$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: 2ZCZoJIrWQ1ZC4ieLJ76DXT15R40bOnm2/dwdl+Bweg= Subject key identifier: C1:01:DB:86:B2:62:76:BB:BA:69:0D:FE:3B:F5:8E:0E:C4:AD:4A:A5 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 022D Signing time: Mon 03 Nov 2025 01:54:18 +0000 Manifest this update: Mon 03 Nov 2025 01:54:17 +0000 Manifest next update: Mon 10 Nov 2025 01:54:17 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: lFOCU4HRJ++CG7HOt52e6aDjTKq/TUlzkTgx4vJh1ww=) 2: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (hash: 06OWDIqMBpACeuE4oEOzcbVBDwiweM8yZ9MBzLlKdEk=) 3: 38C8C2E6B3FF11F0B056312DC4F9AE02.roa (hash: eGvi9ehXeYJN73mQ/IC0/2k5dRBhN6mtIFIP3LLFsyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Nov 3 01:54:17 2025 GMT Not After : Nov 10 01:54:17 2025 GMT Subject: CN=69080b4a-b620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:ca:a4:b0:12:64:ce:0c:18:12:89:5d:19: eb:61:bf:d6:15:4b:31:2e:97:c3:d7:b2:49:27:b3: 4d:be:34:e6:6f:7c:7a:48:1a:9e:26:80:9d:b3:60: 5e:74:76:f4:2b:25:69:8a:56:be:12:61:46:4d:06: 5d:50:f2:82:a6:6a:cc:8f:f4:4c:b1:d6:ec:6d:56: 7d:e7:ae:67:8d:8f:cd:fa:77:03:10:a1:0c:1f:02: 39:0c:9f:d2:f5:04:aa:ac:6d:ca:f0:fa:49:db:c9: 4b:d0:0d:3a:4f:69:be:29:ab:3d:d5:58:36:59:80: 10:f0:1d:e1:c5:80:d9:3d:bd:2e:f6:8b:48:4b:59: bb:40:bb:1f:41:6f:05:bc:71:1c:75:ff:d8:13:d0: 65:55:a6:75:2a:44:9c:b2:c1:69:fd:94:2c:d2:9e: d5:65:2c:7c:79:a4:5d:6d:37:d1:ea:09:6a:dd:67: 47:f4:f5:29:c7:77:a1:04:32:66:e3:7d:a6:d6:c5: 64:36:be:d9:fb:8d:95:34:86:b4:5e:23:60:d2:c6: 0e:cf:21:8a:8d:8e:89:b1:4c:25:d0:f2:ac:44:9f: a3:76:d7:aa:9f:a4:db:a9:4f:f3:02:5e:c3:c6:76: 2c:95:5f:89:9d:66:09:4c:54:27:75:ef:51:77:95: bf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:DB:86:B2:62:76:BB:BA:69:0D:FE:3B:F5:8E:0E:C4:AD:4A:A5 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:23:42:20:e2:77:f1:6f:8c:87:cb:82:c2:89:19:04:36:f2: dc:c1:08:dc:92:1b:cc:d5:76:c7:db:9b:06:9a:6b:0a:03:ee: 7b:e3:63:19:b2:21:81:2f:fd:d0:23:75:05:75:d8:a8:9c:74: 5c:2d:49:f1:f2:e5:5c:9c:3b:28:01:69:31:83:50:a5:8b:6e: e9:c4:13:fb:d8:b3:15:26:b7:7c:45:77:bd:7c:9d:16:1b:1c: a0:a9:e4:a9:ab:f0:e1:45:b3:cb:80:25:1a:06:bf:47:17:cb: 08:a6:da:aa:48:c6:a3:a0:47:85:ce:c9:d0:9e:8f:a7:21:eb: 28:2d:5e:62:31:98:e1:ad:b8:92:30:bd:4f:e1:30:00:a5:7e: fb:e8:7a:68:28:ee:bc:ab:26:6a:36:47:db:ab:7a:c0:a6:77: c5:06:73:f6:e3:6c:8e:b0:57:10:67:34:48:0a:a9:05:a3:7e: ee:6f:07:59:b9:cf:a6:de:d0:c8:5f:8a:99:d3:cd:6b:87:f8: 6d:2e:52:de:10:37:4a:6e:0a:55:7b:e2:4c:78:81:3d:3a:0e: 37:10:8e:4d:0d:f9:9a:bc:ba:8d:4c:52:c7:1a:51:44:15:e9: 6f:52:47:b5:02:91:76:0a:74:3a:00:94:6f:34:0d:b2:46:26: fd:97:db:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUxMTAzMDE1NDE3WhcNMjUxMTEwMDE1NDE3WjAYMRYwFAYD VQQDEw02OTA4MGI0YS1iNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0XKpLASZM4MGBKJXRnrYb/WFUsxLpfD17JJJ7NNvjTmb3x6SBqeJoCds2Be dHb0KyVpila+EmFGTQZdUPKCpmrMj/RMsdbsbVZ9565njY/N+ncDEKEMHwI5DJ/S 9QSqrG3K8PpJ28lL0A06T2m+Kas91Vg2WYAQ8B3hxYDZPb0u9otIS1m7QLsfQW8F vHEcdf/YE9BlVaZ1KkScssFp/ZQs0p7VZSx8eaRdbTfR6glq3WdH9PUpx3ehBDJm 432m1sVkNr7Z+42VNIa0XiNg0sYOzyGKjY6JsUwl0PKsRJ+jdteqn6TbqU/zAl7D xnYslV+JnWYJTFQnde9Rd5W//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEB24ay Yna7umkN/jv1jg7ErUqlMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyI0Ig4nfxb4yHy4LCiRkENvLcwQjckhvM1XbH25sGmmsKA+5742MZ siGBL/3QI3UFddionHRcLUnx8uVcnDsoAWkxg1Cli27pxBP72LMVJrd8RXe9fJ0W GxygqeSpq/DhRbPLgCUaBr9HF8sIptqqSMajoEeFzsnQno+nIesoLV5iMZjhrbiS ML1P4TAApX776HpoKO68qyZqNkfbq3rApnfFBnP242yOsFcQZzRICqkFo37ubwdZ uc+m3tDIX4qZ081rh/htLlLeEDdKbgpVe+JMeIE9Og43EI5NDfmavLqNTFLHGlFE FelvUke1ApF2CnQ6AJRvNA2yRib9l9s1 -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:18 2025 by rpki-client