$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: Fo2jQIKp5FqPSo6lOlLhh3BCmcf0hsqpqn5kAmNA084= Subject key identifier: 52:97:33:37:0C:38:F7:99:92:21:AD:4E:77:6D:14:DC:95:EC:22:F6 Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 041C Signing time: Mon 03 Nov 2025 00:19:42 +0000 Manifest this update: Mon 03 Nov 2025 00:19:41 +0000 Manifest next update: Mon 10 Nov 2025 00:19:41 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: mmy57cv2XeF1U7KehMtJbCOeVMYBxpJYKnIO5RWS0oo=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Nov 3 00:19:41 2025 GMT Not After : Nov 10 00:19:41 2025 GMT Subject: CN=6907f51e-3205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:6b:a9:44:4f:a2:bc:f4:27:7f:c2:15:19: 37:ed:88:00:7d:09:56:13:39:56:63:25:27:51:0c: f8:9d:cd:c2:c0:19:5e:ad:43:59:e0:40:da:cc:b5: d2:bc:dd:f1:ba:79:a2:25:7a:a1:e1:a2:76:15:c1: 26:81:0a:f9:99:19:6e:c0:98:64:c5:3d:7e:28:c1: de:6d:4a:fb:7a:f3:13:fe:5a:67:b9:ea:b7:38:ae: c4:4f:0b:0e:69:1b:28:82:f6:8b:8d:ab:99:83:3a: 67:a8:b0:67:54:02:3b:9f:76:9a:cf:5c:eb:5f:6c: e3:d5:0c:f9:cc:32:3b:e9:ce:e9:7d:33:d6:5c:2a: b2:0c:df:0e:2e:eb:23:4e:51:6c:52:b3:d1:0a:2b: bc:72:71:52:59:8d:b3:11:0e:c7:fe:11:de:d8:84: d3:87:05:e2:dc:4b:a8:8d:28:bc:f7:31:43:93:86: c8:97:2e:1e:fc:79:cd:1b:77:14:de:3f:0e:6e:30: 4c:f3:6b:8e:f0:d4:4b:ab:fb:4d:34:d5:45:70:43: a2:19:9b:9f:95:f0:9d:e5:75:1c:e0:1c:02:4c:9a: 8e:69:19:4f:50:97:c0:db:e9:0d:78:cb:ef:13:50: 70:87:23:42:96:df:7b:0e:e4:7a:e5:4d:23:46:a3: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:33:37:0C:38:F7:99:92:21:AD:4E:77:6D:14:DC:95:EC:22:F6 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:27:7b:85:89:75:d8:7f:21:d2:5c:2d:2b:61:10:fe:89: ff:80:dc:4e:90:a0:ca:c3:87:30:c0:b3:d5:2a:44:e5:ef:45: 6a:a5:cd:f0:38:9a:54:17:76:81:6e:1c:69:46:f6:9f:d1:20: dd:81:9a:f9:59:7c:9a:37:17:5c:f1:02:9f:4c:45:63:14:74: 6b:fb:9e:62:fc:09:d8:86:fa:b7:c2:17:c8:93:de:d5:e8:41: 55:e2:f0:5a:24:92:4b:2d:cd:c9:57:37:12:ee:2d:ab:1b:4d: 01:51:9b:1b:c0:70:45:04:52:54:b4:a6:69:f4:45:4d:57:6b: 8f:40:26:6f:43:a9:75:ce:e3:59:fe:ee:46:4f:7d:33:34:d0: 33:c2:b4:9b:22:54:2e:a3:8e:bd:60:15:56:12:8a:b2:9e:fa: 9d:55:10:fe:5a:5c:7f:bf:e6:62:7e:35:82:d7:bc:d2:f0:99: 2b:ff:8b:8d:8b:cd:13:68:19:6a:8d:5d:f5:87:2d:27:f2:e1: 0b:40:f5:e2:57:ae:c4:75:e3:14:b3:c5:b8:8e:d7:40:3e:e1: e8:ea:d8:15:70:2a:cd:48:af:5c:b8:be:37:0b:7a:66:26:07: e0:7c:08:83:f6:91:e8:6c:f4:62:a2:69:0b:be:db:d3:03:78: 1f:d7:fe:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUxMTAzMDAxOTQxWhcNMjUxMTEwMDAxOTQxWjAYMRYwFAYD VQQDEw02OTA3ZjUxZS0zMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrVrqURPorz0J3/CFRk37YgAfQlWEzlWYyUnUQz4nc3CwBlerUNZ4EDazLXS vN3xunmiJXqh4aJ2FcEmgQr5mRluwJhkxT1+KMHebUr7evMT/lpnueq3OK7ETwsO aRsogvaLjauZgzpnqLBnVAI7n3aaz1zrX2zj1Qz5zDI76c7pfTPWXCqyDN8OLusj TlFsUrPRCiu8cnFSWY2zEQ7H/hHe2ITThwXi3EuojSi89zFDk4bIly4e/HnNG3cU 3j8ObjBM82uO8NRLq/tNNNVFcEOiGZuflfCd5XUc4BwCTJqOaRlPUJfA2+kNeMvv E1BwhyNClt97DuR65U0jRqNWiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKXMzcM OPeZkiGtTndtFNyV7CL2MB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCThid7hYl12H8h0lwtK2EQ/on/gNxOkKDKw4cwwLPVKkTl70Vqpc3w OJpUF3aBbhxpRvaf0SDdgZr5WXyaNxdc8QKfTEVjFHRr+55i/AnYhvq3whfIk97V 6EFV4vBaJJJLLc3JVzcS7i2rG00BUZsbwHBFBFJUtKZp9EVNV2uPQCZvQ6l1zuNZ /u5GT30zNNAzwrSbIlQuo469YBVWEoqynvqdVRD+Wlx/v+ZifjWC17zS8Jkr/4uN i80TaBlqjV31hy0n8uELQPXiV67EdeMUs8W4jtdAPuHo6tgVcCrNSK9cuL43C3pm JgfgfAiD9pHobPRiomkLvtvTA3gf1/5g -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:54 2025 by rpki-client