$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: OWKqJaziDDX6vcirqmTt2e+sYNsc+XmPH/Vi1o8deUA= Subject key identifier: 24:C5:97:65:FE:08:E4:FB:DD:16:A1:98:5B:BD:E0:3B:75:1F:99:8B Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0497 Signing time: Wed 05 Nov 2025 00:07:43 +0000 Manifest this update: Wed 05 Nov 2025 00:07:43 +0000 Manifest next update: Wed 12 Nov 2025 00:07:43 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: IiGkUCWdIgw4BkBIsRLK6vbCdJuRlBT+7mH3CnSM/Lk=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Nov 5 00:07:43 2025 GMT Not After : Nov 12 00:07:43 2025 GMT Subject: CN=690a954f-2614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:e3:9b:d2:41:fb:b6:29:1f:61:ce:7d:46: 64:1f:ea:f4:cc:e2:53:32:25:eb:e4:89:73:16:5b: 56:2f:37:8f:e6:09:d9:53:0c:41:de:df:af:8f:a2: ce:65:bf:0a:e2:ff:83:0e:ce:86:3a:d8:ef:11:06: d3:ee:e7:bd:f4:d5:9e:01:db:8c:83:1a:b1:3c:c9: 3b:57:74:92:a3:82:1a:ea:be:ea:1f:bd:ef:c1:bd: 7d:c5:a9:be:8a:1c:32:76:aa:73:18:22:76:81:69: 67:ab:c9:08:c3:e2:6a:d1:2b:33:4d:71:76:47:22: 5c:9d:a1:48:c5:ea:a3:5f:d0:ad:11:c0:75:40:37: 9f:ab:1f:8b:26:63:ec:75:ee:27:cb:e0:90:08:00: 9c:3b:60:e4:ae:8d:70:17:8d:a2:a0:53:71:8d:4c: 44:6b:8c:33:b2:cd:e3:95:b1:7c:43:fd:bc:12:f2: 9b:09:c6:8d:22:42:00:eb:54:ee:fd:e8:b1:93:a4: ef:6b:7c:cb:a5:64:80:2c:a2:2d:30:83:2a:7e:4e: 85:1a:ef:be:a7:63:31:e6:c5:d0:17:06:55:cf:3e: d2:6d:79:ef:2a:d2:2a:33:40:bb:e7:6b:97:0f:56: f4:7d:a6:3e:11:21:e0:b0:e6:e3:58:21:4d:d6:00: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:97:65:FE:08:E4:FB:DD:16:A1:98:5B:BD:E0:3B:75:1F:99:8B X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:05:9d:ee:f9:32:d8:5d:14:98:48:67:d7:a4:c4:62:33:6c: 4a:28:2e:f5:c3:a6:b6:bb:39:1f:dc:e3:c5:4a:a7:ef:7c:e7: cf:fb:24:f8:63:24:80:21:f1:c9:19:b7:e2:c0:76:c4:68:b9: ed:2f:27:35:6e:be:bf:9c:1d:a0:0c:cf:61:e2:13:73:f2:7f: 57:02:80:95:25:bb:40:42:31:18:62:ab:ac:14:bc:76:76:35: 11:7f:9e:35:0e:d4:b3:80:e4:c1:2a:a0:e6:f4:8c:c3:0b:30: 09:77:b3:a1:d3:36:b0:b8:3d:9c:48:b4:6d:cd:f4:dc:c5:c0: 05:1b:c1:d0:98:8a:4d:9e:89:bc:1e:4b:6e:c8:87:43:03:4a: c3:c2:ac:02:3b:7d:22:bd:ce:e1:9d:2b:10:79:0f:37:1f:b5: 07:6a:47:ee:d8:15:c1:d5:2c:b4:90:fb:a3:60:d4:be:e8:2a: 49:cd:d8:a9:f2:93:d0:6b:8d:f2:3c:7f:87:e2:69:3f:d9:0e: 00:c6:60:9c:6c:67:8b:cc:a7:58:cb:ef:6c:5b:99:c2:68:80: bb:6b:26:be:92:39:9f:4e:7e:98:08:d5:8d:06:bb:56:6b:d4: b8:63:a8:0d:a2:b9:b2:f7:17:f3:f0:5b:6e:49:1a:5d:d3:96: 7e:ad:54:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUxMTA1MDAwNzQzWhcNMjUxMTEyMDAwNzQzWjAYMRYwFAYD VQQDEw02OTBhOTU0Zi0yNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d3jm9JB+7YpH2HOfUZkH+r0zOJTMiXr5IlzFltWLzeP5gnZUwxB3t+vj6LO Zb8K4v+DDs6GOtjvEQbT7ue99NWeAduMgxqxPMk7V3SSo4Ia6r7qH73vwb19xam+ ihwydqpzGCJ2gWlnq8kIw+Jq0SszTXF2RyJcnaFIxeqjX9CtEcB1QDefqx+LJmPs de4ny+CQCACcO2Dkro1wF42ioFNxjUxEa4wzss3jlbF8Q/28EvKbCcaNIkIA61Tu /eixk6Tva3zLpWSALKItMIMqfk6FGu++p2Mx5sXQFwZVzz7SbXnvKtIqM0C752uX D1b0faY+ESHgsObjWCFN1gB7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTFl2X+ COT73RahmFu94Dt1H5mLMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBBZ3u+TLYXRSYSGfXpMRiM2xKKC71w6a2uzkf3OPFSqfvfOfP+yT4 YySAIfHJGbfiwHbEaLntLyc1br6/nB2gDM9h4hNz8n9XAoCVJbtAQjEYYqusFLx2 djURf541DtSzgOTBKqDm9IzDCzAJd7Oh0zawuD2cSLRtzfTcxcAFG8HQmIpNnom8 HktuyIdDA0rDwqwCO30ivc7hnSsQeQ83H7UHakfu2BXB1Sy0kPujYNS+6CpJzdip 8pPQa43yPH+H4mk/2Q4AxmCcbGeLzKdYy+9sW5nCaIC7aya+kjmfTn6YCNWNBrtW a9S4Y6gNormy9xfz8FtuSRpd05Z+rVTG -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:46 2025 by rpki-client