$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: DbLehp05iH3Nm/FlVtjXZ6h8crZz9LWsWobIZmG3ajI= Subject key identifier: 45:32:75:F9:A5:3E:2C:B1:59:AA:9C:5A:C1:AC:99:B4:14:19:64:CF Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 07F9 Signing time: Tue 04 Nov 2025 21:04:44 +0000 Manifest this update: Tue 04 Nov 2025 21:04:43 +0000 Manifest next update: Tue 11 Nov 2025 21:04:43 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: Q2XnZJmnxDntYrsrloKXOX9PzVM0iOjM+XSNUsp+Lkw=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Nov 4 21:04:43 2025 GMT Not After : Nov 11 21:04:43 2025 GMT Subject: CN=690a6a6c-0420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:6f:5d:24:02:41:21:de:ac:ed:40:e5:51: 2f:e5:3b:f8:e9:06:f7:cc:ea:02:38:f3:58:c4:85: 20:34:32:5d:ce:43:c8:9a:ff:26:df:b3:33:12:6c: 31:a4:51:63:53:bc:10:f9:7e:2e:8a:9b:d5:63:53: a9:3f:52:63:2e:9b:e8:c7:4c:3f:00:74:e6:26:68: bf:21:e7:07:dc:53:8b:33:15:a9:51:9b:b8:e7:76: 43:a4:52:78:89:f4:c8:01:36:cc:59:e0:74:2f:49: e3:51:f8:38:13:b2:de:fb:7e:51:f4:69:83:66:cf: 79:51:e4:d3:29:79:6a:c1:b5:70:9a:b2:4f:23:6f: b2:7f:d6:a9:c1:fc:19:a9:3e:ef:70:fa:d1:0f:cc: b1:b3:20:bf:bd:c5:76:5f:df:da:6e:f5:44:27:eb: 55:d7:93:39:23:3d:ac:05:d0:24:74:79:0c:a1:81: da:07:ef:1c:8f:05:63:3b:8b:ff:5b:84:02:9d:7c: 12:60:9f:fc:20:8d:7b:c8:73:4d:ff:41:34:02:11: 32:0b:1b:17:60:ad:8b:c4:af:cb:5f:fc:55:05:a0: 8d:ae:cd:09:5b:88:05:ca:25:ff:97:8f:3d:81:e8: 43:ea:f0:5e:2f:57:f1:24:ca:6b:ed:c2:4d:14:90: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:32:75:F9:A5:3E:2C:B1:59:AA:9C:5A:C1:AC:99:B4:14:19:64:CF X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:09:2f:c7:2b:a0:35:32:b0:fb:f4:e7:e6:ea:d9:0b:c7:58: fa:97:95:c1:e8:db:89:52:9d:29:2a:43:d8:0f:a0:bd:91:9b: a8:60:38:2e:5c:96:70:c9:45:3a:72:ec:50:60:33:d6:08:41: b1:83:71:d8:a5:0f:54:9a:a1:b9:67:0f:5a:1e:5a:4d:75:5e: 6d:36:ef:69:84:3c:c7:e2:df:e0:78:f6:ed:cb:fe:9e:d5:10: 98:a4:2e:2c:73:2b:fa:62:34:19:da:de:ee:6c:ec:c8:f1:e3: fe:d4:92:22:a2:8e:ee:fb:5a:6f:6c:52:ad:14:ba:0c:51:9e: 26:b9:c2:be:f5:97:65:94:23:62:79:4f:e6:9d:2f:f2:86:ec: 00:0a:0c:49:55:a4:8a:d0:da:a2:ff:23:26:59:ba:a4:07:09: bd:cb:4a:12:9d:f2:37:ad:63:e2:66:17:2a:67:fe:3e:d0:71: 84:8b:aa:37:00:77:9e:a7:e1:b4:49:ae:d7:45:c5:89:a4:3b: c7:33:e2:63:77:e3:ac:22:1c:41:7c:b9:8c:14:d0:a0:b1:e5: 63:17:71:5a:33:4e:5c:e5:ac:3e:8a:af:87:b0:5a:cb:89:50: 65:d6:ad:47:6a:c1:54:2b:48:81:85:93:f2:a5:be:b3:75:40: 20:61:cb:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUxMTA0MjEwNDQzWhcNMjUxMTExMjEwNDQzWjAYMRYwFAYD VQQDEw02OTBhNmE2Yy0wNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSdvXSQCQSHerO1A5VEv5Tv46Qb3zOoCOPNYxIUgNDJdzkPImv8m37MzEmwx pFFjU7wQ+X4uipvVY1OpP1JjLpvox0w/AHTmJmi/IecH3FOLMxWpUZu453ZDpFJ4 ifTIATbMWeB0L0njUfg4E7Le+35R9GmDZs95UeTTKXlqwbVwmrJPI2+yf9apwfwZ qT7vcPrRD8yxsyC/vcV2X9/abvVEJ+tV15M5Iz2sBdAkdHkMoYHaB+8cjwVjO4v/ W4QCnXwSYJ/8II17yHNN/0E0AhEyCxsXYK2LxK/LX/xVBaCNrs0JW4gFyiX/l489 gehD6vBeL1fxJMpr7cJNFJA1QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUydfml PiyxWaqcWsGsmbQUGWTPMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCS/HK6A1MrD79Ofm6tkLx1j6l5XB6NuJUp0pKkPYD6C9kZuoYDgu XJZwyUU6cuxQYDPWCEGxg3HYpQ9UmqG5Zw9aHlpNdV5tNu9phDzH4t/gePbty/6e 1RCYpC4scyv6YjQZ2t7ubOzI8eP+1JIioo7u+1pvbFKtFLoMUZ4mucK+9ZdllCNi eU/mnS/yhuwACgxJVaSK0Nqi/yMmWbqkBwm9y0oSnfI3rWPiZhcqZ/4+0HGEi6o3 AHeep+G0Sa7XRcWJpDvHM+Jjd+OsIhxBfLmMFNCgseVjF3FaM05c5aw+iq+HsFrL iVBl1q1HasFUK0iBhZPypb6zdUAgYcvH -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:59 2025 by rpki-client