$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft File: v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json) Hash identifier: ox11PwsuQv+LDk8wlMU8oLnj0bAVf4J0b+E8k6S1kHY= Subject key identifier: 1F:C3:CD:68:CF:FA:DF:06:6B:72:2A:69:78:D8:78:1B:F0:C5:6D:C0 Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B Certificate issuer: /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft Manifest number: CF Signing time: Wed 05 Nov 2025 05:53:14 +0000 Manifest this update: Wed 05 Nov 2025 05:53:14 +0000 Manifest next update: Wed 12 Nov 2025 05:53:14 +0000 Files and hashes: 1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: R34Vdy6QFu84tcbfrUHWaobt1ZdA1GrgS6Nm9qbuE2k=) 2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: 4sSJ4Nl5NHcKnN+gJIih4SssZd/7yFaxNlgOUdEFeno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136302, serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Validity Not Before: Nov 5 05:53:14 2025 GMT Not After : Nov 12 05:53:14 2025 GMT Subject: CN=690ae64a-75d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:80:82:99:30:6e:b5:9d:ac:03:97:8a:e8: d2:6b:5c:7d:c5:6f:fc:c2:34:10:e5:6a:e9:f1:0c: 59:d7:2f:94:e5:91:c1:96:f6:97:31:84:e0:b9:ca: 48:ac:10:3c:c0:51:e2:bb:e8:fd:f9:ab:5d:ca:34: e8:06:68:29:fd:c6:36:7c:40:a2:01:3e:0c:3e:a3: 7d:c8:98:9f:fa:44:2b:ff:0b:c3:30:00:ad:43:46: 8e:87:e0:f8:2d:4c:54:23:84:0f:26:67:b2:7a:a0: 3b:7f:5a:7b:cf:25:03:54:2d:5a:6b:da:f6:9e:b2: 7c:16:83:77:c9:29:f3:29:70:cb:ba:24:90:75:7a: ce:29:79:4a:f8:bc:8e:ca:81:e2:3d:36:67:06:84: 8a:2f:27:d8:66:80:64:4e:44:36:e7:f1:c0:1d:7b: e7:fa:41:ae:e3:32:68:ba:39:14:0c:32:de:58:7d: 97:04:69:ba:19:56:12:63:13:be:1f:17:bf:14:a3: 17:0b:86:c5:a3:da:be:a5:89:4b:ab:6b:5e:7a:9a: 9d:56:3a:d6:08:0c:32:8a:62:65:92:ca:0b:c2:4a: ba:4e:85:40:68:14:67:34:fe:8d:95:25:97:44:87: 14:cf:02:09:95:ad:c3:d7:41:85:06:1a:7b:24:8f: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C3:CD:68:CF:FA:DF:06:6B:72:2A:69:78:D8:78:1B:F0:C5:6D:C0 X509v3 Authority Key Identifier: keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8a:ee:65:e4:e4:e7:34:73:bf:db:7e:3d:f5:27:7e:c8:c0: 03:5f:7c:a5:76:91:98:14:03:3b:c8:40:a4:3b:d1:3f:7a:78: 8c:46:55:a6:cd:59:9d:5e:c2:a5:f1:9d:f0:dd:95:5e:c5:f7: 93:4e:d2:ad:4e:a8:d4:1b:6b:dd:76:c2:93:8c:6e:d7:5e:e1: fb:6b:41:1e:c7:82:00:14:af:8a:75:f2:be:f9:51:32:66:e1: d6:ec:16:58:f4:28:f4:4e:67:db:84:9a:92:f7:29:d5:ec:76: 5c:32:f6:11:ee:3b:29:55:29:8c:8a:78:dc:b9:fa:74:1b:a7: b5:60:61:81:a3:03:26:d3:0f:cd:44:ca:2c:c9:bb:00:9e:35: 13:5e:ac:30:e8:45:b0:45:54:f6:ab:9a:28:5a:ec:9a:f6:09: a6:7c:b4:92:40:12:8e:e0:4c:f0:41:c3:5f:e2:99:93:39:f2: fe:97:52:08:ff:16:ed:32:d5:67:22:dc:25:e9:fa:14:bb:7d: ed:ea:94:e8:4d:a3:38:70:68:c3:7e:7c:d5:4e:b1:24:14:ff: a3:d1:9f:88:fa:5a:6e:ea:58:a7:e1:e2:71:7e:cb:78:b4:0d: b7:00:df:6a:5f:75:ef:28:c9:04:0b:c4:cf:ef:f1:e2:c2:88: 6a:f6:79:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzMDIxMTAvBgNVBAUTKEJGN0E3RDU0QTlDNkI2QzFCNUREMjUwMjZCRkJCQTdE NzdFNDUyN0IwHhcNMjUxMTA1MDU1MzE0WhcNMjUxMTEyMDU1MzE0WjAYMRYwFAYD VQQDEw02OTBhZTY0YS03NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLyAgpkwbrWdrAOXiujSa1x9xW/8wjQQ5Wrp8QxZ1y+U5ZHBlvaXMYTgucpI rBA8wFHiu+j9+atdyjToBmgp/cY2fECiAT4MPqN9yJif+kQr/wvDMACtQ0aOh+D4 LUxUI4QPJmeyeqA7f1p7zyUDVC1aa9r2nrJ8FoN3ySnzKXDLuiSQdXrOKXlK+LyO yoHiPTZnBoSKLyfYZoBkTkQ25/HAHXvn+kGu4zJoujkUDDLeWH2XBGm6GVYSYxO+ Hxe/FKMXC4bFo9q+pYlLq2teepqdVjrWCAwyimJlksoLwkq6ToVAaBRnNP6NlSWX RIcUzwIJla3D10GFBhp7JI/y3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/DzWjP +t8Ga3IqaXjYeBvwxW3AMB8GA1UdIwQYMBaAFL96fVSpxrbBtd0lAmv7un135FJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjMwMi8yRkM0QTcxMjgx NDQxMUVGOTVBRkMxNDhDNEY5QUUwMi92M3A5VktuR3RzRzEzU1VDYV91NmZYZmtV bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzcDlWS25HdHNHMTNTVUNhX3U2Zlhma1Vucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjMwMi8yRkM0QTcxMjgxNDQxMUVGOTVBRkMxNDhDNEY5QUUwMi92M3A5VktuR3Rz RzEzU1VDYV91NmZYZmtVbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAiu5l5OTnNHO/23499Sd+yMADX3yldpGYFAM7yECkO9E/eniMRlWm zVmdXsKl8Z3w3ZVexfeTTtKtTqjUG2vddsKTjG7XXuH7a0Eex4IAFK+KdfK++VEy ZuHW7BZY9Cj0TmfbhJqS9ynV7HZcMvYR7jspVSmMinjcufp0G6e1YGGBowMm0w/N RMosybsAnjUTXqww6EWwRVT2q5ooWuya9gmmfLSSQBKO4EzwQcNf4pmTOfL+l1II /xbtMtVnItwl6foUu33t6pToTaM4cGjDfnzVTrEkFP+j0Z+I+lpu6lin4eJxfst4 tA23AN9qX3XvKMkEC8TP7/Hiwohq9nln -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:38 2025 by rpki-client