$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: 9bU69Yv8GzKuu0epB8lwdTj6OH6i4ved27W6pXTQAQs= Subject key identifier: C5:9E:43:D6:F1:3C:CD:DE:E8:93:BF:DA:60:C7:D6:44:C8:88:11:7A Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 0135 Signing time: Wed 05 Nov 2025 04:37:45 +0000 Manifest this update: Wed 05 Nov 2025 04:37:45 +0000 Manifest next update: Wed 12 Nov 2025 04:37:45 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: RSus/3TPIW+zt88IYzBeAPgBsYRvclqRJoqkg2rj6Qk=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: T4vR48N6YhwHqTHzqOptSkBSTlUWr6Qnyq5t5xi8rho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Nov 5 04:37:45 2025 GMT Not After : Nov 12 04:37:45 2025 GMT Subject: CN=690ad499-f99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:31:56:d4:4d:45:ca:a5:24:27:f4:24:7b: 09:8a:d2:ae:aa:17:1e:d9:b6:10:51:15:7c:c5:4f: 6c:86:6e:35:d0:74:56:0f:61:1f:10:ee:6c:66:03: 6d:91:55:f1:fd:80:92:97:7c:43:15:b6:c7:06:e1: 66:1a:c8:4d:36:e3:50:bf:d1:6f:ce:ba:79:cd:96: d0:89:f5:92:cd:74:85:23:b6:6c:4c:2b:c7:81:33: c9:0e:34:cd:22:92:60:c1:3d:a4:ba:65:7a:42:fc: 9e:ac:66:d4:27:fd:ad:67:00:6d:35:ea:37:0f:73: 40:63:ba:68:d3:68:43:e7:99:1f:58:19:1b:c3:29: e6:91:03:b6:f3:ec:2e:71:37:49:64:77:f2:60:a8: 94:1c:80:9d:2c:97:8a:54:fd:e3:de:70:42:94:ec: 03:b3:d1:36:a8:d9:af:5c:7b:fc:96:86:31:88:9a: b9:74:67:fe:7a:64:55:eb:d0:d9:96:3e:b5:bb:22: 1a:91:e3:62:bc:f0:00:3f:da:55:57:95:71:39:9d: 72:a1:49:7c:5c:e2:fc:61:d6:4f:19:93:61:83:66: a5:f3:7e:3c:af:fb:41:06:b9:28:0a:fe:ff:fb:8d: 0c:13:01:ef:b0:85:28:c6:5d:22:7c:41:f1:0a:3b: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:43:D6:F1:3C:CD:DE:E8:93:BF:DA:60:C7:D6:44:C8:88:11:7A X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:66:20:2a:19:28:72:e0:59:e4:5e:18:01:fa:de:18:7a:bd: b2:2a:c6:b8:26:c7:41:d5:41:03:cd:29:07:a9:87:ac:2b:30: a2:14:b4:5b:87:cc:dc:21:bc:91:84:c0:85:8d:a8:ae:9f:8f: 5e:10:20:03:e4:9f:40:2c:7a:80:d7:e6:5e:59:a3:c3:aa:d6: ed:66:b8:7b:d4:5e:b5:73:57:5a:2d:b2:f6:1e:4e:e5:1a:ea: 67:f7:f3:d6:35:84:11:e3:f8:88:8f:8b:99:51:51:03:34:41: 1a:29:87:9b:06:b5:08:24:a0:85:50:ac:c0:84:9c:b1:24:14: 76:e1:7f:29:f1:c3:bc:5c:35:b6:32:e9:4a:b0:f6:79:d4:9d: f8:4e:a5:7b:bc:a9:55:e0:ee:bd:2c:65:88:da:7e:bf:5f:56: aa:b5:97:78:5b:fc:2f:19:33:09:01:24:83:b3:04:60:44:0a: b0:f6:47:7e:92:39:98:5a:ba:2c:e3:69:f6:cd:4c:ef:72:67: 41:2f:00:7d:bc:95:4a:ee:ee:2e:34:fb:9f:54:8e:7d:25:27: 27:ad:74:d5:ad:22:d6:7b:02:00:20:39:cd:c5:f6:2a:0c:66: b8:98:75:bb:d9:77:6f:43:40:76:7f:f0:4f:be:5b:ba:8d:1b: 3f:12:fb:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUxMTA1MDQzNzQ1WhcNMjUxMTEyMDQzNzQ1WjAYMRYwFAYD VQQDEw02OTBhZDQ5OS1mOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wkxVtRNRcqlJCf0JHsJitKuqhce2bYQURV8xU9shm410HRWD2EfEO5sZgNt kVXx/YCSl3xDFbbHBuFmGshNNuNQv9Fvzrp5zZbQifWSzXSFI7ZsTCvHgTPJDjTN IpJgwT2kumV6QvyerGbUJ/2tZwBtNeo3D3NAY7po02hD55kfWBkbwynmkQO28+wu cTdJZHfyYKiUHICdLJeKVP3j3nBClOwDs9E2qNmvXHv8loYxiJq5dGf+emRV69DZ lj61uyIakeNivPAAP9pVV5VxOZ1yoUl8XOL8YdZPGZNhg2al8348r/tBBrkoCv7/ +40MEwHvsIUoxl0ifEHxCjvKkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWeQ9bx PM3e6JO/2mDH1kTIiBF6MB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDZiAqGShy4FnkXhgB+t4Yer2yKsa4JsdB1UEDzSkHqYesKzCiFLRb h8zcIbyRhMCFjaiun49eECAD5J9ALHqA1+ZeWaPDqtbtZrh71F61c1daLbL2Hk7l Gupn9/PWNYQR4/iIj4uZUVEDNEEaKYebBrUIJKCFUKzAhJyxJBR24X8p8cO8XDW2 MulKsPZ51J34TqV7vKlV4O69LGWI2n6/X1aqtZd4W/wvGTMJASSDswRgRAqw9kd+ kjmYWros42n2zUzvcmdBLwB9vJVK7u4uNPufVI59JScnrXTVrSLWewIAIDnNxfYq DGa4mHW72XdvQ0B2f/BPvlu6jRs/Evsg -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:47 2025 by rpki-client