$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json) Hash identifier: qgXpEE7LIYAUrRre9vA8J92W3X6DvKbsdynG1seRdb8= Subject key identifier: 32:7D:6D:AB:39:10:EB:D2:16:51:5A:B8:BA:C0:8A:E4:9B:22:4F:9D Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft Manifest number: 69 Signing time: Mon 03 Nov 2025 06:59:21 +0000 Manifest this update: Mon 03 Nov 2025 06:59:21 +0000 Manifest next update: Mon 10 Nov 2025 06:59:21 +0000 Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: 81MceG9oaIsWkGxq/ciZWvOtVcb+TdSYQW+Lezu1+cQ=) 2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: bwDdjXPrVZtmIClbo9xqwN/iM/s96nIFHCKB+Vl9Hlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Validity Not Before: Nov 3 06:59:21 2025 GMT Not After : Nov 10 06:59:21 2025 GMT Subject: CN=690852c9-65aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:51:93:18:5b:c6:93:9d:b1:1d:cd:96:39:f4: da:e3:9b:31:6e:c9:54:3a:1e:2a:7d:ae:b6:99:d6: 3d:e2:b7:25:f0:48:69:45:1e:eb:72:31:66:e1:98: a3:bd:2b:5e:30:f9:69:1d:46:e5:c8:58:d8:0e:68: 48:2e:cb:ad:0d:da:df:d0:36:65:d9:fa:e5:16:c0: c6:65:12:d9:a4:2f:77:57:2a:3b:91:aa:43:27:2f: a3:28:eb:61:26:fa:53:10:f4:39:b8:95:6c:63:98: 3f:52:c5:6e:1f:01:39:19:ce:7f:78:0e:b1:0f:c0: f6:23:3f:57:3c:ac:b5:f5:03:d1:b9:0e:79:9f:16: 30:0b:59:7b:c3:f4:f6:80:e9:39:99:4c:00:8d:dd: fa:d0:83:d8:3b:3b:59:32:37:78:fe:89:95:3a:79: e6:9d:d0:58:a9:fb:72:3c:50:07:2d:71:69:d4:31: 07:c2:22:a1:0e:9f:16:26:f2:db:7b:c3:c8:fd:36: 86:de:a5:a0:03:ad:57:cc:d1:3b:f1:66:5e:fb:b7: d8:d9:e1:c1:a4:71:3b:6d:ab:39:ae:3f:6f:92:22: 10:a5:0f:07:19:65:62:08:aa:4a:9c:95:54:db:c2: 36:d4:d9:ee:1d:1e:e9:4e:8a:0b:c3:bd:15:63:de: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:6D:AB:39:10:EB:D2:16:51:5A:B8:BA:C0:8A:E4:9B:22:4F:9D X509v3 Authority Key Identifier: keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:de:16:7e:c8:62:6c:bc:5c:fe:d4:51:19:d8:29:67:56:4c: 38:ee:2e:dc:da:88:5e:9d:a4:f6:9d:88:f2:2a:30:c6:76:39: 2c:e6:b4:1e:4b:1d:e5:b4:5d:89:3e:ab:f9:4f:57:41:20:91: 5c:4e:11:91:a5:60:a1:f9:f5:24:b7:4f:56:d6:a6:7b:ca:11: 94:43:de:61:26:2d:00:24:a3:9b:48:ab:f2:eb:67:e7:71:8f: f2:15:5e:9f:3c:08:98:13:04:9c:c9:c9:0b:03:56:e7:e7:69: c1:55:0a:98:70:79:35:a4:4b:1b:0e:98:d5:94:d6:b7:a1:b0: 28:05:d1:a8:5d:78:8d:47:46:6e:08:b8:ad:e0:21:45:05:8e: 25:ff:69:65:d1:c9:3f:f5:ab:fc:1d:15:43:d3:0b:91:a0:12: 53:d9:64:c2:ac:b4:43:c0:dc:31:8d:53:56:ed:a1:5a:8e:7b: e1:24:a3:c0:6e:37:bd:4f:9f:ac:79:f9:37:d1:c9:32:da:74: df:4d:7f:db:4e:5c:86:56:41:a0:32:af:a5:82:22:20:0b:14: 07:a7:d0:03:2d:03:b8:98:6b:7d:26:98:e6:1e:65:95:77:bb: c3:c2:19:6b:26:37:c7:c0:65:b7:52:ef:4a:18:55:a4:47:0e: b6:f6:eb:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDNGOTExMC8GA1UEBRMoMzM2MkFDNThFREIxODlDRjI1NzgzQzI3RDkwQTdEMkZB MzI5NzdDNTAeFw0yNTExMDMwNjU5MjFaFw0yNTExMTAwNjU5MjFaMBgxFjAUBgNV BAMTDTY5MDg1MmM5LTY1YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsUZMYW8aTnbEdzZY59NrjmzFuyVQ6Hip9rraZ1j3ityXwSGlFHutyMWbhmKO9 K14w+WkdRuXIWNgOaEguy60N2t/QNmXZ+uUWwMZlEtmkL3dXKjuRqkMnL6Mo62Em +lMQ9Dm4lWxjmD9SxW4fATkZzn94DrEPwPYjP1c8rLX1A9G5DnmfFjALWXvD9PaA 6TmZTACN3frQg9g7O1kyN3j+iZU6eead0Fip+3I8UActcWnUMQfCIqEOnxYm8tt7 w8j9NobepaADrVfM0TvxZl77t9jZ4cGkcTttqzmuP2+SIhClDwcZZWIIqkqclVTb wjbU2e4dHulOigvDvRVj3hLfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMn1tqzkQ 69IWUVq4usCK5JsiT50wHwYDVR0jBBgwFoAUM2KsWO2xic8leDwn2Qp9L6Mpd8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEM0Y5LzEyMjIzNkU2MThD NzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTJLc1dPMnhpYzhsZUR3bjJRcDlMNk1wZDhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE M0Y5LzEyMjIzNkU2MThDNzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4 bGVEd24yUXA5TDZNcGQ4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHeFn7IYmy8XP7UURnYKWdWTDjuLtzaiF6dpPadiPIqMMZ2OSzmtB5L HeW0XYk+q/lPV0EgkVxOEZGlYKH59SS3T1bWpnvKEZRD3mEmLQAko5tIq/LrZ+dx j/IVXp88CJgTBJzJyQsDVufnacFVCphweTWkSxsOmNWU1rehsCgF0ahdeI1HRm4I uK3gIUUFjiX/aWXRyT/1q/wdFUPTC5GgElPZZMKstEPA3DGNU1btoVqOe+Eko8Bu N71Pn6x5+TfRyTLadN9Nf9tOXIZWQaAyr6WCIiALFAen0AMtA7iYa30mmOYeZZV3 u8PCGWsmN8fAZbdS70oYVaRHDrb268k= -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:14 2025 by rpki-client