$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: sYdYpETcJjjSkPLIOXEr5tnsjGtYROTLLBjU1wFG0HA= Subject key identifier: D5:52:FA:D3:27:A2:E0:FF:8A:46:A4:CB:28:8B:7C:6B:FC:B5:46:3D Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: C5 Signing time: Wed 05 Nov 2025 06:02:44 +0000 Manifest this update: Wed 05 Nov 2025 06:02:43 +0000 Manifest next update: Wed 12 Nov 2025 06:02:43 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: HJH5qqK9Cc/gA0ADGhoV6uc7CF6wUtfyjkwh5xMlMBg=) 2: 3219F778803B11F0BAF8A92DC4F9AE02.roa (hash: Pw3ZpzwkDkcgCL+3fi/F1AEnVJy3AaqJ7h1NuQZbu9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Nov 5 06:02:43 2025 GMT Not After : Nov 12 06:02:43 2025 GMT Subject: CN=690ae884-75f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:d6:f7:3a:9d:f5:e0:d1:c3:f4:7a:73:5e: 67:df:ad:ee:74:e7:73:b8:d4:6e:ff:c1:39:4e:c5: e5:d9:73:fd:75:f8:ad:e8:be:a5:47:ae:54:a9:2f: 43:76:06:48:90:46:0c:c9:70:5e:fb:1d:ca:62:eb: 7d:79:1a:76:a0:fe:f6:97:8f:70:49:e7:ab:bc:2f: 7e:f9:f7:56:e9:c0:3b:58:ed:0e:ed:8f:99:55:ba: d7:81:36:0b:b1:c2:14:68:27:15:db:1f:3a:80:34: 44:30:9e:cd:bd:44:1d:1b:ec:13:66:e4:cb:62:c2: d0:6f:36:c6:c6:72:d6:60:f5:26:b6:d1:4b:e6:6f: dc:7a:f8:34:85:42:1f:94:0a:16:85:36:a5:df:31: 12:e8:72:72:7c:20:a8:3d:60:92:b0:01:7a:b1:99: 96:cc:b2:ac:cf:93:9d:9b:b9:8b:c2:b0:7f:0c:db: 3e:f4:e8:6a:bf:95:e7:33:2a:29:e9:a8:ee:ca:75: 52:f7:03:27:a1:00:e6:3e:fe:41:b8:ac:90:92:03: db:5e:3e:68:1c:fb:62:92:b1:c4:68:35:61:be:61: e8:b3:c6:5e:b9:ab:a0:da:ca:00:8a:61:7d:09:92: da:5b:05:60:b2:2a:79:a9:55:f7:b0:d2:d5:1c:60: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:FA:D3:27:A2:E0:FF:8A:46:A4:CB:28:8B:7C:6B:FC:B5:46:3D X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:20:6d:c9:0b:eb:9b:99:b8:70:28:f3:34:2f:d8:be:4b:35: b6:d3:20:4d:14:7b:2e:4c:89:16:ec:4b:84:ee:cc:73:b1:58: 6f:02:33:41:a1:62:3d:77:5b:e0:6d:f7:80:eb:75:1f:29:2e: c9:bd:26:28:92:1c:c6:bc:e8:ef:62:76:2d:6a:70:5f:66:c9: 6b:46:c3:ed:e9:7e:99:27:05:69:7f:17:92:65:f4:04:db:29: 20:78:64:5f:46:b8:11:3c:98:c1:9b:cc:59:19:91:c9:51:8b: 74:90:5f:c5:0c:b7:81:cd:30:e6:a4:da:83:2e:a7:57:c2:0e: d5:52:7a:06:04:1d:5d:c6:85:89:dd:41:be:b7:01:65:14:5f: 0a:a5:ee:25:0a:9d:d3:5f:e2:7d:da:19:8c:7e:9a:b4:3e:dc: c7:d8:5a:0d:76:05:04:44:e1:8b:b9:5d:2d:5b:51:6a:e6:4f: b3:e0:b0:10:a8:1f:11:1e:99:47:27:c0:02:51:d8:60:34:60: f1:85:d3:0c:f1:e6:04:f0:7c:80:93:48:b5:39:4a:55:e3:12: 92:3a:4c:40:83:fc:47:16:cf:1b:f7:78:85:ad:0e:17:dd:ba: 2b:f6:54:45:ca:6b:6b:4f:1a:6b:ef:79:f2:5e:10:0c:ce:ba: e7:81:f6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCMjQxMTAvBgNVBAUTKEY1M0JDRkI4QzcyQzFBM0FCNjVFMEVBODhFM0ExQTIx RDI4Q0QxNjEwHhcNMjUxMTA1MDYwMjQzWhcNMjUxMTEyMDYwMjQzWjAYMRYwFAYD VQQDEw02OTBhZTg4NC03NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttHW9zqd9eDRw/R6c15n363udOdzuNRu/8E5TsXl2XP9dfit6L6lR65UqS9D dgZIkEYMyXBe+x3KYut9eRp2oP72l49wSeervC9++fdW6cA7WO0O7Y+ZVbrXgTYL scIUaCcV2x86gDREMJ7NvUQdG+wTZuTLYsLQbzbGxnLWYPUmttFL5m/cevg0hUIf lAoWhTal3zES6HJyfCCoPWCSsAF6sZmWzLKsz5Odm7mLwrB/DNs+9Ohqv5XnMyop 6ajuynVS9wMnoQDmPv5BuKyQkgPbXj5oHPtikrHEaDVhvmHos8Zeuaug2soAimF9 CZLaWwVgsip5qVX3sNLVHGBQewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVS+tMn ouD/ikakyyiLfGv8tUY9MB8GA1UdIwQYMBaAFPU7z7jHLBo6tl4OqI46GiHSjNFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xRTRGM0E1QzhG NzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dqcTJYZzZvampvYUlkS00w V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0IyNC8xRTRGM0E1QzhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dq cTJYZzZvampvYUlkS00wV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVIG3JC+ubmbhwKPM0L9i+SzW20yBNFHsuTIkW7EuE7sxzsVhvAjNB oWI9d1vgbfeA63UfKS7JvSYokhzGvOjvYnYtanBfZslrRsPt6X6ZJwVpfxeSZfQE 2ykgeGRfRrgRPJjBm8xZGZHJUYt0kF/FDLeBzTDmpNqDLqdXwg7VUnoGBB1dxoWJ 3UG+twFlFF8Kpe4lCp3TX+J92hmMfpq0PtzH2FoNdgUEROGLuV0tW1Fq5k+z4LAQ qB8RHplHJ8ACUdhgNGDxhdMM8eYE8HyAk0i1OUpV4xKSOkxAg/xHFs8b93iFrQ4X 3bor9lRFymtrTxpr73nyXhAMzrrngfb2 -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:33 2025 by rpki-client