$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: 0FUeEz3EEgLgHgkl1cgq+yJzgtbE4K7RezZnJwoI0II= Subject key identifier: 33:86:64:E6:FD:7C:48:C3:06:C1:13:19:D6:AB:FD:74:CE:D7:AE:02 Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 06A3 Signing time: Sun 02 Nov 2025 14:51:36 +0000 Manifest this update: Sun 02 Nov 2025 14:51:35 +0000 Manifest next update: Sun 09 Nov 2025 14:51:35 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: +uZ6zxfELEdon30yA3WDvYUUm5RwkFkI6uZtFD5bcLc=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: Nov 2 14:51:35 2025 GMT Not After : Nov 9 14:51:35 2025 GMT Subject: CN=69076ff8-8d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:7e:68:62:43:44:0c:b8:a5:b1:53:48:83: 5a:c3:00:dc:8b:50:01:3b:09:af:b3:d2:4e:26:49: 04:25:d0:ad:45:08:d6:88:a0:72:98:e2:c0:97:02: cc:05:ac:f5:22:0c:aa:72:0b:5b:50:ac:9d:cb:48: 71:f7:0a:3f:5f:38:da:08:37:b0:f9:8f:a3:93:1f: 69:4d:ba:d7:38:13:41:c0:15:71:31:74:a8:5f:52: 22:f4:be:76:db:31:72:c9:b8:12:81:f2:0b:3c:d3: a4:ba:20:94:43:5c:26:01:15:67:0a:ba:c6:1d:95: ee:fb:72:35:c6:f1:8c:76:ec:7e:07:84:64:9e:7b: 97:da:f2:3b:a1:12:c4:12:94:ed:5c:8b:ce:01:99: d0:dd:bc:0b:8c:a3:16:e4:6b:4e:20:f0:b9:70:30: cf:f8:05:05:7a:5c:cd:8e:8c:b8:6d:ba:9c:c3:11: c2:1d:dc:cc:24:a4:d9:aa:3a:47:85:8d:a6:ed:bc: 87:bf:15:2f:06:29:16:38:6c:44:80:66:6e:f5:09: 66:d5:6a:97:3c:ed:4c:cf:90:e8:61:f8:fa:2a:59: e5:28:37:eb:72:ad:13:94:40:fb:9d:b4:8a:ee:58: 8b:04:08:73:91:d1:95:2a:9a:6f:6e:44:f4:d0:e2: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:86:64:E6:FD:7C:48:C3:06:C1:13:19:D6:AB:FD:74:CE:D7:AE:02 X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e3:08:bc:89:3a:55:90:9a:84:4c:01:fd:b0:1a:f3:82:a0: a9:a0:6b:23:18:ef:75:34:f8:db:f2:b3:bc:2b:dc:8e:52:8e: b2:45:59:7e:2b:0f:9b:46:e5:2f:fa:71:7e:dd:65:a0:5c:be: d3:3e:9f:18:c3:c3:a0:0f:65:0e:f5:33:34:6c:7e:b6:b0:6f: 9c:66:be:ad:ae:bd:b4:d2:72:c0:72:da:c9:20:2b:3a:da:b6: e8:a4:fd:32:2a:fd:1e:a5:52:43:95:8d:7b:83:23:d5:5b:ae: 83:56:d7:fb:37:ab:f5:5a:a0:9c:ca:81:81:95:e1:be:b6:9b: 7c:bf:bb:29:f6:3b:f3:8c:60:a6:14:56:7d:b8:95:e3:b8:5e: 26:63:57:2b:36:37:73:11:a0:d6:61:d8:fa:76:d6:2a:86:07: ed:d6:31:fc:13:5c:93:fe:97:d6:54:e2:e5:95:de:76:cd:18: af:36:7f:a5:2c:56:16:7d:c5:51:8f:89:ad:2b:fe:ba:60:3f: b3:e4:12:22:3b:e0:0e:99:14:7a:11:12:d4:d9:0f:4d:87:c7: c3:2f:64:6b:24:3d:04:3d:e2:a0:c9:c4:73:cf:46:9c:0f:8e: b5:f1:78:5a:58:b6:62:cb:58:48:54:75:76:28:92:f4:c8:f7: 13:95:f6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUxMTAyMTQ1MTM1WhcNMjUxMTA5MTQ1MTM1WjAYMRYwFAYD VQQDEw02OTA3NmZmOC04ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlyt+aGJDRAy4pbFTSINawwDci1ABOwmvs9JOJkkEJdCtRQjWiKBymOLAlwLM Baz1IgyqcgtbUKydy0hx9wo/XzjaCDew+Y+jkx9pTbrXOBNBwBVxMXSoX1Ii9L52 2zFyybgSgfILPNOkuiCUQ1wmARVnCrrGHZXu+3I1xvGMdux+B4RknnuX2vI7oRLE EpTtXIvOAZnQ3bwLjKMW5GtOIPC5cDDP+AUFelzNjoy4bbqcwxHCHdzMJKTZqjpH hY2m7byHvxUvBikWOGxEgGZu9Qlm1WqXPO1Mz5DoYfj6KlnlKDfrcq0TlED7nbSK 7liLBAhzkdGVKppvbkT00OInRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOGZOb9 fEjDBsETGdar/XTO164CMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj4wi8iTpVkJqETAH9sBrzgqCpoGsjGO91NPjb8rO8K9yOUo6yRVl+ Kw+bRuUv+nF+3WWgXL7TPp8Yw8OgD2UO9TM0bH62sG+cZr6trr200nLActrJICs6 2rbopP0yKv0epVJDlY17gyPVW66DVtf7N6v1WqCcyoGBleG+tpt8v7sp9jvzjGCm FFZ9uJXjuF4mY1crNjdzEaDWYdj6dtYqhgft1jH8E1yT/pfWVOLlld52zRivNn+l LFYWfcVRj4mtK/66YD+z5BIiO+AOmRR6ERLU2Q9Nh8fDL2RrJD0EPeKgycRzz0ac D4618XhaWLZiy1hIVHV2KJL0yPcTlfYL -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:31 2025 by rpki-client