$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: zmaQsxYXgFWuxZpW7GzfourLxWWBpWNqVP2cXj/eG9E= Subject key identifier: D6:BE:33:1C:57:D6:30:87:9E:86:BD:D4:6E:83:66:79:25:C4:C5:DA Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0999 Signing time: Sun 02 Nov 2025 20:00:58 +0000 Manifest this update: Sun 02 Nov 2025 20:00:58 +0000 Manifest next update: Sun 09 Nov 2025 20:00:58 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: 0mHVYiSL99LvIuxtqKEmFshCGMXaEE3JvdVxeAKcDx4=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Nov 2 20:00:58 2025 GMT Not After : Nov 9 20:00:58 2025 GMT Subject: CN=6907b87a-060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:25:f2:91:bb:9e:73:ed:98:19:12:9f:06: 83:b1:19:f3:57:66:47:8f:e5:cf:1c:cc:d6:33:26: 37:b9:44:c0:ef:24:99:ed:03:71:91:99:04:af:f8: 35:2b:8a:eb:21:bf:7d:7b:c0:9c:b1:1c:c3:2a:c2: f5:42:ea:ef:84:42:59:75:3d:98:1b:e8:dd:1a:02: 3c:75:7b:50:a9:cf:5a:8f:4b:e4:a4:1a:df:da:21: ed:cd:02:b7:5b:24:41:1a:13:a0:7c:c5:7a:af:54: 53:18:4b:f9:9b:04:c0:0e:47:fd:de:a0:e4:a5:0b: c8:37:d2:9d:da:a1:cf:c5:aa:9f:e5:c0:2f:73:65: 70:b4:99:31:62:d9:2a:17:57:9a:e3:4d:e8:95:30: 22:05:6d:2e:ed:b1:bc:1d:4f:3d:8c:9f:80:e7:ab: c6:0e:3b:db:0e:f0:d0:51:e0:56:a7:a2:c7:47:9e: 45:ee:28:a8:c2:a8:bc:69:60:4a:15:51:38:54:28: 4f:4b:f3:bb:30:82:76:3d:05:41:74:0e:e0:ac:40: 97:8e:fa:69:87:40:48:78:96:8f:20:9d:b8:05:a7: b5:75:0b:9c:c0:ce:d5:d4:27:43:35:3a:b8:4d:80: 48:4d:ad:9d:04:cb:db:5c:3e:bf:8a:2d:f4:3f:99: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BE:33:1C:57:D6:30:87:9E:86:BD:D4:6E:83:66:79:25:C4:C5:DA X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:57:51:7c:db:c1:42:bb:fb:32:ca:35:5d:5a:83:02:98:91: a2:8f:aa:b3:d2:6b:03:75:f9:39:5d:ca:12:6d:84:9e:60:ea: dd:37:68:97:44:72:03:e0:ec:5d:96:95:44:06:be:81:19:d0: db:87:a5:a0:35:b9:07:d5:b0:a0:dd:bc:f3:19:54:d4:1a:5a: fb:1d:c6:d6:06:6f:71:0a:11:61:36:d0:75:aa:42:8c:f4:21: 16:f7:15:b2:4a:f7:50:28:46:90:bb:0c:55:85:6c:dc:4b:70: 30:21:62:71:f2:6a:d9:a9:a2:a3:45:7a:14:34:30:71:64:88: e2:74:67:f7:ca:68:91:5e:64:2e:61:23:56:dd:54:d8:3b:20: 1c:da:b2:33:a3:d2:94:73:9e:22:51:5b:d4:e7:7d:0a:c0:2a: 95:90:9f:2a:38:03:3f:85:f6:42:77:ea:79:06:72:86:f7:4b: fb:13:ba:bd:82:87:24:d3:19:85:80:04:50:2b:24:e9:71:c2: e9:32:03:f4:bf:e9:38:20:07:04:70:4d:75:42:f1:51:10:25: 17:51:94:3f:55:71:24:77:57:89:59:9a:82:64:fb:14:ab:c8: 26:45:77:f9:fd:91:74:ba:3c:ce:af:75:bb:c8:d4:eb:9f:41: c6:5a:db:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUxMTAyMjAwMDU4WhcNMjUxMTA5MjAwMDU4WjAYMRYwFAYD VQQDEw02OTA3Yjg3YS0wNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU8l8pG7nnPtmBkSnwaDsRnzV2ZHj+XPHMzWMyY3uUTA7ySZ7QNxkZkEr/g1 K4rrIb99e8CcsRzDKsL1QurvhEJZdT2YG+jdGgI8dXtQqc9aj0vkpBrf2iHtzQK3 WyRBGhOgfMV6r1RTGEv5mwTADkf93qDkpQvIN9Kd2qHPxaqf5cAvc2VwtJkxYtkq F1ea403olTAiBW0u7bG8HU89jJ+A56vGDjvbDvDQUeBWp6LHR55F7iiowqi8aWBK FVE4VChPS/O7MIJ2PQVBdA7grECXjvpph0BIeJaPIJ24Bae1dQucwM7V1CdDNTq4 TYBITa2dBMvbXD6/ii30P5mt0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa+MxxX 1jCHnoa91G6DZnklxMXaMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvV1F828FCu/syyjVdWoMCmJGij6qz0msDdfk5XcoSbYSeYOrdN2iX RHID4OxdlpVEBr6BGdDbh6WgNbkH1bCg3bzzGVTUGlr7HcbWBm9xChFhNtB1qkKM 9CEW9xWySvdQKEaQuwxVhWzcS3AwIWJx8mrZqaKjRXoUNDBxZIjidGf3ymiRXmQu YSNW3VTYOyAc2rIzo9KUc54iUVvU530KwCqVkJ8qOAM/hfZCd+p5BnKG90v7E7q9 gock0xmFgARQKyTpccLpMgP0v+k4IAcEcE11QvFRECUXUZQ/VXEkd1eJWZqCZPsU q8gmRXf5/ZF0ujzOr3W7yNTrn0HGWtvB -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:24 2025 by rpki-client