$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: Sk7RLeiLGTgl3vUUXFnlWbuw3mUz4wdbD1f5yWMzE8s= Subject key identifier: 21:94:B4:C4:BA:94:CC:05:94:C4:57:15:65:12:D3:38:C9:4D:DC:BD Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0BEF Signing time: Sun 02 Nov 2025 18:50:45 +0000 Manifest this update: Sun 02 Nov 2025 18:50:45 +0000 Manifest next update: Sun 09 Nov 2025 18:50:45 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: /UJ7n99gwsWrYBs+NrmTv5F0CURfYSRm+4+AnIUPyQU=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: 3edR8k68PlyDLwSNioDrZi097Di1Z0qsLBIpivE7sS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Nov 2 18:50:45 2025 GMT Not After : Nov 9 18:50:45 2025 GMT Subject: CN=6907a805-6fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9e:cf:02:ed:62:ca:57:c5:13:0c:b8:1b:8d: 7e:bc:04:3d:87:1f:6e:f5:3b:70:2a:88:38:f0:6c: af:4a:f9:10:5c:d8:4c:d8:4a:ce:75:58:be:b4:3b: bf:75:d1:7f:6d:4f:85:7b:fb:f3:10:55:5b:fb:d6: 1b:64:db:c0:a0:f2:36:53:19:8c:95:ea:73:3c:88: 2a:ec:5a:75:d8:3a:60:a0:5e:92:3c:dd:b0:99:06: 42:ee:16:d9:d9:7b:72:cf:8c:6b:71:2d:c6:04:35: 7e:f1:24:7b:bb:24:6d:e8:0b:4f:92:80:d4:03:f6: 0b:a1:39:eb:f2:00:22:5d:bc:4c:38:f6:a7:75:e7: 1b:b6:6f:f8:c9:40:07:13:47:bd:52:4a:df:1a:f2: d4:a5:f7:e7:d6:94:91:1b:22:b9:95:a7:8b:17:ce: dc:b1:c8:99:91:4c:02:d7:1d:0a:60:bc:9a:b3:e3: 70:20:fa:c6:f6:4f:40:66:c7:1f:aa:a9:98:1c:9e: 46:69:cc:77:f7:a2:41:ea:45:92:d6:67:b3:7b:2e: 05:c2:d9:88:70:8a:7c:6f:e2:98:23:5e:0b:5d:bc: 1c:aa:bd:9b:3a:4b:50:af:13:4c:1e:a0:77:44:6e: 71:61:cf:8d:1e:be:37:07:ca:84:45:6e:d5:ca:99: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:94:B4:C4:BA:94:CC:05:94:C4:57:15:65:12:D3:38:C9:4D:DC:BD X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:38:5d:e0:0b:d0:3f:8b:56:da:7a:64:17:b1:ee:01:a1: 33:8e:24:13:72:47:f3:92:78:d5:a8:85:f4:4d:db:1b:17:1f: 5d:43:fe:12:57:52:18:37:9f:87:b3:b9:7c:f4:ac:a4:fe:1c: 40:56:2e:44:93:ea:40:9c:b5:8e:60:53:fd:cc:a8:24:28:2d: 9b:be:31:be:d8:50:44:74:ef:38:d2:5e:30:20:6b:23:0b:27: fa:24:f9:5d:dc:bc:4c:f1:73:eb:9f:8b:67:d4:e0:55:80:8d: 35:26:06:6f:20:0f:db:57:3c:3a:1b:e7:e5:5f:b8:0e:2d:6e: 3f:5f:ce:47:25:02:d8:f2:23:bd:20:17:d9:7a:bc:dc:45:4b: 1f:48:0b:49:52:b9:88:6a:f2:d8:38:0d:d6:dc:a8:b8:b7:8c: af:33:78:8b:90:05:7f:12:ea:50:56:5f:17:4f:15:15:f7:04: c4:af:d3:2e:e6:6d:07:de:ec:11:dd:28:6c:0e:a1:e6:2e:af: 39:95:a0:8a:50:d2:5f:90:69:5f:e0:54:56:59:2d:0c:a6:70: 04:a3:60:58:4c:24:33:fd:c6:02:86:47:74:2c:58:5d:16:fe: 19:a9:67:51:35:ea:f8:05:ca:87:cb:ab:83:b0:32:2f:59:2c: 91:cd:56:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjUxMTAyMTg1MDQ1WhcNMjUxMTA5MTg1MDQ1WjAYMRYwFAYD VQQDEw02OTA3YTgwNS02ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5p7PAu1iylfFEwy4G41+vAQ9hx9u9TtwKog48GyvSvkQXNhM2ErOdVi+tDu/ ddF/bU+Fe/vzEFVb+9YbZNvAoPI2UxmMlepzPIgq7Fp12DpgoF6SPN2wmQZC7hbZ 2Xtyz4xrcS3GBDV+8SR7uyRt6AtPkoDUA/YLoTnr8gAiXbxMOPandecbtm/4yUAH E0e9UkrfGvLUpffn1pSRGyK5laeLF87csciZkUwC1x0KYLyas+NwIPrG9k9AZscf qqmYHJ5Gacx396JB6kWS1mezey4FwtmIcIp8b+KYI14LXbwcqr2bOktQrxNMHqB3 RG5xYc+NHr43B8qERW7VyplXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGUtMS6 lMwFlMRXFWUS0zjJTdy9MB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMThd4AvQP4tW2npkF7HuAaEzjiQTckfzknjVqIX0TdsbFx9dQ/4S V1IYN5+Hs7l89Kyk/hxAVi5Ek+pAnLWOYFP9zKgkKC2bvjG+2FBEdO840l4wIGsj Cyf6JPld3LxM8XPrn4tn1OBVgI01JgZvIA/bVzw6G+flX7gOLW4/X85HJQLY8iO9 IBfZerzcRUsfSAtJUrmIavLYOA3W3Ki4t4yvM3iLkAV/EupQVl8XTxUV9wTEr9Mu 5m0H3uwR3ShsDqHmLq85laCKUNJfkGlf4FRWWS0MpnAEo2BYTCQz/cYChkd0LFhd Fv4ZqWdRNer4BcqHy6uDsDIvWSyRzVYg -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:32 2025 by rpki-client