$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: +6ZQ9puVZJe/b+d+fwUTa73gIcqEsG6f4mcE7Oj5Jw4= Subject key identifier: 4A:7C:56:6A:F3:1A:55:D7:16:7A:33:A4:0E:8A:B6:16:A3:96:9C:59 Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 01B2 Signing time: Wed 05 Nov 2025 03:16:55 +0000 Manifest this update: Wed 05 Nov 2025 03:16:54 +0000 Manifest next update: Wed 12 Nov 2025 03:16:54 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: U/Eve6aYKVQkD+X86qDEFgJF7Ro/Vf3DPy0kiv9uUFQ=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: SraOPRWyc/dP6CmZHQSFQKbaOH7T0tjQk0r0ukGNNTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Nov 5 03:16:54 2025 GMT Not After : Nov 12 03:16:54 2025 GMT Subject: CN=690ac1a7-ff07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:05:58:f0:31:aa:93:d6:b6:d8:b5:f0:06: e7:94:0b:9a:de:ab:75:68:cd:a8:f3:35:b3:35:08: 29:5a:2b:7c:67:19:f6:be:ad:89:79:99:d0:48:47: d2:f3:23:42:5d:41:d0:76:c8:0e:7b:eb:83:3a:b4: 79:b1:a8:17:bb:ec:51:dd:2f:bf:fe:df:51:3e:53: ee:87:d8:bb:7c:76:19:b2:09:11:e7:07:20:f5:d9: 6e:98:77:7d:f9:c1:6d:a1:b2:86:13:2f:eb:6c:e4: 72:29:06:1b:3a:dc:87:c9:6a:dc:cb:ce:1d:3b:ad: 27:6a:29:f1:7b:5a:07:5e:a9:19:b6:04:a4:01:68: 2e:e8:72:5b:5f:07:26:69:08:0b:f4:44:1f:c2:c9: 49:1d:34:a7:11:af:35:30:2d:2c:5e:00:0f:e9:90: ad:ab:ff:bd:8c:5f:50:8a:df:b3:60:09:80:41:09: dc:0b:9e:08:6b:68:ff:71:89:32:63:9b:d5:f6:20: 23:2c:0f:ea:d9:0f:d6:57:1d:a1:2b:56:a6:a9:01: bf:aa:18:79:f1:84:5f:df:00:24:06:09:a4:29:ad: 06:68:00:ad:54:63:7a:88:42:a2:f7:15:66:8d:6b: 06:48:fc:fe:5d:ed:a2:2e:b3:88:34:60:c0:45:13: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:56:6A:F3:1A:55:D7:16:7A:33:A4:0E:8A:B6:16:A3:96:9C:59 X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:31:7e:4c:f4:c3:c6:b2:05:37:26:70:a3:aa:4e:ba:dc:f3: ec:aa:06:6f:0d:39:9b:94:f9:6a:94:59:d4:05:be:04:59:81: 0f:d8:fc:cc:c6:9d:2c:4e:a5:c5:b5:20:8b:fd:29:61:27:ce: d7:af:0f:1e:99:23:31:9e:f2:9a:5c:39:53:1d:21:0a:7e:b6: 07:b6:e0:08:3e:d6:ee:6c:e5:81:9e:15:85:6a:85:8f:ff:8d: 97:92:eb:b4:2d:aa:de:bb:88:70:cb:5d:cd:a4:35:8d:df:a7: 67:9a:90:91:9e:32:bb:5f:3f:b9:ff:62:12:e6:5a:a0:95:08: df:63:48:ad:e4:7f:80:92:af:ef:cd:7d:6d:3c:1a:6b:e8:ac: 6d:a3:4b:36:99:eb:de:bd:cf:8a:29:f6:85:da:78:34:0b:9d: ef:9d:63:4d:b0:3a:8e:40:f6:f0:e2:a8:8a:df:ef:53:3f:ab: 55:b2:7b:3f:18:9f:39:d1:ee:c7:34:a1:39:3d:e4:02:25:1f: 74:12:f6:c7:74:fb:23:28:8a:fc:83:97:da:ab:52:6c:d6:c1: 48:e7:94:78:86:28:4a:55:9b:bb:5e:9c:69:7d:22:cc:38:c6: 0c:fb:25:62:a9:44:12:6d:3c:d2:f8:af:10:74:21:ef:8a:66: 06:61:1e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUxMTA1MDMxNjU0WhcNMjUxMTEyMDMxNjU0WjAYMRYwFAYD VQQDEw02OTBhYzFhNy1mZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzUFWPAxqpPWtti18AbnlAua3qt1aM2o8zWzNQgpWit8Zxn2vq2JeZnQSEfS 8yNCXUHQdsgOe+uDOrR5sagXu+xR3S+//t9RPlPuh9i7fHYZsgkR5wcg9dlumHd9 +cFtobKGEy/rbORyKQYbOtyHyWrcy84dO60nainxe1oHXqkZtgSkAWgu6HJbXwcm aQgL9EQfwslJHTSnEa81MC0sXgAP6ZCtq/+9jF9Qit+zYAmAQQncC54Ia2j/cYky Y5vV9iAjLA/q2Q/WVx2hK1amqQG/qhh58YRf3wAkBgmkKa0GaACtVGN6iEKi9xVm jWsGSPz+Xe2iLrOINGDARRObzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp8Vmrz GlXXFnozpA6KthajlpxZMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvMX5M9MPGsgU3JnCjqk663PPsqgZvDTmblPlqlFnUBb4EWYEP2PzM xp0sTqXFtSCL/SlhJ87Xrw8emSMxnvKaXDlTHSEKfrYHtuAIPtbubOWBnhWFaoWP /42Xkuu0Lareu4hwy13NpDWN36dnmpCRnjK7Xz+5/2IS5lqglQjfY0it5H+Akq/v zX1tPBpr6Kxto0s2mevevc+KKfaF2ng0C53vnWNNsDqOQPbw4qiK3+9TP6tVsns/ GJ850e7HNKE5PeQCJR90EvbHdPsjKIr8g5faq1Js1sFI55R4hihKVZu7XpxpfSLM OMYM+yViqUQSbTzS+K8QdCHvimYGYR74 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:20 2025 by rpki-client