$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft File: o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json) Hash identifier: uP+fpdQ79KY1iujhRDL6xOKmig8pCLQfctQ8tGuEHkQ= Subject key identifier: 23:04:45:FF:44:DF:F8:4F:A2:91:DF:42:1E:96:71:79:F2:0A:7F:BD Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft Manifest number: 03FA Signing time: Mon 03 Nov 2025 00:25:29 +0000 Manifest this update: Mon 03 Nov 2025 00:25:29 +0000 Manifest next update: Mon 10 Nov 2025 00:25:29 +0000 Files and hashes: 1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: pg7VEhwYJ4RGQ7gSd0fe4Yc4gX9ZfGxyZ0bCmG5CCqQ=) 2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: /LvExGUs3Vr9wpRYY+a9ZS6EORFrCyhwbLTTuNvKjdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: Nov 3 00:25:29 2025 GMT Not After : Nov 10 00:25:29 2025 GMT Subject: CN=6907f679-be3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:de:79:59:30:8e:70:bb:28:2e:c0:66:52: f0:3c:f9:be:ed:e9:08:5f:9c:46:ea:37:65:35:94: 03:23:a5:08:7a:ab:44:a3:6d:96:f7:bd:19:6a:e1: 52:50:3e:22:e5:48:1c:35:1c:7b:ea:b7:10:d1:b5: 6f:11:67:d9:ce:ee:b4:7f:71:44:e9:df:53:8a:7e: cf:45:d4:ce:6c:c1:54:b2:bc:a9:b5:a3:ca:c8:74: e5:5c:2e:1c:66:ee:92:c6:f1:4d:44:fc:19:53:7b: 1e:b6:b2:dc:0c:5c:35:da:f9:8e:aa:e0:3d:40:78: 90:9d:6d:cf:a9:24:72:83:57:c2:61:64:e0:3a:9f: 97:d8:31:0f:23:b8:6b:6d:35:09:33:ef:1c:ef:ad: 99:a5:ff:3a:49:ce:52:1d:f6:04:b8:8c:27:74:94: a6:da:bd:39:68:05:1f:af:fd:9c:07:8d:5e:c1:35: db:bc:ce:50:d3:2f:3e:db:10:ab:0d:9c:67:0c:d5: aa:86:84:a0:85:9a:6c:36:de:38:13:25:cd:54:67: bb:b9:db:eb:97:62:0f:c5:74:92:48:0e:88:48:94: 20:8a:3c:07:ec:1f:5c:8c:d8:af:d9:af:d3:19:b1: f9:f2:fd:85:74:02:95:ed:48:72:5e:2d:47:c6:48: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:04:45:FF:44:DF:F8:4F:A2:91:DF:42:1E:96:71:79:F2:0A:7F:BD X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:b2:73:a7:58:30:d5:0f:bc:00:1e:d2:4d:50:a2:6d:d1: 32:7c:60:7c:d0:73:78:53:84:ed:85:82:06:2e:c0:d7:7c:94: 95:e6:1a:77:f9:f2:31:23:85:8b:21:9c:7b:37:85:4f:11:f5: 25:85:84:53:86:f2:66:24:ec:df:0c:ed:77:ba:96:9b:95:84: e4:17:1a:4a:94:21:42:10:b3:bc:a3:a2:29:5b:33:20:ac:81: d6:9c:64:18:e8:32:7f:13:bb:a9:0f:44:70:c5:d2:7c:72:26: b3:4a:ad:9a:7b:7f:29:9f:57:bd:6a:2a:7e:49:fc:7d:80:e0: 31:d0:77:e0:d6:64:f1:d3:00:6b:5c:a3:f1:e2:3f:d7:7a:a8: 5c:e8:4c:97:7f:6c:25:a7:3d:cf:c0:00:4e:97:ad:a7:15:3f: bf:7c:ea:d5:75:71:6a:1b:14:93:03:8f:c9:cc:d5:43:21:1b: 91:3a:a9:f9:51:dd:ae:a5:5c:ac:ed:48:c0:b9:45:df:de:53: 0f:1b:c8:e7:f1:20:0c:ea:14:ab:19:f6:dc:6d:fe:fd:51:30: b5:f2:a4:f8:b8:d3:58:c5:5b:2f:3c:27:57:ca:9d:93:ff:ec: d6:23:2b:14:6b:ee:63:29:bf:73:9a:ee:83:c9:32:4f:b6:8d: ab:3b:8e:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUxMTAzMDAyNTI5WhcNMjUxMTEwMDAyNTI5WjAYMRYwFAYD VQQDEw02OTA3ZjY3OS1iZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMneeVkwjnC7KC7AZlLwPPm+7ekIX5xG6jdlNZQDI6UIeqtEo22W970ZauFS UD4i5UgcNRx76rcQ0bVvEWfZzu60f3FE6d9Tin7PRdTObMFUsryptaPKyHTlXC4c Zu6SxvFNRPwZU3setrLcDFw12vmOquA9QHiQnW3PqSRyg1fCYWTgOp+X2DEPI7hr bTUJM+8c762Zpf86Sc5SHfYEuIwndJSm2r05aAUfr/2cB41ewTXbvM5Q0y8+2xCr DZxnDNWqhoSghZpsNt44EyXNVGe7udvrl2IPxXSSSA6ISJQgijwH7B9cjNiv2a/T GbH58v2FdAKV7UhyXi1Hxkj82QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMERf9E 3/hPopHfQh6WcXnyCn+9MB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRBMS82OENFQzA5NDk1NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5 NDZ2MDllMFFob3IyMHpXX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzxrJzp1gw1Q+8AB7STVCibdEyfGB80HN4U4TthYIGLsDXfJSV5hp3 +fIxI4WLIZx7N4VPEfUlhYRThvJmJOzfDO13upablYTkFxpKlCFCELO8o6IpWzMg rIHWnGQY6DJ/E7upD0RwxdJ8ciazSq2ae38pn1e9aip+Sfx9gOAx0Hfg1mTx0wBr XKPx4j/Xeqhc6EyXf2wlpz3PwABOl62nFT+/fOrVdXFqGxSTA4/JzNVDIRuROqn5 Ud2upVys7UjAuUXf3lMPG8jn8SAM6hSrGfbcbf79UTC18qT4uNNYxVsvPCdXyp2T /+zWIysUa+5jKb9zmu6DyTJPto2rO44B -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:09 2025 by rpki-client