$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: WBgX+RS53eRwA0646nXZ/USpjMXrgQKKYChkE2nQTmU= Subject key identifier: 77:14:65:FA:D2:88:1D:1A:B0:A4:70:E9:72:2B:FA:33:9B:31:1C:10 Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 0424 Signing time: Mon 03 Nov 2025 00:18:45 +0000 Manifest this update: Mon 03 Nov 2025 00:18:44 +0000 Manifest next update: Mon 10 Nov 2025 00:18:44 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: ZLywkuXw+Jt0gCZ3I6JVuMtMC/95kSbUjjEjS63T6pA=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Nov 3 00:18:44 2025 GMT Not After : Nov 10 00:18:44 2025 GMT Subject: CN=6907f4e4-72de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:d7:68:17:5c:55:0b:62:4f:be:f8:f2:4b: 94:6f:4c:52:24:9b:78:d3:43:29:49:fb:d5:97:9d: 46:a0:3c:d8:3d:87:24:fa:28:60:13:4e:a1:f3:cd: 15:f3:b1:7e:a3:af:c2:09:f5:e5:60:ea:9f:0d:21: 8e:5d:be:0a:31:6e:0c:78:b1:3b:e7:f7:85:cd:ea: eb:6e:06:ec:86:3b:b8:c0:f4:de:a7:2d:d2:36:5d: c4:3c:78:5d:0f:e6:7c:6f:ef:b5:bb:7c:0c:c1:68: 7e:b1:b8:c3:2c:b0:1b:a4:5b:f5:54:97:85:51:37: d8:c3:75:3b:b1:65:48:51:5e:49:d8:3f:dc:b6:2c: 39:d1:75:0e:37:95:9f:f8:45:75:ec:88:df:81:d1: ff:9b:9f:b6:64:ba:52:ae:ee:8c:8c:96:02:5a:1e: 56:55:23:57:2b:7c:05:96:4f:eb:a3:6d:5a:72:d9: 6e:27:fa:e4:0c:ef:41:11:c2:1d:e8:5e:b1:97:54: 32:f4:a1:a3:18:cc:8d:88:8a:db:37:19:e2:51:79: 4b:1f:ae:99:cc:fc:b1:09:db:e3:d5:3c:8e:4e:ef: 5e:20:6c:8e:81:2b:3b:a8:d4:75:2c:8b:a6:fc:f2: 4a:03:dd:48:a7:7b:2f:5a:d8:ec:d6:39:c0:f2:48: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:65:FA:D2:88:1D:1A:B0:A4:70:E9:72:2B:FA:33:9B:31:1C:10 X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fb:bd:83:3d:71:09:f8:b3:e2:e9:ef:68:51:6a:53:dc:d2: 01:98:3d:2a:d6:d3:af:20:bf:84:39:14:95:a5:59:df:8c:e4: c7:4d:17:21:3a:27:c9:8e:c9:dd:87:28:31:b0:27:33:a0:2c: 3f:f1:d3:af:4a:de:22:65:35:c1:54:b9:a8:b6:7e:c9:23:74: de:61:6a:bb:f9:5c:a6:79:31:9f:7d:7c:39:58:8d:21:bc:1c: f8:1a:aa:28:07:a1:b3:c0:23:b6:8e:f8:f5:65:03:40:b5:3d: b4:81:d7:22:29:74:c5:b0:f3:d7:8e:83:7e:f9:e7:68:f5:a4: 96:5f:96:ae:e6:59:e9:7a:1a:d1:5e:5a:08:50:a2:76:7a:11: 28:54:b7:3b:c5:c0:bc:f8:b8:aa:b8:b5:24:6b:42:fc:90:8e: 6d:78:47:0b:82:ed:95:f6:17:df:8c:b9:9e:80:ba:ce:c5:92: 0e:84:12:c5:7d:6d:57:da:0c:8f:7a:77:c3:cf:8a:69:2c:f2: b7:16:2e:5b:c2:ab:9c:db:92:39:b2:fd:bb:f0:c3:5a:be:3d: 2e:39:63:86:5f:54:a7:c2:1f:8d:cb:f1:0d:4c:00:20:0a:82: 3a:8b:de:8a:16:4c:a8:56:d6:48:ad:78:17:46:7d:a7:c1:22: 9b:ff:ce:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUxMTAzMDAxODQ0WhcNMjUxMTEwMDAxODQ0WjAYMRYwFAYD VQQDEw02OTA3ZjRlNC03MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXjXaBdcVQtiT7748kuUb0xSJJt400MpSfvVl51GoDzYPYck+ihgE06h880V 87F+o6/CCfXlYOqfDSGOXb4KMW4MeLE75/eFzerrbgbshju4wPTepy3SNl3EPHhd D+Z8b++1u3wMwWh+sbjDLLAbpFv1VJeFUTfYw3U7sWVIUV5J2D/ctiw50XUON5Wf +EV17IjfgdH/m5+2ZLpSru6MjJYCWh5WVSNXK3wFlk/ro21actluJ/rkDO9BEcId 6F6xl1Qy9KGjGMyNiIrbNxniUXlLH66ZzPyxCdvj1TyOTu9eIGyOgSs7qNR1LIum /PJKA91Ip3svWtjs1jnA8kgxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcUZfrS iB0asKRw6XIr+jObMRwQMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc+72DPXEJ+LPi6e9oUWpT3NIBmD0q1tOvIL+EORSVpVnfjOTHTRch OifJjsndhygxsCczoCw/8dOvSt4iZTXBVLmotn7JI3TeYWq7+VymeTGffXw5WI0h vBz4GqooB6GzwCO2jvj1ZQNAtT20gdciKXTFsPPXjoN++edo9aSWX5au5lnpehrR XloIUKJ2ehEoVLc7xcC8+LiquLUka0L8kI5teEcLgu2V9hffjLmegLrOxZIOhBLF fW1X2gyPenfDz4ppLPK3Fi5bwquc25I5sv278MNavj0uOWOGX1Snwh+Ny/ENTAAg CoI6i96KFkyoVtZIrXgXRn2nwSKb/86V -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:22 2025 by rpki-client