$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: npk813oJ3kHYqT/s9AVZJw6vfnahav7fJNzFUB9pOps= Subject key identifier: 0F:46:89:49:2B:B0:5E:75:F7:26:88:D4:E0:DC:94:1F:3B:B5:BE:91 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0C97 Signing time: Tue 04 Nov 2025 18:25:55 +0000 Manifest this update: Tue 04 Nov 2025 18:25:54 +0000 Manifest next update: Tue 11 Nov 2025 18:25:54 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: Gf5pKeGcW8qnRlfUN5s6epwIg5A45gnpFp/4Zj9GXuo=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Nov 4 18:25:54 2025 GMT Not After : Nov 11 18:25:54 2025 GMT Subject: CN=690a4533-90f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:68:12:99:42:b8:64:50:56:3b:b0:9a:e6: bb:c3:e0:07:30:74:92:8f:e3:1b:ef:3e:f2:2f:b1: 1a:2c:36:59:ab:a2:75:7c:76:e6:76:5b:09:c4:4c: b5:a4:59:f3:84:fb:e3:e5:d2:0d:c2:6a:1c:14:b7: 7e:e8:6a:32:cf:27:78:8f:c9:c5:fa:3f:74:34:2e: ad:e9:d7:7d:aa:aa:c1:cc:55:de:cd:cb:6e:20:0b: ec:f4:e9:15:2d:df:3b:84:c2:4f:8e:b2:3f:fa:09: 68:0a:ef:b1:b0:71:a3:fc:89:aa:3f:72:01:e0:e5: d4:7d:eb:89:61:c3:0c:34:06:38:50:e1:a4:2f:79: 1d:dd:9c:de:33:f8:25:bb:fb:37:59:9a:6d:2a:99: 45:39:f5:5a:57:d7:83:dd:8b:58:3f:9c:3c:91:6c: c0:f4:93:f5:84:61:81:52:cf:3b:5e:d0:10:ee:05: 21:08:75:76:e9:9b:57:ea:54:28:0f:d6:3c:a1:13: dd:a4:1c:79:9e:a1:e3:40:8d:22:42:31:c7:af:10: c6:00:f4:1b:4e:36:ed:67:81:62:9d:98:76:46:69: 1b:50:ca:04:50:9a:63:fa:b4:fc:36:6c:70:06:51: ef:35:2c:43:33:54:55:2e:24:0b:b9:53:93:aa:f9: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:46:89:49:2B:B0:5E:75:F7:26:88:D4:E0:DC:94:1F:3B:B5:BE:91 X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:93:ef:90:d9:a0:60:48:de:28:51:e9:7b:c6:11:77:20:ee: 04:b5:bb:a3:11:44:b6:6c:dc:8f:6e:4b:cf:47:16:09:a5:a4: ff:0f:ba:ef:7c:f8:c7:27:e9:72:ed:d8:68:85:31:e7:4a:6f: 3d:db:e2:5b:44:c1:2b:9f:be:71:16:76:d4:e3:f8:d5:a6:9c: 9d:06:01:f7:c7:08:46:03:c8:9f:a2:4d:de:b3:33:68:00:8b: 68:24:2a:43:ee:2b:f4:5f:07:81:4e:2f:6c:f3:b8:40:78:06: 8a:65:da:b3:eb:c4:58:8b:7b:20:10:e2:4a:5e:77:d7:ac:7e: 08:29:47:c8:ac:69:b8:15:32:ff:f5:ec:29:3c:85:67:2f:4d: c6:2c:8d:57:de:ea:9c:5b:dc:d6:d8:75:e7:80:df:a9:b8:6d: 2e:ac:4a:3c:1b:07:43:40:7c:dd:fb:4f:c3:ce:c1:8a:6d:08: ff:79:9f:b7:20:49:ce:1d:63:f7:94:4d:4e:7b:ee:b0:f4:fa: 58:21:e1:57:b2:11:ad:3e:f0:a8:bd:f5:bd:e0:53:82:b4:8d: 7a:f7:b9:63:ae:e5:53:16:ef:bc:a8:58:b3:fc:73:87:fd:db: 56:35:1d:73:56:18:a9:75:95:16:d2:91:96:eb:92:d5:f3:90: 6e:34:4d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUxMTA0MTgyNTU0WhcNMjUxMTExMTgyNTU0WjAYMRYwFAYD VQQDEw02OTBhNDUzMy05MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgFoEplCuGRQVjuwmua7w+AHMHSSj+Mb7z7yL7EaLDZZq6J1fHbmdlsJxEy1 pFnzhPvj5dINwmocFLd+6Goyzyd4j8nF+j90NC6t6dd9qqrBzFXezctuIAvs9OkV Ld87hMJPjrI/+gloCu+xsHGj/ImqP3IB4OXUfeuJYcMMNAY4UOGkL3kd3ZzeM/gl u/s3WZptKplFOfVaV9eD3YtYP5w8kWzA9JP1hGGBUs87XtAQ7gUhCHV26ZtX6lQo D9Y8oRPdpBx5nqHjQI0iQjHHrxDGAPQbTjbtZ4FinZh2RmkbUMoEUJpj+rT8Nmxw BlHvNSxDM1RVLiQLuVOTqvnAqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9GiUkr sF519yaI1ODclB87tb6RMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnk++Q2aBgSN4oUel7xhF3IO4EtbujEUS2bNyPbkvPRxYJpaT/D7rv fPjHJ+ly7dhohTHnSm892+JbRMErn75xFnbU4/jVppydBgH3xwhGA8ifok3eszNo AItoJCpD7iv0XweBTi9s87hAeAaKZdqz68RYi3sgEOJKXnfXrH4IKUfIrGm4FTL/ 9ewpPIVnL03GLI1X3uqcW9zW2HXngN+puG0urEo8GwdDQHzd+0/DzsGKbQj/eZ+3 IEnOHWP3lE1Oe+6w9PpYIeFXshGtPvCovfW94FOCtI1697ljruVTFu+8qFiz/HOH /dtWNR1zVhipdZUW0pGW65LV85BuNE3G -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:26 2025 by rpki-client