$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json) Hash identifier: juRW0R+Pw5hogUOMOUqmsT0rRvAw5KIRBCAuK2fHSFw= Subject key identifier: 46:11:AB:42:2B:D7:2E:72:41:72:AA:E9:75:9C:51:D8:AD:4C:84:D8 Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft Manifest number: 029C Signing time: Wed 05 Nov 2025 01:38:21 +0000 Manifest this update: Wed 05 Nov 2025 01:38:21 +0000 Manifest next update: Wed 12 Nov 2025 01:38:21 +0000 Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: od26x0mNp9Z1e/lYOig6PU+ruY6XBB+daHtAcfA4uYo=) 2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: 27aLcYczZ5MYFXDnhdewNPk3kbRzrioX5es/1Wn4iNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Nov 5 01:38:21 2025 GMT Not After : Nov 12 01:38:21 2025 GMT Subject: CN=690aaa8d-0e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:a3:7a:68:ac:30:bf:fb:f6:e9:6c:44:08: 09:7b:ce:3b:a7:04:0a:7d:2e:7e:bb:46:84:89:5f: 4c:47:80:a5:c0:aa:88:cd:20:37:99:e6:ee:be:5e: bb:b2:2f:1a:31:46:f2:e9:4a:19:17:89:f3:cf:c5: a8:d8:68:ed:77:ca:4e:ee:d6:ac:ba:4d:fa:06:1b: 4f:6d:f3:09:70:2a:e7:4a:fb:3e:9e:04:b2:f0:f9: 4f:21:56:a5:cc:67:30:fc:1f:54:e7:72:6c:e4:4a: fa:aa:fa:ff:5f:73:58:e7:95:09:d8:12:26:73:0f: bb:e3:61:55:df:dd:62:cb:bb:f7:19:ef:66:82:da: 30:f4:46:a9:e6:fc:6e:24:c3:69:a1:e8:14:b7:95: 0b:1f:16:20:2d:f6:b0:ef:24:de:f8:8a:71:ed:17: cc:e6:18:10:34:fd:25:4b:bb:82:14:28:b2:71:34: 0e:0b:76:53:63:60:6b:fe:d1:46:b5:86:59:bd:47: d3:75:1c:21:56:60:22:e2:fc:a4:d7:3a:66:1d:a5: 08:1d:4b:9e:24:35:92:00:85:dd:d7:f8:0d:d8:af: de:fe:0d:5b:72:3e:85:c5:0f:b2:8b:09:59:21:bd: 93:5a:1e:05:38:aa:1b:cf:56:77:13:38:91:72:b3: 55:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:11:AB:42:2B:D7:2E:72:41:72:AA:E9:75:9C:51:D8:AD:4C:84:D8 X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:cf:fd:c2:67:8d:06:d0:e5:52:85:08:4a:17:18:95:90:b6: 1d:9b:9f:e9:f4:70:e7:c1:1b:de:7f:cc:c3:cb:e6:b9:cc:c3: 05:f7:22:d1:f1:62:3b:94:40:33:8e:02:e1:c8:b3:0f:31:87: b0:dd:b7:b0:02:ee:68:8a:7d:5b:f7:e4:e3:45:8c:55:ec:a0: e2:de:91:6c:f3:11:47:66:a6:e0:e4:6c:6b:9f:06:bf:42:73: 73:5f:b8:e1:3d:d3:99:51:af:e7:f5:1f:2c:cd:67:1c:35:60: ab:32:98:9c:91:14:05:61:f6:80:b8:68:1c:d0:56:d6:b6:21: a5:7a:cb:21:0a:bf:f5:af:f9:43:03:61:1c:78:1a:7a:f7:f5: 7a:f3:7b:47:b1:fb:b0:82:9e:71:a3:ed:22:83:98:b3:e9:83: 28:a4:44:59:98:17:65:b8:c9:f3:55:fe:9e:36:e6:6a:45:f5: ca:eb:f7:ce:30:b9:16:45:c7:ff:d1:75:76:f6:d6:c1:94:c6: 4a:1b:c3:4f:ab:c5:e1:4f:f7:42:73:09:6a:86:92:56:3c:6b: ac:23:a2:74:5f:74:0b:bc:ba:ea:37:1a:37:09:00:6b:f4:29: 6c:d4:89:e3:f6:ba:b5:17:fc:3a:00:cf:31:58:05:f5:c4:50: e4:93:59:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjUxMTA1MDEzODIxWhcNMjUxMTEyMDEzODIxWjAYMRYwFAYD VQQDEw02OTBhYWE4ZC0wZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFCjemisML/79ulsRAgJe847pwQKfS5+u0aEiV9MR4ClwKqIzSA3mebuvl67 si8aMUby6UoZF4nzz8Wo2Gjtd8pO7tasuk36BhtPbfMJcCrnSvs+ngSy8PlPIVal zGcw/B9U53Js5Er6qvr/X3NY55UJ2BImcw+742FV391iy7v3Ge9mgtow9Eap5vxu JMNpoegUt5ULHxYgLfaw7yTe+Ipx7RfM5hgQNP0lS7uCFCiycTQOC3ZTY2Br/tFG tYZZvUfTdRwhVmAi4vyk1zpmHaUIHUueJDWSAIXd1/gN2K/e/g1bcj6FxQ+yiwlZ Ib2TWh4FOKobz1Z3EziRcrNV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYRq0Ir 1y5yQXKq6XWcUditTITYMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4z/3CZ40G0OVShQhKFxiVkLYdm5/p9HDnwRvef8zDy+a5zMMF9yLR 8WI7lEAzjgLhyLMPMYew3bewAu5oin1b9+TjRYxV7KDi3pFs8xFHZqbg5Gxrnwa/ QnNzX7jhPdOZUa/n9R8szWccNWCrMpickRQFYfaAuGgc0FbWtiGlesshCr/1r/lD A2EceBp69/V683tHsfuwgp5xo+0ig5iz6YMopERZmBdluMnzVf6eNuZqRfXK6/fO MLkWRcf/0XV29tbBlMZKG8NPq8XhT/dCcwlqhpJWPGusI6J0X3QLvLrqNxo3CQBr 9Cls1Inj9rq1F/w6AM8xWAX1xFDkk1ml -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:50 2025 by rpki-client