$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: j6SjodkSIS/rMSEhXohwLVMKww/SiZeuJ+kCzw6OaCg= Subject key identifier: 88:77:69:DA:A4:DD:54:7D:F6:E0:EF:E4:F1:AE:97:04:32:29:BC:EB Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 07E2 Signing time: Sun 02 Nov 2025 21:06:07 +0000 Manifest this update: Sun 02 Nov 2025 21:06:06 +0000 Manifest next update: Sun 09 Nov 2025 21:06:06 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: c/JOOXy30FrHRdLaaDyXZ6p0wQ+HRwFmiC+JS7eM6wY=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Nov 2 21:06:06 2025 GMT Not After : Nov 9 21:06:06 2025 GMT Subject: CN=6907c7be-7f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:da:a8:a2:03:fb:92:1f:a6:23:ee:c8:7d: 62:3d:e0:40:d9:31:aa:5e:66:cf:3d:15:b2:02:6c: 27:6e:18:6b:fa:ac:e4:f1:b8:8d:40:73:08:61:71: 2b:31:f8:5e:6c:df:9a:ca:3e:09:8c:2c:e0:f3:83: 53:e0:c0:96:fc:7d:93:ce:a2:a6:54:0d:7a:14:68: d6:47:b0:50:50:31:b6:cd:7c:f6:de:9b:81:33:26: e2:b4:e9:86:54:3e:ff:ea:88:a4:b2:39:7a:07:5b: d4:55:18:3c:6b:ac:03:3c:37:65:a3:50:b4:03:49: f2:fe:a6:73:fb:ed:b3:b0:7b:ab:03:22:1e:3e:4c: 22:78:25:73:22:2c:b4:bf:87:a7:cb:de:a1:6b:8a: 9b:b6:7a:69:8c:f6:06:09:32:8e:f2:68:b8:8f:96: b8:11:1a:ae:9b:17:ae:3d:78:57:bf:f2:e4:8d:f9: 3d:56:0d:d8:c7:4c:86:fa:2b:a6:79:15:44:9f:0a: 0d:9e:8a:d1:64:ef:ce:75:58:55:19:a8:b2:8a:0e: 54:81:55:c1:7d:1d:fd:c2:08:36:89:84:04:0a:99: c5:73:71:70:08:48:fe:9f:43:3a:29:36:08:c4:4d: ec:a8:d2:65:ef:3d:41:f0:e9:c4:bd:c9:6d:c0:87: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:77:69:DA:A4:DD:54:7D:F6:E0:EF:E4:F1:AE:97:04:32:29:BC:EB X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f1:cb:c2:7e:06:9d:57:0f:76:11:db:e5:d0:75:0d:5e:73: 6c:f9:05:dc:26:b4:5e:72:93:3c:9d:6f:a6:74:b4:b6:c9:94: 2e:8d:2e:15:f3:5b:49:cb:c7:6d:bb:41:2b:c3:b4:64:57:bf: 64:93:43:71:8d:06:cd:9e:ff:6f:c1:e1:82:d7:c5:bb:b7:31: 29:c8:73:c7:f3:e2:30:b5:93:ae:76:65:a5:53:00:d3:e2:e0: 0b:c6:e2:d7:94:3e:a0:a7:68:37:ae:3e:d1:b5:44:6f:fa:ef: f9:c6:4d:07:7c:8e:fc:7d:55:30:9c:1c:3b:ea:b8:65:f8:4b: fa:24:5b:8d:b0:db:23:a2:37:10:55:b8:43:28:a9:da:36:26: ba:43:90:0a:37:02:c9:86:b8:92:f4:6d:03:6a:9e:46:ab:7a: d1:f4:3b:a4:cb:a5:75:f3:cd:ac:7e:92:71:0b:0b:4a:34:36: 31:00:17:a9:d3:dd:c7:b7:d4:25:f6:64:fe:8a:e4:f6:e7:5a: 9c:dd:1f:9e:0d:58:77:84:e0:e1:b9:bb:cd:d0:3b:ce:3f:6b: f2:76:c9:09:2e:09:0b:bc:8f:cf:50:54:a9:53:1d:e7:75:f1: 1e:40:39:78:1b:e1:46:b1:f6:79:bb:95:ed:79:fe:98:a8:0f: 50:2a:ac:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUxMTAyMjEwNjA2WhcNMjUxMTA5MjEwNjA2WjAYMRYwFAYD VQQDEw02OTA3YzdiZS03Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiraqKID+5IfpiPuyH1iPeBA2TGqXmbPPRWyAmwnbhhr+qzk8biNQHMIYXEr MfhebN+ayj4JjCzg84NT4MCW/H2TzqKmVA16FGjWR7BQUDG2zXz23puBMybitOmG VD7/6oiksjl6B1vUVRg8a6wDPDdlo1C0A0ny/qZz++2zsHurAyIePkwieCVzIiy0 v4eny96ha4qbtnppjPYGCTKO8mi4j5a4ERqumxeuPXhXv/Lkjfk9Vg3Yx0yG+ium eRVEnwoNnorRZO/OdVhVGaiyig5UgVXBfR39wgg2iYQECpnFc3FwCEj+n0M6KTYI xE3sqNJl7z1B8OnEvcltwIc0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh3adqk 3VR99uDv5PGulwQyKbzrMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl8cvCfgadVw92Edvl0HUNXnNs+QXcJrRecpM8nW+mdLS2yZQujS4V 81tJy8dtu0Erw7RkV79kk0NxjQbNnv9vweGC18W7tzEpyHPH8+IwtZOudmWlUwDT 4uALxuLXlD6gp2g3rj7RtURv+u/5xk0HfI78fVUwnBw76rhl+Ev6JFuNsNsjojcQ VbhDKKnaNia6Q5AKNwLJhriS9G0Dap5Gq3rR9Duky6V1882sfpJxCwtKNDYxABep 093Ht9Ql9mT+iuT251qc3R+eDVh3hODhubvN0DvOP2vydskJLgkLvI/PUFSpUx3n dfEeQDl4G+FGsfZ5u5Xtef6YqA9QKqzs -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:04 2025 by rpki-client