$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: wIFzBKCZepqNztMajvSGCGwVTkV0uiQ9lz70OXgZPAQ= Subject key identifier: 04:9F:4A:DB:FC:6C:6A:4B:15:76:1C:23:1D:18:E1:C0:8B:0D:F5:E3 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 95 Signing time: Wed 05 Nov 2025 06:40:09 +0000 Manifest this update: Wed 05 Nov 2025 06:40:08 +0000 Manifest next update: Wed 12 Nov 2025 06:40:08 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: B6wEkoGrZ8T42DN4RLDxW8LHUBPdWbmBo/ipKIyRvBk=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: Nov 5 06:40:08 2025 GMT Not After : Nov 12 06:40:08 2025 GMT Subject: CN=690af149-74d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:a6:1e:aa:78:d6:8d:48:44:fb:d2:b4:de: dd:6f:c0:95:c1:98:e9:4f:d2:73:6b:2c:37:42:f3: ee:3b:c4:ac:40:56:c0:ae:57:da:07:e6:9d:66:86: 2f:b3:70:6a:9b:5b:63:12:be:8c:59:3a:b1:00:ef: 6f:93:6b:82:16:12:45:27:e4:40:4c:1f:49:60:a3: 58:f3:fc:a7:83:ed:51:97:d9:ae:05:98:8a:23:10: 71:0f:56:94:ff:8e:af:29:48:d1:ed:9c:c3:94:4e: 5a:5f:da:35:65:1d:5a:9a:21:77:ae:e5:51:99:b9: 16:82:91:c3:aa:f5:5a:62:17:8e:7d:7f:8c:2f:72: 55:5c:73:38:22:23:75:13:76:68:0d:df:63:0f:0c: 77:7b:5c:92:93:02:ca:d9:57:46:8b:1b:14:c6:1f: b1:3d:48:3c:63:63:ea:da:fa:df:98:14:7f:e9:b4: ff:95:fa:a1:d8:1f:01:d1:80:bc:63:0e:ad:4e:d9: 1b:b9:23:d0:73:fe:ee:1f:a5:e6:03:7f:e1:c2:a5: 20:f1:19:94:1c:ab:6a:e6:9a:e8:ab:9d:17:32:32: 52:6a:a1:bd:fc:e4:93:dd:b1:5c:34:28:5f:9a:13: 09:dc:54:1a:b2:ab:cf:b6:c0:20:52:0c:ae:7a:f5: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9F:4A:DB:FC:6C:6A:4B:15:76:1C:23:1D:18:E1:C0:8B:0D:F5:E3 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7b:e7:71:c9:53:c7:cf:63:72:43:f6:68:5e:c2:f2:15:e7: be:29:58:06:96:7d:4f:0b:48:cf:69:9a:16:ed:4d:87:8c:df: 55:d9:c9:00:7e:93:f4:40:c6:be:26:10:91:74:49:b9:0b:e8: f5:af:84:f8:40:7f:de:f9:71:ce:85:c2:85:53:59:49:89:fb: 14:d7:3d:ed:60:19:84:b7:4f:60:22:e3:c9:ff:ae:45:e0:9a: d1:8e:6d:db:27:ae:1a:b0:b3:2f:33:a2:43:f5:e4:9f:dc:5c: e1:1d:a4:41:fb:a1:ef:91:57:6f:c3:db:7f:bf:9f:f0:7f:2b: 34:27:0f:2c:8e:da:da:29:84:1b:a0:5c:3e:c5:77:1d:71:6c: de:66:b3:dd:60:b0:06:37:fd:9e:e6:ce:27:62:26:cd:41:1a: 33:e2:9a:7b:64:62:24:1a:58:e7:ad:a8:57:73:82:34:c7:5e: b2:ea:23:20:ed:42:65:ce:d3:54:e8:e4:a8:21:93:0a:6a:fe: 5b:8e:d5:3a:71:01:d9:0a:8d:85:e0:0e:c3:9a:06:01:c1:cb: ad:22:2e:8c:48:e1:b7:af:2c:4e:64:95:8f:eb:24:e0:86:ca: 56:86:ff:ea:14:da:9e:d3:b7:e9:d4:ed:95:11:fb:a3:fb:fc: f1:0d:fd:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQkUxMTAvBgNVBAUTKDlBMTYyNEY0NjA4MkY1NEFDNTc3ODg1OUUyMjZCRDNC QTY5MDIzRjQwHhcNMjUxMTA1MDY0MDA4WhcNMjUxMTEyMDY0MDA4WjAYMRYwFAYD VQQDEw02OTBhZjE0OS03NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vKmHqp41o1IRPvStN7db8CVwZjpT9Jzayw3QvPuO8SsQFbArlfaB+adZoYv s3Bqm1tjEr6MWTqxAO9vk2uCFhJFJ+RATB9JYKNY8/yng+1Rl9muBZiKIxBxD1aU /46vKUjR7ZzDlE5aX9o1ZR1amiF3ruVRmbkWgpHDqvVaYheOfX+ML3JVXHM4IiN1 E3ZoDd9jDwx3e1ySkwLK2VdGixsUxh+xPUg8Y2Pq2vrfmBR/6bT/lfqh2B8B0YC8 Yw6tTtkbuSPQc/7uH6XmA3/hwqUg8RmUHKtq5proq50XMjJSaqG9/OST3bFcNChf mhMJ3FQasqvPtsAgUgyuevX/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASfStv8 bGpLFXYcIx0Y4cCLDfXjMB8GA1UdIwQYMBaAFJoWJPRggvVKxXeIWeImvTumkCP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NCRS84M0JBODdBRUQ3 QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlVckZkNGhaNGlhOU82YVFJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NCRS84M0JBODdBRUQ3QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlV ckZkNGhaNGlhOU82YVFJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfe+dxyVPHz2NyQ/ZoXsLyFee+KVgGln1PC0jPaZoW7U2HjN9V2ckA fpP0QMa+JhCRdEm5C+j1r4T4QH/e+XHOhcKFU1lJifsU1z3tYBmEt09gIuPJ/65F 4JrRjm3bJ64asLMvM6JD9eSf3FzhHaRB+6HvkVdvw9t/v5/wfys0Jw8sjtraKYQb oFw+xXcdcWzeZrPdYLAGN/2e5s4nYibNQRoz4pp7ZGIkGljnrahXc4I0x16y6iMg 7UJlztNU6OSoIZMKav5bjtU6cQHZCo2F4A7DmgYBwcutIi6MSOG3ryxOZJWP6yTg hspWhv/qFNqe07fp1O2VEfuj+/zxDf0l -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:32 2025 by rpki-client