$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: Nh0P0kS2RT3iS5ZsdDDZYIwhJYnmk6eDvtO5YyKz8IM= Subject key identifier: 70:A2:D2:BA:7A:DB:1E:A2:FF:A1:42:94:C4:8E:D5:AF:45:3D:4C:A3 Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 12E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 12BF Signing time: Sat 18 Oct 2025 17:34:37 +0000 Manifest this update: Sat 18 Oct 2025 17:34:36 +0000 Manifest next update: Sat 25 Oct 2025 17:34:36 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: hvVcmnLKZefx7qQvCws/EFqib23It+cWXSiVK38ONE4=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4833 (0x12e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Oct 18 17:34:36 2025 GMT Not After : Oct 25 17:34:36 2025 GMT Subject: CN=68f3cfad-e22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:75:68:94:76:30:fb:09:79:42:4c:f2:a7: 4c:93:95:7e:73:89:49:0e:ee:ea:86:8b:55:fd:c1: 02:da:8d:56:20:05:eb:3f:a2:53:99:7e:d9:32:98: 72:45:59:b6:85:da:61:7d:fc:0b:64:ab:c5:59:51: d7:28:13:b9:92:31:99:f5:33:1b:60:82:71:10:23: 13:cd:37:31:46:fa:af:a0:d6:9a:b0:4e:f9:96:3a: ce:3e:4a:01:7a:21:d1:65:42:6d:67:02:cb:39:d0: 13:dd:9b:bf:b5:fd:4f:33:7e:44:05:42:87:ad:ce: 42:0a:a3:a0:a0:8f:83:c3:6c:41:7b:a4:bc:6b:59: c8:5b:94:0c:6f:e4:5d:eb:4d:1b:8e:4b:7b:6b:12: a2:f2:29:16:43:e2:84:69:d4:b7:ae:dc:e5:fd:82: 89:3a:82:52:5d:e7:2b:93:52:ca:7f:e8:0c:35:43: c6:8f:44:8a:b6:6b:99:1f:ac:2a:91:0d:c1:cd:63: a0:d2:64:da:81:ab:c7:9b:d4:6d:a0:b1:d1:da:55: 3f:a0:d3:af:cf:79:16:12:40:c0:c0:ae:ef:69:86: d7:9d:ed:56:6d:0b:9c:33:0c:cb:02:94:89:9f:9f: 62:99:d8:27:63:74:c6:34:fe:69:1c:14:72:df:64: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A2:D2:BA:7A:DB:1E:A2:FF:A1:42:94:C4:8E:D5:AF:45:3D:4C:A3 X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:16:02:09:8d:b4:f3:1c:b0:69:0c:71:c0:10:e5:e3:06:2a: 36:52:2f:81:08:25:d2:4c:10:7c:0a:f4:61:32:72:1b:0d:76: 75:c2:69:52:37:f8:41:37:95:bc:98:e4:d8:d0:25:a8:4f:16: 01:a8:32:e8:29:9c:33:90:58:a9:6e:b0:1b:01:17:c3:19:ce: 13:0b:89:23:64:6e:dd:c2:7a:6d:b0:df:64:10:79:4e:95:13: eb:e0:06:28:33:76:ef:85:75:a8:5e:45:f3:ff:ce:9a:33:8e: 70:bc:c9:c5:d3:28:09:64:79:9e:40:8d:e5:cd:92:c0:bb:ee: 40:e6:b4:b2:b9:36:55:1c:8e:df:c1:e2:dc:8c:b1:76:56:85: db:8d:20:df:51:bc:27:77:0a:73:cd:ed:da:9a:ff:5a:30:29: 2d:05:dd:a3:ae:bd:69:ae:02:cc:46:08:7b:d8:b0:34:3c:f7: f3:36:93:12:30:14:0b:3f:98:72:6d:31:17:d0:ad:13:d1:8c: fc:92:f1:1f:9f:b5:40:0a:ce:5f:da:df:48:de:ad:ba:77:fc: 32:02:37:75:08:9a:95:12:bd:91:16:02:30:14:69:e9:0f:d2: b2:83:c4:08:c1:0c:44:7a:1a:c0:4e:c8:e9:c2:e3:14:bc:e0: 17:f1:ee:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUxMDE4MTczNDM2WhcNMjUxMDI1MTczNDM2WjAYMRYwFAYD VQQDEw02OGYzY2ZhZC1lMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqF1aJR2MPsJeUJM8qdMk5V+c4lJDu7qhotV/cEC2o1WIAXrP6JTmX7ZMphy RVm2hdphffwLZKvFWVHXKBO5kjGZ9TMbYIJxECMTzTcxRvqvoNaasE75ljrOPkoB eiHRZUJtZwLLOdAT3Zu/tf1PM35EBUKHrc5CCqOgoI+Dw2xBe6S8a1nIW5QMb+Rd 600bjkt7axKi8ikWQ+KEadS3rtzl/YKJOoJSXecrk1LKf+gMNUPGj0SKtmuZH6wq kQ3BzWOg0mTagavHm9RtoLHR2lU/oNOvz3kWEkDAwK7vaYbXne1WbQucMwzLApSJ n59imdgnY3TGNP5pHBRy32SKmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCi0rp6 2x6i/6FClMSO1a9FPUyjMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeFgIJjbTzHLBpDHHAEOXjBio2Ui+BCCXSTBB8CvRhMnIbDXZ1wmlS N/hBN5W8mOTY0CWoTxYBqDLoKZwzkFipbrAbARfDGc4TC4kjZG7dwnptsN9kEHlO lRPr4AYoM3bvhXWoXkXz/86aM45wvMnF0ygJZHmeQI3lzZLAu+5A5rSyuTZVHI7f weLcjLF2VoXbjSDfUbwndwpzze3amv9aMCktBd2jrr1prgLMRgh72LA0PPfzNpMS MBQLP5hybTEX0K0T0Yz8kvEfn7VACs5f2t9I3q26d/wyAjd1CJqVEr2RFgIwFGnp D9Kyg8QIwQxEehrATsjpwuMUvOAX8e7B -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:31 2025 by rpki-client