$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: JUnV6+gvYkWVzTFAzcYuzEMGMQZjZyDMG8AnQ1Cmo3k= Subject key identifier: 05:F9:90:A4:80:12:9F:55:23:39:C8:0D:92:BE:C6:73:F2:E5:DF:B0 Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 06E4 Signing time: Sun 02 Nov 2025 23:19:25 +0000 Manifest this update: Sun 02 Nov 2025 23:19:24 +0000 Manifest next update: Sun 09 Nov 2025 23:19:24 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: 84KqhEc04s0R07B/dOl7xdrJvksCdZWSo9n+R0fnVXs=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Nov 2 23:19:24 2025 GMT Not After : Nov 9 23:19:24 2025 GMT Subject: CN=6907e6fd-8bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:69:bd:e4:fb:b1:1a:82:f7:f8:22:b6:87: a0:d7:38:6c:6e:a0:f0:2e:ff:74:8c:84:47:1a:25: d6:98:27:84:78:c0:00:0d:13:5b:37:66:7e:1a:2c: ec:38:8a:4e:91:a3:47:14:28:53:06:26:48:97:a9: 4f:65:69:75:89:d5:76:c1:e1:3c:b9:42:8c:2a:d2: d0:ff:99:22:87:9f:6a:3b:4c:89:0e:71:e9:66:c8: d3:30:66:fc:51:0b:7c:88:f8:c3:09:bf:d7:e2:60: 0e:2f:45:bf:28:d2:73:26:ff:4e:ea:92:51:0c:45: 70:d3:d8:c6:f3:4b:a2:61:3f:e7:d8:0d:8a:67:0c: 23:bd:43:10:18:0a:98:a7:c0:ae:99:ae:74:8e:f5: aa:b2:c7:89:99:a7:dd:84:d9:01:cb:3b:66:66:46: fe:44:7d:c7:14:86:3e:e0:b8:af:a7:94:69:33:75: 6e:ea:4f:e2:e9:ae:7b:48:6d:56:db:aa:7b:68:a3: c1:68:d4:12:8f:18:df:3d:53:99:32:a5:98:e7:fb: 3b:26:9b:2e:b5:47:34:3c:6e:72:d5:ae:2b:b7:56: f4:bc:15:17:35:9d:bc:d7:df:74:a9:87:f2:c2:2a: 69:0c:9b:a3:54:75:f6:78:59:06:1d:00:1a:17:49: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F9:90:A4:80:12:9F:55:23:39:C8:0D:92:BE:C6:73:F2:E5:DF:B0 X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:8b:86:ef:27:5b:53:30:0a:63:7f:45:4c:9c:01:eb:7c:06: d9:78:c5:c1:db:a6:b9:03:45:a0:87:30:b6:66:bd:4d:4b:9b: dc:dc:10:03:df:99:6d:73:98:f7:6d:c2:78:78:4b:12:e9:35: 97:7f:ec:a5:d8:c4:72:dd:86:5f:35:0a:5c:41:5b:36:b6:b1: 51:ad:23:17:91:5a:47:2f:f8:33:5f:4e:0a:84:e2:87:d4:54: 99:cc:b9:0a:61:5b:1f:ba:2f:e5:6e:59:81:36:98:f3:36:90: e9:d4:f0:ba:4a:d7:cb:bf:7a:d0:b9:98:24:94:29:6c:cd:fb: 77:1e:b9:81:3d:11:87:3c:5c:eb:3f:c8:24:7d:35:f6:ed:14: 07:4a:50:ba:b4:d7:23:3e:cb:4e:4e:cd:0e:4a:d5:a8:6b:96: 7f:2a:19:38:9c:a3:f4:4a:1f:de:67:96:1d:b7:23:03:05:66: fa:ce:9a:53:2f:46:b9:e8:0e:1b:cf:88:fb:e2:d7:b6:d3:6c: 24:ab:72:38:02:20:f3:40:87:ba:05:62:fc:3e:75:f2:6b:c1: 49:11:4d:0c:a0:a3:a3:1e:0b:fe:5a:4f:1b:52:6e:cf:f7:ac: 67:4c:52:9f:e5:d3:2a:df:0e:dc:b0:a3:65:17:6f:5d:d2:7d: 7c:ad:32:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUxMTAyMjMxOTI0WhcNMjUxMTA5MjMxOTI0WjAYMRYwFAYD VQQDEw02OTA3ZTZmZC04YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPtpveT7sRqC9/gitoeg1zhsbqDwLv90jIRHGiXWmCeEeMAADRNbN2Z+Gizs OIpOkaNHFChTBiZIl6lPZWl1idV2weE8uUKMKtLQ/5kih59qO0yJDnHpZsjTMGb8 UQt8iPjDCb/X4mAOL0W/KNJzJv9O6pJRDEVw09jG80uiYT/n2A2KZwwjvUMQGAqY p8Cuma50jvWqsseJmafdhNkByztmZkb+RH3HFIY+4Livp5RpM3Vu6k/i6a57SG1W 26p7aKPBaNQSjxjfPVOZMqWY5/s7JpsutUc0PG5y1a4rt1b0vBUXNZ281990qYfy wippDJujVHX2eFkGHQAaF0lgDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX5kKSA Ep9VIznIDZK+xnPy5d+wMB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwi4bvJ1tTMApjf0VMnAHrfAbZeMXB26a5A0WghzC2Zr1NS5vc3BAD 35ltc5j3bcJ4eEsS6TWXf+yl2MRy3YZfNQpcQVs2trFRrSMXkVpHL/gzX04KhOKH 1FSZzLkKYVsfui/lblmBNpjzNpDp1PC6StfLv3rQuZgklClszft3HrmBPRGHPFzr P8gkfTX27RQHSlC6tNcjPstOTs0OStWoa5Z/Khk4nKP0Sh/eZ5YdtyMDBWb6zppT L0a56A4bz4j74te202wkq3I4AiDzQIe6BWL8PnXya8FJEU0MoKOjHgv+Wk8bUm7P 96xnTFKf5dMq3w7csKNlF29d0n18rTIy -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:46 2025 by rpki-client