7e:42:ae:92:af:af:7b:ba:2e:36:27:4c:86:14:31: 0d:37:1f:f0:7c:9c:10:67:35:86:49:66:80:a4:05: ac:24:33:bc:ec:6c:f2:2d:8d:da:53:c7:7f:27:53: 79:75:19:84:47:83:30:55:c9:21:68:60:cc:17:9b: 13:bc:7b:12:db:f0:fd:96:47:21:19:3d:ae:b9:df: 56:e4:99:60:7f:3d:51:b4:18:fa:af:84:e3:c4:7d: c9:5b:60:30:6d:df:ce:8e:87:4a:08:50:3e:c9:2c: 38:c3:91:31:b0:be:af:bc:fd:4a:e5:16:cf:84:34: 53:6f:bf:ae:75:15:3e:8e:f1:70:8f:a3:0f:c1:de: 78:a1:cb:22:5b:f6:1e:51:fe:f0:9f:70:1a:30:c4: b1:03:9d:b5:13:ea:64:d7:b3:b0:81:af:87:87:f5: 38:55:00:2a:06:67:03:e8:db:e0:e7:e6:c5:fd:50: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F4:7C:CF:FA:BF:EC:04:44:19:29:0E:7D:78:A6:63:57:A3:88:26 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5c:cd:6e:ff:49:31:8b:1d:2e:89:59:86:95:4d:0f:50:b0: 77:bd:1b:af:db:d8:91:0b:d8:50:ae:47:3a:90:ee:50:25:6b: d4:e0:e4:2d:38:cd:ce:7a:6b:47:5a:06:94:66:a6:e9:ac:5f: b4:c7:80:ea:c6:1e:0c:55:8f:f9:30:f6:6b:df:42:32:4b:a0: 50:8b:7c:72:27:0a:e4:3a:e8:88:10:16:cf:58:9a:f9:c2:e8: d8:16:2d:ca:45:01:31:a0:72:f8:ab:f7:88:65:8c:9e:bc:ec: 46:9c:1c:24:6d:08:d3:b5:bd:7a:9c:3a:77:4c:8a:a5:89:60: b4:b5:8d:45:39:85:fa:c6:e2:ae:9e:55:84:b4:c3:3c:94:36: fe:89:bd:04:1b:64:c8:f9:f0:c1:d0:a0:f6:86:cf:e1:22:33: 20:c7:c7:b6:7d:1b:4e:67:48:ae:77:fc:b6:83:0f:b2:31:f5: 23:c8:d7:29:1b:0e:a3:01:5a:b9:a7:00:c6:10:6b:fd:72:3f: e5:a2:17:00:2a:d8:4d:c4:f5:88:09:c5:ae:2d:78:cc:ca:66: 4f:ae:1e:38:9e:f6:af:45:18:b1:77:c2:0c:aa:81:89:fe:2d: af:47:ae:2f:b8:e3:29:11:57:93:85:78:e4:8e:f4:a8:a4:90: 0b:58:97:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUxMTAyMjA0OTQ3WhcNMjUxMTA5MjA0OTQ3WjAYMRYwFAYD VQQDEw02OTA3YzNlYi05N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztDTTYfsdecAxS5JwuLpmAx2JYxaqpZPx/eA9skprGR4V/o33JW+hdl9SWEH biZ/Pl5ks9qM+iCUkdDV2b+d7Igb2J/szEXl1cZ+Qq6Sr697ui42J0yGFDENNx/w fJwQZzWGSWaApAWsJDO87GzyLY3aU8d/J1N5dRmER4MwVckhaGDMF5sTvHsS2/D9 lkchGT2uud9W5Jlgfz1RtBj6r4TjxH3JW2Awbd/OjodKCFA+ySw4w5ExsL6vvP1K 5RbPhDRTb7+udRU+jvFwj6MPwd54ocsiW/YeUf7wn3AaMMSxA521E+pk17Owga+H h/U4VQAqBmcD6Nvg5+bF/VBIQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj0fM/6 v+wERBkpDn14pmNXo4gmMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiXM1u/0kxix0uiVmGlU0PULB3vRuv29iRC9hQrkc6kO5QJWvU4OQt OM3OemtHWgaUZqbprF+0x4Dqxh4MVY/5MPZr30IyS6BQi3xyJwrkOuiIEBbPWJr5 wujYFi3KRQExoHL4q/eIZYyevOxGnBwkbQjTtb16nDp3TIqliWC0tY1FOYX6xuKu nlWEtMM8lDb+ib0EG2TI+fDB0KD2hs/hIjMgx8e2fRtOZ0iud/y2gw+yMfUjyNcp Gw6jAVq5pwDGEGv9cj/lohcAKthNxPWICcWuLXjMymZPrh44nvavRRixd8IMqoGJ /i2vR64vuOMpEVeThXjkjvSopJALWJfW -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:06 2025 by rpki-client