$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft File: cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json) Hash identifier: KUzO+C15nGlP9nJPZtaB+XzpJn+DNT3uFoEvsctD0O4= Subject key identifier: 28:DD:85:E9:AE:8E:3F:A5:06:00:AC:AC:A4:19:D5:A3:65:9A:6A:82 Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 Certificate issuer: /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft Manifest number: DC Signing time: Mon 03 Nov 2025 05:32:35 +0000 Manifest this update: Mon 03 Nov 2025 05:32:35 +0000 Manifest next update: Mon 10 Nov 2025 05:32:35 +0000 Files and hashes: 1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: RdhJ6Q7+MRVcYaApPPxNpZsZElaPdKlw/UEQY6MsYrM=) 2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: CaDrsHhMr2SW3agEhOrGpPTbVn2zv/JRiQ35B1c4T/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Validity Not Before: Nov 3 05:32:35 2025 GMT Not After : Nov 10 05:32:35 2025 GMT Subject: CN=69083e73-0da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:f9:0d:6c:ad:72:ce:09:a9:f7:7a:4a:40: 00:2a:9e:01:40:13:84:c9:7c:58:f9:a5:76:b1:cd: c4:34:94:ea:d9:27:3a:6b:f5:70:48:8c:40:d4:94: e3:75:c6:1c:18:27:8a:fe:b5:9c:3e:61:64:c0:ac: 0f:34:7f:99:9a:e5:51:1e:31:0b:6e:1a:35:57:35: 8d:eb:7f:5b:5c:2e:97:f2:63:01:65:63:0c:7e:36: 85:c6:cf:3e:17:03:80:fd:0e:51:20:e2:cc:9e:30: 9b:89:e7:59:19:f8:d5:06:d4:55:aa:38:eb:57:df: 07:43:f1:75:24:ac:cf:64:81:35:61:d2:01:ae:57: e2:d8:ea:15:15:df:21:50:c8:f4:e7:e7:ed:25:e0: e9:41:03:ba:49:2f:d5:64:a1:a1:53:99:68:86:9a: 5b:1d:85:92:27:78:10:10:aa:27:d4:2b:ba:94:11: ab:64:f1:3e:b5:3d:8d:3b:9a:cd:44:d1:e5:78:5a: df:58:f2:bb:a1:ac:87:72:07:c6:b5:98:9d:6f:c8: c8:09:3f:f1:8f:19:28:ee:8b:69:0c:7f:91:4a:c9: fb:1e:c6:f5:de:a7:0f:96:7c:1f:f1:50:c1:ed:9f: 75:72:3a:27:4e:57:1b:3c:44:8f:58:10:01:11:e7: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:85:E9:AE:8E:3F:A5:06:00:AC:AC:A4:19:D5:A3:65:9A:6A:82 X509v3 Authority Key Identifier: keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:de:74:00:0b:b6:df:91:fc:3f:8c:5a:64:3e:d9:14:40: fe:a5:c5:f6:54:67:4b:90:8a:9f:47:7c:cc:5e:f2:af:3b:ce: 4c:d0:52:fa:87:72:b5:32:84:20:94:77:e6:08:f3:b0:bf:f3: 65:a7:80:f6:21:d3:2e:24:9a:43:46:c5:30:60:46:9c:ed:2f: 58:cf:b3:7c:04:4c:28:58:b3:bb:57:8f:59:cf:2d:4f:80:ea: 0a:1d:98:7f:dc:8e:4e:4a:cd:53:9a:18:84:62:ba:4a:c8:69: 8e:b9:d3:70:9a:f9:2b:38:5e:1d:db:25:4b:22:79:43:75:e9: 07:7a:61:45:40:ef:be:d9:84:64:be:f1:e7:be:81:a1:f6:3d: 39:fe:20:b8:9d:80:a4:b9:44:6d:94:6c:38:d7:7d:9b:43:ee: 2a:fd:cf:70:3a:0e:00:2a:fc:79:90:df:ca:b6:79:18:63:b9: b1:dc:c5:68:38:7b:0d:8d:2b:eb:bf:e7:2c:9b:6a:17:fb:d0: d8:ce:a9:4a:d7:de:e5:2e:1e:d6:e3:53:de:10:e9:c1:f7:6c: b1:36:b0:47:2f:8f:aa:73:9d:66:1f:c4:6b:64:7c:c4:81:f0: 17:e3:d8:b5:77:d7:6a:ff:00:03:bb:53:9d:07:ec:5d:82:9d: 40:51:ee:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy QjFENEQzNjQwHhcNMjUxMTAzMDUzMjM1WhcNMjUxMTEwMDUzMjM1WjAYMRYwFAYD VQQDEw02OTA4M2U3My0wZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Rv5DWytcs4Jqfd6SkAAKp4BQBOEyXxY+aV2sc3ENJTq2Sc6a/VwSIxA1JTj dcYcGCeK/rWcPmFkwKwPNH+ZmuVRHjELbho1VzWN639bXC6X8mMBZWMMfjaFxs8+ FwOA/Q5RIOLMnjCbiedZGfjVBtRVqjjrV98HQ/F1JKzPZIE1YdIBrlfi2OoVFd8h UMj05+ftJeDpQQO6SS/VZKGhU5lohppbHYWSJ3gQEKon1Cu6lBGrZPE+tT2NO5rN RNHleFrfWPK7oayHcgfGtZidb8jICT/xjxko7otpDH+RSsn7Hsb13qcPlnwf8VDB 7Z91cjonTlcbPESPWBABEeeIxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjdhemu jj+lBgCsrKQZ1aNlmmqCMB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS85NkJERjM0QTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1 a1RleE9UMUtqUG9ySFUwMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzCt50AAu235H8P4xaZD7ZFED+pcX2VGdLkIqfR3zMXvKvO85M0FL6 h3K1MoQglHfmCPOwv/Nlp4D2IdMuJJpDRsUwYEac7S9Yz7N8BEwoWLO7V49Zzy1P gOoKHZh/3I5OSs1TmhiEYrpKyGmOudNwmvkrOF4d2yVLInlDdekHemFFQO++2YRk vvHnvoGh9j05/iC4nYCkuURtlGw4132bQ+4q/c9wOg4AKvx5kN/KtnkYY7mx3MVo OHsNjSvrv+csm2oX+9DYzqlK197lLh7W41PeEOnB92yxNrBHL4+qc51mH8RrZHzE gfAX49i1d9dq/wADu1OdB+xdgp1AUe6z -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:08 2025 by rpki-client