$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: 433WLpnEG4JZxaG7DPCLxE6gbI0GBmHqfnlh5I4PLXs= Subject key identifier: 93:02:09:D8:D6:31:E8:E8:15:89:86:A6:25:E6:00:44:6F:03:4D:C1 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 017B Signing time: Mon 03 Nov 2025 03:47:18 +0000 Manifest this update: Mon 03 Nov 2025 03:47:18 +0000 Manifest next update: Mon 10 Nov 2025 03:47:18 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: wnbgQJdKV7DK/UyuyGfyZKIYeZF9nFITZc//Zzp4AIk=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Nov 3 03:47:18 2025 GMT Not After : Nov 10 03:47:18 2025 GMT Subject: CN=690825c6-5df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:71:a9:04:89:9f:c1:f9:91:6b:b5:e0:ad: a2:72:91:aa:ea:f7:c7:8a:e6:da:e5:d6:bf:75:b0: b3:63:93:f8:6a:f7:3f:43:2a:d5:1c:40:22:ad:a4: 91:fc:13:5f:6b:ce:59:4c:c2:a8:44:4c:f6:98:a3: c4:2c:b0:2e:af:f0:6e:4c:f0:4b:cd:af:22:a4:c3: 59:fb:9d:4b:0f:ac:62:c3:9e:75:af:98:fc:cf:fe: a5:b2:ca:5c:61:88:f9:fb:67:60:da:4f:9c:be:f6: b3:1b:b1:84:a5:14:5a:b7:cd:96:6e:20:e9:27:5e: b4:07:96:6f:66:ab:a0:30:0c:1c:87:6a:bd:e0:95: 23:1f:92:3a:c4:47:f2:09:03:d9:f6:59:b6:64:69: 4b:f8:cd:c1:65:2c:8c:f5:17:c7:7f:0d:34:11:71: 29:f6:5f:4b:72:e6:57:8a:2b:6d:19:7c:83:6e:28: 2f:aa:f2:21:60:a2:11:ed:68:af:45:f9:66:2e:dc: 17:1b:93:cd:fd:c5:8e:bd:b8:b4:40:e6:7f:df:19: 9f:f8:52:b7:52:6a:1f:46:94:48:b3:1e:2f:c9:da: a1:c6:13:93:02:84:df:22:f7:22:6c:49:0a:25:ff: be:84:f1:8b:6a:98:1c:97:b5:a8:f4:02:71:a0:26: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:09:D8:D6:31:E8:E8:15:89:86:A6:25:E6:00:44:6F:03:4D:C1 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:39:d1:6a:a5:09:60:41:2e:d2:2b:db:e7:e4:a0:86:c5:09: 40:b0:29:33:f4:b7:8e:b5:05:26:be:8f:16:42:61:4e:e4:64: 62:b0:74:d3:20:f3:ea:b9:d5:ae:8f:f4:a7:b7:a7:8e:2e:fe: f3:be:65:eb:73:b4:c7:19:7e:33:67:cc:5f:4b:5f:c0:bf:9e: 65:4c:48:ba:30:d4:17:e7:66:0a:6d:c5:de:22:dd:1f:4b:ae: 33:6e:68:4a:20:ca:4c:c4:14:b7:98:31:5b:a9:fc:d1:b3:ef: 66:46:8e:f3:42:cb:84:dc:d4:24:ff:4a:75:27:e2:e6:00:79: 12:4b:1b:b4:95:99:23:9e:30:30:27:58:da:64:72:2b:db:85: a7:33:7c:e5:77:48:85:6f:42:8f:a5:3e:ac:c1:dd:a8:9c:0e: 30:22:83:05:d2:27:7f:8d:d8:8c:1d:2a:86:fe:07:7d:1a:62: 90:5f:c3:89:0a:3a:5e:ff:1c:63:aa:d4:ce:e1:30:2d:bb:72: 70:dc:c0:d0:29:d2:1b:06:91:79:63:a2:7a:32:4e:2e:5c:34: fd:7a:db:d7:44:30:5b:f4:74:b9:a2:05:d3:45:29:9b:7c:9f: 4e:c7:c6:80:53:44:65:eb:07:2d:70:99:a9:7f:02:08:a0:67: c5:9f:20:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjUxMTAzMDM0NzE4WhcNMjUxMTEwMDM0NzE4WjAYMRYwFAYD VQQDEw02OTA4MjVjNi01ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhNxqQSJn8H5kWu14K2icpGq6vfHiuba5da/dbCzY5P4avc/QyrVHEAiraSR /BNfa85ZTMKoREz2mKPELLAur/BuTPBLza8ipMNZ+51LD6xiw551r5j8z/6lsspc YYj5+2dg2k+cvvazG7GEpRRat82WbiDpJ160B5ZvZqugMAwch2q94JUjH5I6xEfy CQPZ9lm2ZGlL+M3BZSyM9RfHfw00EXEp9l9LcuZXiittGXyDbigvqvIhYKIR7Wiv RflmLtwXG5PN/cWOvbi0QOZ/3xmf+FK3UmofRpRIsx4vydqhxhOTAoTfIvcibEkK Jf++hPGLapgcl7Wo9AJxoCYPwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMCCdjW MejoFYmGpiXmAERvA03BMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2OdFqpQlgQS7SK9vn5KCGxQlAsCkz9LeOtQUmvo8WQmFO5GRisHTT IPPqudWuj/Snt6eOLv7zvmXrc7THGX4zZ8xfS1/Av55lTEi6MNQX52YKbcXeIt0f S64zbmhKIMpMxBS3mDFbqfzRs+9mRo7zQsuE3NQk/0p1J+LmAHkSSxu0lZkjnjAw J1jaZHIr24WnM3zld0iFb0KPpT6swd2onA4wIoMF0id/jdiMHSqG/gd9GmKQX8OJ Cjpe/xxjqtTO4TAtu3Jw3MDQKdIbBpF5Y6J6Mk4uXDT9etvXRDBb9HS5ogXTRSmb fJ9Ox8aAU0Rl6wctcJmpfwIIoGfFnyDz -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:42 2025 by rpki-client