$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft File: X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json) Hash identifier: kHzY/6DSJurE7Xxtig0LmSB2QqhAgd/XG2QjSvD56Sc= Subject key identifier: 8B:B0:62:A4:7E:CB:5B:51:A6:02:97:F8:C2:EC:62:37:22:2D:DA:60 Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA Certificate issuer: /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft Manifest number: 05 Signing time: Mon 03 Nov 2025 08:04:47 +0000 Manifest this update: Mon 03 Nov 2025 08:04:47 +0000 Manifest next update: Mon 10 Nov 2025 08:04:47 +0000 Files and hashes: 1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: /4qoGq2jDnVdZF2dvlHEi48dxC1HoFR0O9zJE3mtTbY=) 2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: owXPWWTvbOHMdijTrjs5nUjJn72ZVck6W96FPsIZ2aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA Validity Not Before: Nov 3 08:04:47 2025 GMT Not After : Nov 10 08:04:47 2025 GMT Subject: CN=6908621f-edc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:cf:3a:4d:7d:6a:89:08:e8:2b:90:49:0a: 76:1e:7a:17:e4:81:c7:df:ed:77:31:f0:0b:ba:ac: 48:4b:4d:1c:ed:4e:3a:ec:6e:4f:fe:36:c3:ab:1f: 81:ce:a3:24:ac:4c:58:f7:e5:e6:e9:52:44:dc:2a: 9e:de:78:e3:e5:77:ad:7a:9e:bc:c8:9e:cb:e1:d3: e0:fb:4a:bc:0a:ef:df:8d:40:0b:91:f2:27:13:63: 3b:03:35:37:03:25:fe:11:3b:92:c2:c1:9b:c2:9a: 97:7f:4d:61:4e:c3:68:4d:a7:12:5a:65:34:33:e0: 9e:c6:bd:1b:fc:f8:58:b4:2a:33:ea:c1:41:f4:93: 23:e0:05:60:0d:c8:05:ca:38:c4:eb:37:da:1b:29: 27:98:07:f3:cf:9b:14:6c:7e:e4:00:5e:de:07:38: b4:fd:a4:f9:a3:48:20:c2:5d:41:88:17:d6:9e:67: 05:bc:fc:15:23:5a:08:79:2e:a9:83:cc:70:8c:d7: a6:86:5b:23:51:93:fe:56:88:0b:0a:96:10:e4:02: d7:53:2a:aa:8a:34:80:c6:8f:0d:45:c6:bb:2b:29: 96:16:96:b7:36:bb:be:3d:38:be:bd:b7:91:ec:3e: 07:ae:6f:7a:ac:96:b4:9a:31:ea:1d:0d:e8:32:84: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B0:62:A4:7E:CB:5B:51:A6:02:97:F8:C2:EC:62:37:22:2D:DA:60 X509v3 Authority Key Identifier: keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:05:c3:34:07:4a:e3:36:ed:33:3b:a6:b9:94:cf:9c:87:03: f3:34:87:94:e8:90:7c:96:f8:08:50:08:1a:3e:53:d4:ce:14: a1:3c:d2:f8:80:1a:55:60:9a:3f:c3:5c:8e:a4:ba:79:1e:aa: 29:67:a9:dd:18:f0:52:0e:d8:80:0f:25:ab:22:fc:5f:5b:be: 58:f9:b6:cf:ce:8b:03:fb:d4:86:7a:0a:c5:43:f5:47:7a:fa: b9:41:68:7b:90:2c:1a:7d:6e:3f:e5:31:c0:ce:e8:95:ed:a5: 18:28:ad:ac:ce:6e:92:f7:26:a8:f3:a2:29:88:82:26:49:58: a1:95:29:c0:f5:9b:e3:0d:5c:cc:83:8a:59:d3:a9:85:40:e9: 69:76:ad:03:48:d9:1a:be:a9:1a:68:30:5e:b9:46:77:65:b5: 86:a7:77:04:74:e8:66:b9:22:28:f6:cd:e8:5a:f3:be:a2:f7: de:85:f2:07:4a:61:ba:20:20:d7:cb:92:89:f4:73:59:19:d2: f3:b8:c9:0b:f3:3b:46:e0:34:6f:92:73:7f:92:bc:e2:ae:0e: fd:24:5a:52:3a:64:cf:f8:a9:0a:85:a2:74:ad:50:b8:29:1a: 75:57:98:11:d6:c5:9e:54:30:14:c9:28:67:01:2c:f8:76:1b: 1d:bf:d3:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkY1QjExMC8GA1UEBRMoNUZFRDA0MEZBNkM2QjY1NjRFNDAyQjJFQjc2MzY5MkNF MjQzMDdFQTAeFw0yNTExMDMwODA0NDdaFw0yNTExMTAwODA0NDdaMBgxFjAUBgNV BAMTDTY5MDg2MjFmLWVkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpOc86TX1qiQjoK5BJCnYeehfkgcff7Xcx8Au6rEhLTRztTjrsbk/+NsOrH4HO oySsTFj35ebpUkTcKp7eeOPld616nrzInsvh0+D7SrwK79+NQAuR8icTYzsDNTcD Jf4RO5LCwZvCmpd/TWFOw2hNpxJaZTQz4J7GvRv8+Fi0KjPqwUH0kyPgBWANyAXK OMTrN9obKSeYB/PPmxRsfuQAXt4HOLT9pPmjSCDCXUGIF9aeZwW8/BUjWgh5LqmD zHCM16aGWyNRk/5WiAsKlhDkAtdTKqqKNIDGjw1FxrsrKZYWlrc2u749OL69t5Hs Pgeub3qslrSaMeodDegyhAIBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi7BipH7L W1GmApf4wuxiNyIt2mAwHwYDVR0jBBgwFoAUX+0ED6bGtlZOQCsut2NpLOJDB+ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0Q3MURDMjU0QjRC MTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxaT1FDc3V0Mk5wTE9KREIt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWC0wRUQ2Ykd0bFpPUUNzdXQyTnBMT0pEQi1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky RjVCL0Q3MURDMjU0QjRCMTExRjBBREMyQjExRkM0RjlBRTAyL1gtMEVENmJHdGxa T1FDc3V0Mk5wTE9KREItby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAFwzQHSuM27TM7prmUz5yHA/M0h5TokHyW+AhQCBo+U9TOFKE80viA GlVgmj/DXI6kunkeqilnqd0Y8FIO2IAPJasi/F9bvlj5ts/OiwP71IZ6CsVD9Ud6 +rlBaHuQLBp9bj/lMcDO6JXtpRgorazObpL3JqjzoimIgiZJWKGVKcD1m+MNXMyD ilnTqYVA6Wl2rQNI2Rq+qRpoMF65RndltYandwR06Ga5Iij2zeha876i996F8gdK YbogINfLkon0c1kZ0vO4yQvzO0bgNG+Sc3+SvOKuDv0kWlI6ZM/4qQqFonStULgp GnVXmBHWxZ5UMBTJKGcBLPh2Gx2/04Q= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:20 2025 by rpki-client