$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: 8vgQtxjG1LeXGpw8dRdIkUpmsoo2kMeV06jr1fjrrC8= Subject key identifier: E8:9A:95:6B:AC:77:12:E0:1D:30:50:68:E4:55:AB:FB:B1:E7:56:16 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 11EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 11E3 Signing time: Sat 18 Oct 2025 17:41:35 +0000 Manifest this update: Sat 18 Oct 2025 17:41:34 +0000 Manifest next update: Sat 25 Oct 2025 17:41:34 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: KRWmNPuiNp/RAX5rt8Y2iA0KHDoCAwdrlDXl17dVLLU=) 2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4587 (0x11eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Oct 18 17:41:34 2025 GMT Not After : Oct 25 17:41:34 2025 GMT Subject: CN=68f3d14f-7848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:9e:41:20:3b:eb:1f:35:72:61:ac:c4:30: 5e:40:46:df:78:04:d9:85:7a:24:f5:d2:98:d0:c6: 7f:fa:82:57:1b:b8:2a:3e:e0:f7:59:46:72:6c:5e: 37:d1:5e:f1:a4:8e:3d:1a:43:65:e7:58:36:97:77: ec:28:0a:df:c1:09:55:fa:0a:7a:bf:a5:eb:3b:5e: eb:24:02:b9:32:d1:58:20:8c:91:7e:3a:17:d4:8a: c7:c9:c7:37:57:a5:f0:d5:c5:55:e0:ac:38:05:b6: 11:3b:42:a1:bb:9b:5f:92:ea:a5:5d:ff:b5:66:2f: e7:2d:18:ba:c0:10:91:11:99:2e:3d:46:24:dd:fb: 9d:4f:25:ef:fe:d9:2d:54:76:4b:7f:31:52:d0:f2: 68:96:6c:9b:9b:33:32:54:7c:d5:3a:ae:08:a6:02: e5:53:d8:e2:f5:2d:c8:d2:00:3d:44:af:ba:3c:fd: 1f:03:70:9c:08:b4:c1:1f:2a:61:b0:8a:11:4f:96: c3:7f:66:67:fc:22:f6:49:e4:a5:39:e2:e9:42:13: 2d:36:a3:8b:10:01:9d:46:1d:1d:02:e5:38:fc:22: c4:8b:92:ae:bb:b3:4c:25:59:02:0b:fa:3b:a4:bb: 25:c1:c9:d4:a5:13:46:0c:0e:ce:13:74:5c:58:14: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:95:6B:AC:77:12:E0:1D:30:50:68:E4:55:AB:FB:B1:E7:56:16 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:6a:5a:4e:c7:dd:9b:c2:17:46:3b:4c:1d:63:c1:f1:5d:06: 8b:23:f4:e7:6e:f5:b5:a7:45:fc:45:3b:bf:d9:3d:a8:45:87: a9:eb:07:17:32:bc:1c:78:ce:b9:a0:2b:29:c5:31:c4:1b:6c: 28:8b:3c:f2:da:52:59:8e:e3:e3:76:d2:e7:a7:cc:cc:e3:eb: 3c:73:a2:0a:0a:3c:e6:5a:17:2d:43:63:c4:29:80:4a:9f:34: d6:b9:e8:a0:9b:99:0a:2f:2f:0f:74:c3:50:4d:f6:1a:ee:52: 74:4b:6f:50:cd:7a:74:2b:2f:91:eb:6f:f3:ee:f9:7d:03:af: 86:82:44:29:cd:93:73:f5:65:35:a0:00:fa:e2:67:9e:ce:32: 7f:aa:fe:47:87:59:89:36:74:40:9d:40:1c:ef:29:e8:b1:bb: 2c:91:48:45:e7:69:76:d2:93:ca:61:77:ef:82:24:63:1f:6e: 49:09:a6:7a:ff:bb:38:5b:79:ae:99:e8:5e:d9:ef:75:f0:3d: c5:da:ba:20:ce:48:08:6d:b0:93:15:80:59:fc:48:26:4a:02: 67:c0:f1:0b:c8:d5:df:d9:c2:a4:fb:1b:a3:5e:95:31:9a:55: 91:b7:19:36:80:5b:b4:cc:25:8b:b6:62:36:37:b6:d5:76:01: 96:ed:0c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUxMDE4MTc0MTM0WhcNMjUxMDI1MTc0MTM0WjAYMRYwFAYD VQQDEw02OGYzZDE0Zi03ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6ieQSA76x81cmGsxDBeQEbfeATZhXok9dKY0MZ/+oJXG7gqPuD3WUZybF43 0V7xpI49GkNl51g2l3fsKArfwQlV+gp6v6XrO17rJAK5MtFYIIyRfjoX1IrHycc3 V6Xw1cVV4Kw4BbYRO0Khu5tfkuqlXf+1Zi/nLRi6wBCREZkuPUYk3fudTyXv/tkt VHZLfzFS0PJolmybmzMyVHzVOq4IpgLlU9ji9S3I0gA9RK+6PP0fA3CcCLTBHyph sIoRT5bDf2Zn/CL2SeSlOeLpQhMtNqOLEAGdRh0dAuU4/CLEi5Kuu7NMJVkCC/o7 pLslwcnUpRNGDA7OE3RcWBSy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOialWus dxLgHTBQaORVq/ux51YWMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzalpOx92bwhdGO0wdY8HxXQaLI/TnbvW1p0X8RTu/2T2oRYep6wcX MrwceM65oCspxTHEG2woizzy2lJZjuPjdtLnp8zM4+s8c6IKCjzmWhctQ2PEKYBK nzTWueigm5kKLy8PdMNQTfYa7lJ0S29QzXp0Ky+R62/z7vl9A6+GgkQpzZNz9WU1 oAD64meezjJ/qv5Hh1mJNnRAnUAc7ynosbsskUhF52l20pPKYXfvgiRjH25JCaZ6 /7s4W3mumehe2e918D3F2rogzkgIbbCTFYBZ/EgmSgJnwPELyNXf2cKk+xujXpUx mlWRtxk2gFu0zCWLtmI2N7bVdgGW7QxV -----END CERTIFICATE-----Generated at Mon Oct 20 04:13:42 2025 by rpki-client