$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: XrT53XpXBRn9LgBIoMiZaqGh7oz4D6a2+qqRWraHhiQ= Subject key identifier: E8:E6:81:2E:69:A8:B0:62:2E:09:44:2C:80:E0:2F:91:7C:81:EC:B6 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 01AC Signing time: Mon 03 Nov 2025 03:10:32 +0000 Manifest this update: Mon 03 Nov 2025 03:10:31 +0000 Manifest next update: Mon 10 Nov 2025 03:10:31 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: snvNinkGN9Tt2VCat4VviWepo550dxjVC7DzeutnCWM=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Nov 3 03:10:31 2025 GMT Not After : Nov 10 03:10:31 2025 GMT Subject: CN=69081d28-db9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:00:90:a3:9c:80:99:73:29:a7:1f:19:91: 51:c1:37:23:b3:29:69:4d:73:25:78:7e:84:43:76: 3a:84:77:44:58:2c:7c:1e:17:35:7a:ed:4e:98:81: 0c:c1:ee:1f:3a:04:22:81:2b:22:98:1f:39:b9:0d: 18:dd:75:c8:bb:17:45:e1:0e:34:c8:ba:81:f6:28: 98:26:7d:a6:99:18:bf:ed:2e:77:18:b8:d6:12:28: 9a:da:0d:3d:1b:b8:1a:9e:6b:c8:9b:13:fb:9f:36: 56:27:06:1c:01:1f:de:c1:ee:3f:ac:38:99:04:7e: f4:52:55:94:b9:42:67:6c:f5:53:17:a4:ed:da:36: 87:83:61:ba:e0:8d:dd:ce:40:a2:92:c1:34:8e:8e: 21:5b:f9:3f:41:27:90:3d:51:e2:95:8a:3f:d5:23: 9d:ee:e3:7b:a8:af:93:e5:21:17:6d:7a:42:f3:fe: e2:d1:a3:78:f3:23:71:a4:0e:7f:dd:ac:37:52:1a: d2:a7:7d:37:49:e2:65:9e:1e:03:32:06:b5:58:fd: b0:fa:6d:1c:98:76:c0:45:19:b6:81:53:c0:dd:bd: 4d:15:33:23:c4:5f:6f:5c:84:2e:c6:24:a0:54:f4: d4:d3:40:a9:d6:fd:e1:58:58:04:cb:40:d9:be:83: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:81:2E:69:A8:B0:62:2E:09:44:2C:80:E0:2F:91:7C:81:EC:B6 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:61:32:92:b0:6a:b5:87:06:db:aa:b6:a7:a8:e7:57:08:7d: db:48:ad:1f:5b:06:fc:54:13:d9:8c:6f:11:e7:51:b9:44:ff: 01:0f:fb:dc:bf:15:db:df:3a:b3:0e:10:e7:cf:ad:1e:64:08: 4b:47:6a:48:c9:4d:e5:f2:9f:c9:be:1c:86:b0:2c:30:20:8b: 3a:76:5c:a1:f3:37:43:ac:dd:88:b2:ca:63:ed:0c:09:3d:0a: 71:1f:a6:c1:77:0e:24:5f:3a:63:35:92:c5:c5:af:ce:93:5e: d8:ec:da:40:14:18:0f:0c:41:83:1a:b0:a4:2b:21:af:ac:af: 83:21:ff:13:49:6f:42:a7:28:9d:d1:86:ab:71:dd:b3:30:cf: 04:c7:ad:75:b0:64:d1:c1:52:eb:49:69:a0:0e:f0:22:44:56: c5:a8:f5:93:bd:05:f5:52:5f:41:37:48:d7:ca:19:8a:e0:b8: d2:e2:b1:ea:f3:29:7d:02:21:8b:34:1f:fe:6c:2b:79:48:4f: af:bb:a5:53:98:16:10:51:a0:51:2b:d5:de:b8:4e:d8:6d:69: a3:e9:68:f5:80:96:03:39:0d:63:22:27:85:82:56:eb:f3:ff: 1e:50:c1:6e:41:2b:c0:bc:8a:c1:3d:0f:f4:a8:e4:30:fd:47: 25:bc:bc:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUxMTAzMDMxMDMxWhcNMjUxMTEwMDMxMDMxWjAYMRYwFAYD VQQDEw02OTA4MWQyOC1kYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv98AkKOcgJlzKacfGZFRwTcjsylpTXMleH6EQ3Y6hHdEWCx8Hhc1eu1OmIEM we4fOgQigSsimB85uQ0Y3XXIuxdF4Q40yLqB9iiYJn2mmRi/7S53GLjWEiia2g09 G7ganmvImxP7nzZWJwYcAR/ewe4/rDiZBH70UlWUuUJnbPVTF6Tt2jaHg2G64I3d zkCiksE0jo4hW/k/QSeQPVHilYo/1SOd7uN7qK+T5SEXbXpC8/7i0aN48yNxpA5/ 3aw3UhrSp303SeJlnh4DMga1WP2w+m0cmHbARRm2gVPA3b1NFTMjxF9vXIQuxiSg VPTU00Cp1v3hWFgEy0DZvoPBAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjmgS5p qLBiLglELIDgL5F8gey2MB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeYTKSsGq1hwbbqranqOdXCH3bSK0fWwb8VBPZjG8R51G5RP8BD/vc vxXb3zqzDhDnz60eZAhLR2pIyU3l8p/JvhyGsCwwIIs6dlyh8zdDrN2Isspj7QwJ PQpxH6bBdw4kXzpjNZLFxa/Ok17Y7NpAFBgPDEGDGrCkKyGvrK+DIf8TSW9Cpyid 0Yarcd2zMM8Ex611sGTRwVLrSWmgDvAiRFbFqPWTvQX1Ul9BN0jXyhmK4LjS4rHq 8yl9AiGLNB/+bCt5SE+vu6VTmBYQUaBRK9XeuE7YbWmj6Wj1gJYDOQ1jIieFglbr 8/8eUMFuQSvAvIrBPQ/0qOQw/UclvLyW -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:24 2025 by rpki-client