$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: FrXKTQ4IhRfQryuNV5FfHJpRW2ejGfT9bXBQpYZ4kfI= Subject key identifier: 3A:7C:84:99:74:00:9E:EE:A5:87:DC:39:FC:5E:F2:2A:FE:FB:D9:A2 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 01BA Signing time: Wed 05 Nov 2025 03:08:54 +0000 Manifest this update: Wed 05 Nov 2025 03:08:54 +0000 Manifest next update: Wed 12 Nov 2025 03:08:54 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: FjLWpF1ge9cnjruWEdNimbOBmTEZa1fk7bNaLRzV798=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Nov 5 03:08:54 2025 GMT Not After : Nov 12 03:08:54 2025 GMT Subject: CN=690abfc6-f5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:da:da:83:35:b7:4c:26:41:23:a0:32:9e: e3:3e:8f:6a:66:68:93:4a:48:e7:8d:57:81:ec:8e: c7:bd:0e:e2:91:4a:57:b0:15:4d:12:1a:e3:1f:19: e2:22:f0:a5:25:57:7a:aa:f8:ac:3a:4b:f9:07:20: 30:26:6f:fd:88:1d:ec:87:8b:9c:68:67:ff:06:7f: d3:ac:89:07:0a:35:f9:fd:b8:1d:58:31:a1:e8:ca: e8:79:ea:f2:29:4a:64:9d:e7:b0:b0:18:be:0a:d9: fa:d0:d8:49:05:74:72:81:fd:45:6d:81:30:8f:b2: 43:56:9f:c9:e2:62:f5:a7:73:2d:54:5e:5b:0c:e9: 9e:ff:ca:1a:76:98:37:21:e4:aa:fb:1d:7e:ec:16: e4:81:22:78:dd:88:1f:02:38:f2:01:01:b0:3f:43: 25:08:ec:40:4e:0e:52:1f:a3:73:ca:63:f4:93:94: 64:4d:86:cc:4f:c9:c4:4c:f6:e3:bd:c2:b4:4a:88: ae:0f:46:31:e7:ab:8c:9d:ee:fe:be:cb:ab:92:d2: b4:c0:3a:fb:05:f4:60:ec:6c:49:66:0c:1d:d9:90: c3:6c:22:70:39:05:d4:2b:15:5d:25:0e:fc:9e:17: fd:9a:ff:af:63:94:eb:61:ba:a6:f3:61:ea:c2:09: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:84:99:74:00:9E:EE:A5:87:DC:39:FC:5E:F2:2A:FE:FB:D9:A2 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:29:42:c6:ce:b6:4c:e4:0c:79:18:63:27:16:9b:c2:bc:6f: 1e:a0:f4:5b:3b:47:45:bb:ff:2d:39:9c:1d:27:54:6f:5c:74: 41:6a:a7:1c:10:e8:7c:b1:8c:c8:9f:42:ea:5d:73:d9:01:e7: 7e:2f:fc:7f:a9:d7:f3:12:95:58:f9:36:8c:83:ab:bf:fb:45: f3:86:7b:e9:ee:17:1e:ec:d0:e7:18:fc:e3:73:a4:77:35:a8: d5:c9:e2:b2:35:14:58:3e:e2:f6:b9:27:fa:28:ba:07:43:0d: 45:36:12:ec:36:d6:c3:e7:77:31:ba:f2:39:d6:ae:ac:b2:96: 03:69:5e:3a:cf:d6:f2:1e:37:42:37:f8:2c:34:dc:bc:ff:40: 2f:48:23:ca:6c:33:e6:2d:ee:2f:75:a3:59:a3:db:79:63:55: cf:b3:31:7c:c7:ad:bc:f7:3d:a5:a5:fa:65:b8:21:46:c6:11: 02:cf:3c:13:ec:22:a1:44:b8:26:19:f2:b2:8e:ae:bc:d3:6b: 09:29:32:38:64:26:64:c3:1e:de:86:bc:9d:d4:c6:90:4b:ac: 49:82:32:5c:9f:a0:df:86:dd:c3:f8:2d:62:34:3d:e3:79:95: b6:af:d0:ab:e2:6e:f4:6f:b0:d0:35:97:25:35:95:a4:ea:c3: cb:c7:8e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUxMTA1MDMwODU0WhcNMjUxMTEyMDMwODU0WjAYMRYwFAYD VQQDEw02OTBhYmZjNi1mNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveba2oM1t0wmQSOgMp7jPo9qZmiTSkjnjVeB7I7HvQ7ikUpXsBVNEhrjHxni IvClJVd6qvisOkv5ByAwJm/9iB3sh4ucaGf/Bn/TrIkHCjX5/bgdWDGh6Mroeery KUpkneewsBi+Ctn60NhJBXRygf1FbYEwj7JDVp/J4mL1p3MtVF5bDOme/8oadpg3 IeSq+x1+7BbkgSJ43YgfAjjyAQGwP0MlCOxATg5SH6NzymP0k5RkTYbMT8nETPbj vcK0SoiuD0Yx56uMne7+vsurktK0wDr7BfRg7GxJZgwd2ZDDbCJwOQXUKxVdJQ78 nhf9mv+vY5TrYbqm82HqwglOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp8hJl0 AJ7upYfcOfxe8ir++9miMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNKULGzrZM5Ax5GGMnFpvCvG8eoPRbO0dFu/8tOZwdJ1RvXHRBaqcc EOh8sYzIn0LqXXPZAed+L/x/qdfzEpVY+TaMg6u/+0Xzhnvp7hce7NDnGPzjc6R3 NajVyeKyNRRYPuL2uSf6KLoHQw1FNhLsNtbD53cxuvI51q6sspYDaV46z9byHjdC N/gsNNy8/0AvSCPKbDPmLe4vdaNZo9t5Y1XPszF8x6289z2lpfpluCFGxhECzzwT 7CKhRLgmGfKyjq6802sJKTI4ZCZkwx7ehryd1MaQS6xJgjJcn6Dfht3D+C1iND3j eZW2r9Cr4m70b7DQNZclNZWk6sPLx46b -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:14 2025 by rpki-client