$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json) Hash identifier: CCvimd5hCWTU4ocomEXP1gQqikJY6a0dg1ZL9YmOxeo= Subject key identifier: 25:0E:69:CE:2D:E0:14:D4:ED:FC:6B:E7:75:9E:F7:84:EE:D2:5E:7C Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Certificate serial: 1117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft Manifest number: 110D Signing time: Sun 02 Nov 2025 17:17:26 +0000 Manifest this update: Sun 02 Nov 2025 17:17:26 +0000 Manifest next update: Sun 09 Nov 2025 17:17:26 +0000 Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: es87n06XemaU15spGay6Zer5i6dhBUHKbdGMgwRR54Q=) 2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: 5IA8PMVV1zO03OOgtuNwYqi0ljJvdLrmVU/wbQTCdxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4375 (0x1117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Validity Not Before: Nov 2 17:17:26 2025 GMT Not After : Nov 9 17:17:26 2025 GMT Subject: CN=69079226-68c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:64:27:a2:5d:ee:5c:4b:57:cf:4d:d5:b1: 96:6f:8d:76:a9:47:7a:e4:b5:64:4a:7f:ab:b8:2f: 3a:d7:8d:67:b3:af:99:9e:f7:0c:0b:5d:83:6f:a4: 54:26:95:94:3c:26:3c:68:63:58:20:57:53:ee:dd: 3b:d2:74:c6:a8:76:b0:41:af:6f:0f:44:a3:c0:79: 72:9f:6a:6a:23:61:cc:40:47:b0:76:78:12:d9:cc: 5e:81:32:52:f1:a5:c6:04:a5:ad:6c:52:bd:66:0e: b4:b0:1f:ec:c5:55:c0:d1:83:d6:08:cb:e2:13:89: bf:a0:d2:05:a1:9b:e5:ed:49:02:0e:bf:9d:dd:4f: 02:cd:b3:8e:a6:0a:69:3e:94:79:b3:e1:23:f5:5f: 78:4d:96:2c:26:3f:78:49:04:05:e9:13:8e:f3:68: 3d:8b:d2:11:37:bc:b4:f8:b8:6a:0d:54:ab:34:0b: 30:2e:13:69:81:d2:d8:07:4a:9d:4b:45:32:fd:39: e0:45:d7:7e:85:b3:6c:4a:d1:04:8c:11:fa:33:3c: d1:54:c9:7f:5b:64:d9:5e:a5:67:e6:92:22:e7:89: e7:aa:6b:18:23:de:67:fa:40:9e:b0:c4:b4:3f:f1: 37:40:18:a3:75:57:e8:de:62:aa:a9:6a:16:60:67: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0E:69:CE:2D:E0:14:D4:ED:FC:6B:E7:75:9E:F7:84:EE:D2:5E:7C X509v3 Authority Key Identifier: keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b6:9a:ca:ea:34:0e:16:ac:66:73:1d:88:2f:ee:8e:24:ba: af:94:98:61:05:12:4c:be:0a:1d:ed:69:46:dc:18:af:4a:d3: 16:47:76:d1:6c:cd:30:d1:23:95:9c:ce:21:cd:87:23:66:6e: 9a:37:84:3c:bd:2a:3c:35:84:4f:b2:3d:87:53:32:68:c1:2f: a7:f8:42:e9:6a:91:db:a2:6f:78:f8:55:bf:82:5d:f1:87:4b: 9f:5c:43:02:8d:2d:be:88:c6:85:09:7f:f2:43:a6:d4:0e:3c: 9c:e8:6c:a3:9f:45:1a:75:ce:90:19:61:1e:45:c1:6a:26:58: 88:3f:cb:eb:86:29:3a:30:91:38:a3:e6:5a:44:ae:31:8f:1c: 0f:dc:e1:a1:83:1d:e7:93:28:1e:0f:d0:c5:73:5e:cd:6b:8c: fd:6b:5b:f6:38:57:bf:b6:d0:3d:fb:4c:a7:8d:85:a8:88:8b: 27:90:3d:05:0a:7a:72:25:05:f8:26:ba:2b:17:d8:e0:09:b0: 5c:79:fc:6c:b5:7d:97:30:49:f2:89:8a:25:94:0c:f7:bb:68: e6:24:47:55:a1:2d:be:50:f1:04:57:ec:55:aa:60:30:36:6a: 4b:0c:86:56:8c:2d:48:6a:c4:99:d4:f5:8b:30:c3:67:b8:1f: b8:53:1c:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB MkFBOTA3QjgwHhcNMjUxMTAyMTcxNzI2WhcNMjUxMTA5MTcxNzI2WjAYMRYwFAYD VQQDEw02OTA3OTIyNi02OGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwdkJ6Jd7lxLV89N1bGWb412qUd65LVkSn+ruC86141ns6+ZnvcMC12Db6RU JpWUPCY8aGNYIFdT7t070nTGqHawQa9vD0SjwHlyn2pqI2HMQEewdngS2cxegTJS 8aXGBKWtbFK9Zg60sB/sxVXA0YPWCMviE4m/oNIFoZvl7UkCDr+d3U8CzbOOpgpp PpR5s+Ej9V94TZYsJj94SQQF6ROO82g9i9IRN7y0+LhqDVSrNAswLhNpgdLYB0qd S0Uy/TngRdd+hbNsStEEjBH6MzzRVMl/W2TZXqVn5pIi54nnqmsYI95n+kCesMS0 P/E3QBijdVfo3mKqqWoWYGeM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUOac4t 4BTU7fxr53We94Tu0l58MB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0 MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBntprK6jQOFqxmcx2IL+6OJLqvlJhhBRJMvgod7WlG3BivStMWR3bR bM0w0SOVnM4hzYcjZm6aN4Q8vSo8NYRPsj2HUzJowS+n+ELpapHbom94+FW/gl3x h0ufXEMCjS2+iMaFCX/yQ6bUDjyc6Gyjn0Uadc6QGWEeRcFqJliIP8vrhik6MJE4 o+ZaRK4xjxwP3OGhgx3nkygeD9DFc17Na4z9a1v2OFe/ttA9+0ynjYWoiIsnkD0F CnpyJQX4JrorF9jgCbBcefxstX2XMEnyiYollAz3u2jmJEdVoS2+UPEEV+xVqmAw NmpLDIZWjC1IasSZ1PWLMMNnuB+4UxwS -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:16 2025 by rpki-client