$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: YxfYj+PKnrh4rc7M78zm3b5VPt7Q9dut9Z9YVfuM3FU= Subject key identifier: 2B:2F:F5:7B:72:86:22:D6:0E:3C:50:C8:8C:6D:12:36:9A:F3:FF:3A Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: 011A Signing time: Mon 03 Nov 2025 05:20:29 +0000 Manifest this update: Mon 03 Nov 2025 05:20:28 +0000 Manifest next update: Mon 10 Nov 2025 05:20:28 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: hICeCb9ZHFmeeY/obSqwz7+3AjSUiHrPstZvkxhuMHw=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: ovencPjh3DETl3TFknJbkwLv9wBQOuWaZf8yT96L04E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Nov 3 05:20:28 2025 GMT Not After : Nov 10 05:20:28 2025 GMT Subject: CN=69083b9c-35cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:63:35:e1:57:50:1e:4a:92:d9:a2:83:54: 0e:c2:b9:8f:ef:bd:2d:f8:e1:34:03:15:66:32:eb: 51:19:c2:ec:e8:dd:f8:9d:68:d5:20:2a:66:7f:5c: e7:59:66:a0:ac:3f:32:0d:ac:44:fe:2e:e8:e7:d2: b0:7c:de:49:4e:c0:af:96:78:c2:3d:c3:67:b2:17: 8b:f4:a1:fa:f5:bf:80:a5:2e:cd:9f:6d:e3:65:a8: bd:f6:19:48:2b:4f:d0:34:56:f1:a7:7f:82:56:c8: f6:a3:a5:a1:4d:3f:d8:2b:64:e6:b5:a7:31:f3:63: d7:11:87:ad:1e:03:9a:d0:a5:df:42:2e:15:f1:3c: 00:da:61:4f:c7:ed:01:2a:f2:cd:0b:25:17:ba:47: b6:3d:67:97:8e:fa:0d:a5:38:22:75:97:48:f0:6c: 1a:cf:d7:fa:9b:36:5b:70:d9:10:f6:a1:c4:33:18: 18:e3:75:98:0f:84:3a:5f:00:93:36:2e:d9:50:7d: da:ec:37:99:ce:f0:25:30:66:4f:9f:51:d8:f9:9b: 9b:4a:c7:5d:0c:f5:ed:de:50:cc:70:26:e8:3d:13: c3:01:56:04:8b:df:da:7e:a9:13:29:eb:1c:e0:9e: 03:d3:11:27:9b:32:21:45:82:c3:7c:ff:68:0f:a2: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:F5:7B:72:86:22:D6:0E:3C:50:C8:8C:6D:12:36:9A:F3:FF:3A X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e3:99:e9:1c:bd:63:68:ec:d4:d7:8e:78:6c:10:49:32:93: 1d:6e:0a:73:55:00:69:2d:f9:2d:6d:22:bf:bf:69:4c:1f:f6: a2:5e:2e:bd:33:88:bf:aa:42:44:4d:7e:ff:aa:d6:3e:18:e9: e5:e6:a1:8b:82:32:09:e9:45:25:3f:19:f6:56:9f:db:f0:85: 98:68:bb:39:d7:43:24:d6:03:ca:8f:15:90:80:91:30:7a:bb: 7e:3c:63:07:83:ed:54:8a:5a:50:d0:a8:87:33:9d:ff:65:0e: e3:4d:4c:17:88:2d:5f:f2:07:78:d2:d8:4d:60:ac:8e:10:46: 25:f1:ac:46:ff:e1:a6:e8:30:94:0b:0f:90:48:70:2e:af:4c: ae:d3:e3:d1:2f:7f:ce:11:87:a2:8c:25:cc:43:cc:f1:ad:49: e1:03:af:71:73:a4:79:97:90:3e:8f:52:9a:41:33:56:e7:fd: 65:39:66:f6:8e:75:ed:d4:95:4c:d9:9c:32:ec:23:45:3e:72: cc:26:b5:f1:bf:b1:0f:b5:06:d6:a6:71:cc:f7:d2:a3:f8:de: 2c:22:59:0f:83:0d:c9:28:cd:cf:d2:1d:0f:95:70:ac:23:e0: 07:9e:fe:be:5a:b1:aa:6d:66:ea:33:6f:56:03:a3:8f:c3:4e: c9:1d:03:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUxMTAzMDUyMDI4WhcNMjUxMTEwMDUyMDI4WjAYMRYwFAYD VQQDEw02OTA4M2I5Yy0zNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5hjNeFXUB5Kktmig1QOwrmP770t+OE0AxVmMutRGcLs6N34nWjVICpmf1zn WWagrD8yDaxE/i7o59KwfN5JTsCvlnjCPcNnsheL9KH69b+ApS7Nn23jZai99hlI K0/QNFbxp3+CVsj2o6WhTT/YK2Tmtacx82PXEYetHgOa0KXfQi4V8TwA2mFPx+0B KvLNCyUXuke2PWeXjvoNpTgidZdI8Gwaz9f6mzZbcNkQ9qHEMxgY43WYD4Q6XwCT Ni7ZUH3a7DeZzvAlMGZPn1HY+ZubSsddDPXt3lDMcCboPRPDAVYEi9/afqkTKesc 4J4D0xEnmzIhRYLDfP9oD6KlewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsv9Xty hiLWDjxQyIxtEjaa8/86MB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa45npHL1jaOzU1454bBBJMpMdbgpzVQBpLfktbSK/v2lMH/aiXi69 M4i/qkJETX7/qtY+GOnl5qGLgjIJ6UUlPxn2Vp/b8IWYaLs510Mk1gPKjxWQgJEw ert+PGMHg+1UilpQ0KiHM53/ZQ7jTUwXiC1f8gd40thNYKyOEEYl8axG/+Gm6DCU Cw+QSHAur0yu0+PRL3/OEYeijCXMQ8zxrUnhA69xc6R5l5A+j1KaQTNW5/1lOWb2 jnXt1JVM2Zwy7CNFPnLMJrXxv7EPtQbWpnHM99Kj+N4sIlkPgw3JKM3P0h0PlXCs I+AHnv6+WrGqbWbqM29WA6OPw07JHQNr -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:54 2025 by rpki-client