$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: k+a9NVs2gq3tDUtehBbPZvM6jmkvXh9VjNp78h3DqpQ= Subject key identifier: DE:A8:88:D8:DA:B5:AF:EF:5E:AE:C2:33:12:79:2B:29:A9:3D:A7:2F Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 136C Signing time: Tue 04 Nov 2025 17:05:18 +0000 Manifest this update: Tue 04 Nov 2025 17:05:17 +0000 Manifest next update: Tue 11 Nov 2025 17:05:17 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: lVNCetHYCSDY7+AMGXLjc/fkC+G1bfC3R/OZOUbfZ9A=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4982 (0x1376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Nov 4 17:05:17 2025 GMT Not After : Nov 11 17:05:17 2025 GMT Subject: CN=690a324d-c3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:89:83:e4:13:88:17:f1:1a:5c:24:ed:ce: 5d:d4:d9:be:07:d6:5a:39:57:61:77:9d:59:dd:f2: be:47:3a:05:dc:d8:ea:81:4e:1f:c5:f5:91:80:b4: eb:2e:ad:e4:aa:ad:f2:70:9f:28:9d:e6:78:2c:a8: 56:3b:22:ef:ba:05:e6:30:75:f0:89:ba:b3:12:98: b7:b1:a0:e4:9a:c0:13:ae:4c:5b:ba:25:16:6f:e5: 3f:30:3f:b2:4b:24:f5:c1:2a:d9:e9:9b:1e:ad:d6: 94:c7:b1:b6:e9:32:06:3e:1c:41:08:55:97:14:02: dc:d3:ce:a8:27:38:0f:24:85:56:d6:74:e4:0a:27: 7e:47:89:9b:01:0f:7b:95:ec:fa:cc:85:17:fe:90: 01:4b:17:ae:b4:33:5d:f3:b2:82:c3:90:48:1a:8b: ee:f9:a7:bb:5e:1e:15:6f:af:83:ed:50:10:3d:af: fb:a0:49:7c:73:d8:5f:a7:19:c5:49:a9:dd:ab:27: 65:b9:b0:da:37:55:35:63:ae:ec:28:0f:a9:d1:a5: a6:4e:28:c1:87:40:c4:63:41:39:82:c5:9e:72:7a: 5b:b5:fa:57:26:d7:7d:d8:c4:a7:17:97:59:0c:d0: 1e:06:06:d4:ef:ce:9f:15:07:1b:46:67:57:a9:b8: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A8:88:D8:DA:B5:AF:EF:5E:AE:C2:33:12:79:2B:29:A9:3D:A7:2F X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:dc:bf:12:f6:c1:d9:30:b8:1a:00:07:d2:b4:a8:fa:4c: 82:de:49:2c:4d:f1:e2:4a:ab:4d:36:65:b5:22:d0:6f:60:a5: 42:3c:46:ee:d2:69:a2:ab:7d:65:58:51:ac:f9:3a:57:c2:78: a8:68:67:21:ee:c0:f6:54:a4:c3:4a:83:b2:78:02:37:3c:a5: 49:2e:c4:44:d0:c9:8a:85:cb:3b:7c:27:51:2b:46:36:95:2d: 84:ab:a7:af:83:70:96:85:a3:f4:2f:32:2f:3c:e3:08:7b:66: d2:98:32:9c:ec:42:8a:93:6a:7b:55:5b:8e:ca:fe:d6:ee:aa: e2:38:76:df:a5:99:d3:af:5d:c0:54:11:df:0d:21:d7:6e:ed: ea:a2:18:80:d7:16:68:83:24:67:bc:56:89:41:8c:10:7c:3b: 7d:d3:9c:0b:05:b6:84:41:8a:57:6f:c5:3f:59:93:cc:64:1a: c5:de:c3:b9:c8:67:aa:2b:2e:80:57:6e:43:40:ce:9c:d5:da: 28:a7:4c:ee:93:31:a0:b4:44:52:cd:84:c0:8c:cb:18:7b:f9: 99:18:a4:fd:db:71:8e:78:f5:d2:b9:b8:c2:9a:f8:56:8a:38: 39:6d:33:56:89:ae:15:bf:8c:8f:78:04:f6:45:ec:e2:a2:5d: 19:85:b8:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMTA0MTcwNTE3WhcNMjUxMTExMTcwNTE3WjAYMRYwFAYD VQQDEw02OTBhMzI0ZC1jM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQyJg+QTiBfxGlwk7c5d1Nm+B9ZaOVdhd51Z3fK+RzoF3NjqgU4fxfWRgLTr Lq3kqq3ycJ8oneZ4LKhWOyLvugXmMHXwibqzEpi3saDkmsATrkxbuiUWb+U/MD+y SyT1wSrZ6ZserdaUx7G26TIGPhxBCFWXFALc086oJzgPJIVW1nTkCid+R4mbAQ97 lez6zIUX/pABSxeutDNd87KCw5BIGovu+ae7Xh4Vb6+D7VAQPa/7oEl8c9hfpxnF SandqydlubDaN1U1Y67sKA+p0aWmTijBh0DEY0E5gsWecnpbtfpXJtd92MSnF5dZ DNAeBgbU786fFQcbRmdXqbi7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6oiNja ta/vXq7CMxJ5KympPacvMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa3dy/EvbB2TC4GgAH0rSo+kyC3kksTfHiSqtNNmW1ItBvYKVCPEbu 0mmiq31lWFGs+TpXwnioaGch7sD2VKTDSoOyeAI3PKVJLsRE0MmKhcs7fCdRK0Y2 lS2Eq6evg3CWhaP0LzIvPOMIe2bSmDKc7EKKk2p7VVuOyv7W7qriOHbfpZnTr13A VBHfDSHXbu3qohiA1xZogyRnvFaJQYwQfDt905wLBbaEQYpXb8U/WZPMZBrF3sO5 yGeqKy6AV25DQM6c1doop0zukzGgtERSzYTAjMsYe/mZGKT923GOePXSubjCmvhW ijg5bTNWia4Vv4yPeAT2Reziol0Zhbh0 -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:48 2025 by rpki-client