$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: rVoJROBH/IVwvmmSLiS0gZSAhbufxSR9nFDBWm6qHVo= Subject key identifier: 35:86:DA:67:35:BF:C6:76:C8:1D:CB:EF:08:E5:2E:61:89:AC:DF:F9 Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 0214 Signing time: Mon 03 Nov 2025 02:17:28 +0000 Manifest this update: Mon 03 Nov 2025 02:17:27 +0000 Manifest next update: Mon 10 Nov 2025 02:17:27 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: YSKSLg7zG0a9v+gCYT7GZFoHQQjl9w63ePGS55LPWyE=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: w+YVCZlT+ueyv41aCuxnpcHi2Q6S5cfTHp2i5KKlTA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: Nov 3 02:17:27 2025 GMT Not After : Nov 10 02:17:27 2025 GMT Subject: CN=690810b7-bd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:04:a5:70:c0:0a:4e:24:79:f3:82:cc:99: 1c:c2:94:ea:c8:31:2b:de:e0:c6:a7:ff:13:62:ab: c9:8e:c5:ac:2a:88:ce:9a:b7:a3:83:4c:ac:ce:41: 51:3b:57:e9:7b:f9:cb:d9:99:d9:a9:0f:c4:7f:22: ea:da:0d:52:a2:56:73:1c:4d:54:b5:11:75:eb:e2: b2:98:f9:8e:33:35:ce:a7:e5:61:ca:88:c3:35:a3: 77:4c:41:62:48:f2:70:d3:85:93:5a:54:0b:22:dc: 0a:54:47:be:65:18:17:bb:df:77:a5:d5:9b:29:be: ff:af:ad:3a:ec:1d:97:db:3c:fa:15:97:f2:8b:de: 2e:83:d6:a8:5d:2c:8f:c3:37:4a:6d:b9:92:a2:e6: e7:10:44:ef:90:15:3f:71:5f:24:90:60:e7:7d:38: 70:75:e3:2c:df:6b:1d:16:d2:f7:ff:c6:58:e3:c5: ff:34:fe:62:8e:18:ee:78:41:d1:e7:5c:0d:f8:ca: 5b:ab:9f:c1:23:05:ec:bd:87:b0:83:e7:ad:92:1a: b2:74:17:79:55:4f:ff:8f:e7:8f:bc:45:a8:58:2a: 45:28:72:44:24:4a:93:56:c6:f8:00:83:a8:a3:a4: 14:15:e8:e5:77:69:e7:cd:25:60:f6:5d:f6:50:cb: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:86:DA:67:35:BF:C6:76:C8:1D:CB:EF:08:E5:2E:61:89:AC:DF:F9 X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:10:a5:74:f9:04:22:14:cb:33:e2:62:e9:f1:79:3a:35:07: d9:01:ce:57:64:c8:94:65:b5:b5:50:bc:be:f2:c7:32:ab:c5: 18:0b:f1:7e:c0:68:c7:cd:d4:4f:6b:8b:a6:46:a2:f9:98:5c: 1d:4c:c5:be:1a:28:e5:73:bb:48:d0:29:de:28:0a:03:fc:28: b2:93:39:2f:b8:6d:55:01:1b:16:15:31:9c:4e:3d:80:8b:a2: fe:68:97:aa:c2:fd:0c:39:fa:50:b4:ee:86:d3:75:f6:a8:20: 58:29:90:f7:57:1b:fd:64:e4:7f:5c:45:dd:29:83:8e:8b:12: da:b6:74:12:23:89:27:cb:ab:1b:a7:ff:a4:f5:0f:cd:f1:87: 04:14:d5:b2:e0:49:0e:6c:ec:65:e4:e5:74:56:3d:6a:f3:36: 64:0b:b1:1f:42:7b:63:c6:4e:0e:07:ac:f7:5a:df:d2:0c:bb: 36:83:e6:85:d6:35:48:ee:06:2f:16:4e:07:58:1e:d5:39:57: 51:80:46:28:10:52:ab:9f:b9:dc:e7:3d:ac:9b:3b:7e:a6:95: aa:7d:d3:42:f6:91:76:ee:5f:84:7e:6b:48:c4:d6:ca:18:10: 8d:77:dd:d9:b2:c4:c5:72:e5:ab:24:be:9b:94:e6:ee:df:a2: e1:35:78:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUxMTAzMDIxNzI3WhcNMjUxMTEwMDIxNzI3WjAYMRYwFAYD VQQDEw02OTA4MTBiNy1iZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxEEpXDACk4kefOCzJkcwpTqyDEr3uDGp/8TYqvJjsWsKojOmrejg0yszkFR O1fpe/nL2ZnZqQ/EfyLq2g1SolZzHE1UtRF16+KymPmOMzXOp+VhyojDNaN3TEFi SPJw04WTWlQLItwKVEe+ZRgXu993pdWbKb7/r6067B2X2zz6FZfyi94ug9aoXSyP wzdKbbmSoubnEETvkBU/cV8kkGDnfThwdeMs32sdFtL3/8ZY48X/NP5ijhjueEHR 51wN+Mpbq5/BIwXsvYewg+etkhqydBd5VU//j+ePvEWoWCpFKHJEJEqTVsb4AIOo o6QUFejld2nnzSVg9l32UMtAHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWG2mc1 v8Z2yB3L7wjlLmGJrN/5MB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlEKV0+QQiFMsz4mLp8Xk6NQfZAc5XZMiUZbW1ULy+8scyq8UYC/F+ wGjHzdRPa4umRqL5mFwdTMW+Gijlc7tI0CneKAoD/CiykzkvuG1VARsWFTGcTj2A i6L+aJeqwv0MOfpQtO6G03X2qCBYKZD3Vxv9ZOR/XEXdKYOOixLatnQSI4kny6sb p/+k9Q/N8YcEFNWy4EkObOxl5OV0Vj1q8zZkC7EfQntjxk4OB6z3Wt/SDLs2g+aF 1jVI7gYvFk4HWB7VOVdRgEYoEFKrn7nc5z2smzt+ppWqfdNC9pF27l+EfmtIxNbK GBCNd93ZssTFcuWrJL6blObu36LhNXhq -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:46 2025 by rpki-client