$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: 0qnNyrFek7tIoNTa0UPTcoT9v2JjLE2uRH3Z4QW0wIM= Subject key identifier: F3:59:A9:11:EC:4A:09:77:C9:3E:EB:C4:51:D7:58:9B:A3:2B:DA:43 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C94 Signing time: Tue 04 Nov 2025 18:26:41 +0000 Manifest this update: Tue 04 Nov 2025 18:26:40 +0000 Manifest next update: Tue 11 Nov 2025 18:26:40 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: rNJn0yMuqWof51YHYz/Xj/y+NGvg03R4d7sRohIpT4k=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Nov 4 18:26:40 2025 GMT Not After : Nov 11 18:26:40 2025 GMT Subject: CN=690a4561-93bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:7b:79:d9:1c:73:64:de:4d:6a:4c:d6:e6: bd:ad:b5:e8:84:f7:d8:86:56:7f:7a:7a:98:0c:14: 21:d1:13:83:89:56:76:c9:a4:fd:0b:73:df:18:74: 1d:76:71:21:c2:71:45:17:95:38:3b:2d:96:9e:be: 34:02:eb:87:83:24:64:ce:eb:21:2d:9f:6d:91:4f: 39:fb:82:45:e4:69:0b:e0:a5:5d:d8:0e:76:e1:83: 41:48:b0:c6:7f:6a:d8:38:74:8a:6b:8a:45:26:32: 9e:72:dd:4c:13:c3:b9:00:5f:56:a2:ab:9f:e0:4e: 09:6f:1c:66:8f:22:1d:23:98:86:5f:c7:a7:3d:88: ae:76:44:8b:4b:78:be:65:63:a6:f6:e1:57:c3:59: 6d:dd:45:4e:75:61:f8:5b:4c:08:7d:2b:d6:31:dc: a4:ef:d1:e7:fd:88:7c:99:4d:93:40:b3:31:6a:df: 2f:98:ad:af:fb:3d:ad:48:cf:dd:df:77:4e:87:3c: 18:e3:bc:e6:e1:76:1b:e2:f0:57:2e:a4:97:e3:dd: 2b:cb:34:61:02:ad:25:d5:43:7b:f1:25:fe:e8:2b: 54:00:e5:35:d7:72:fe:0d:f9:70:16:fa:6f:5e:1c: 23:b8:e3:fe:22:cc:25:4a:07:a6:3b:28:81:d8:00: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:59:A9:11:EC:4A:09:77:C9:3E:EB:C4:51:D7:58:9B:A3:2B:DA:43 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:13:34:f7:15:4c:87:fb:88:d3:e0:d1:5d:4d:83:a3:3c:70: 9f:0f:b4:f0:f3:73:3f:32:2f:11:51:45:11:03:2d:70:bf:ae: 3c:24:2d:89:7f:f4:5d:14:ea:46:b2:13:56:ec:c2:18:d1:2a: 1c:83:b1:4b:50:c4:db:54:f3:e3:5b:b2:0a:1b:62:8f:7c:3d: ad:07:b3:01:0b:b8:d6:40:dc:37:fc:c3:04:2b:32:6c:c2:db: c4:d0:bd:69:f1:4b:d0:51:a7:fa:f3:e6:b8:d2:e8:c2:a9:8e: 03:73:85:6b:65:aa:41:03:08:e2:54:3e:56:3c:13:3b:96:be: bf:c4:5f:21:d8:1e:61:ba:c2:fe:c0:41:7c:af:72:86:aa:ac: 54:48:2b:07:d0:cb:34:90:32:a4:a0:84:16:f8:eb:a1:27:34: 2d:1a:ea:ce:3a:10:80:01:d1:aa:d6:c2:ef:1e:23:e5:0f:07: eb:0f:3f:62:44:bf:ee:67:a0:20:9c:16:31:71:d0:5d:0a:bb: 9d:a7:5d:69:72:28:b1:5a:35:e6:12:00:d3:95:d0:6d:0e:79: ca:cd:be:db:17:ab:9d:51:50:2f:15:ea:26:a6:3e:4b:81:25: 96:c4:6b:51:49:ec:97:17:48:64:5f:7a:df:be:34:85:ab:a2: 3f:53:d0:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUxMTA0MTgyNjQwWhcNMjUxMTExMTgyNjQwWjAYMRYwFAYD VQQDEw02OTBhNDU2MS05M2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTp7edkcc2TeTWpM1ua9rbXohPfYhlZ/enqYDBQh0RODiVZ2yaT9C3PfGHQd dnEhwnFFF5U4Oy2Wnr40AuuHgyRkzushLZ9tkU85+4JF5GkL4KVd2A524YNBSLDG f2rYOHSKa4pFJjKect1ME8O5AF9Woquf4E4JbxxmjyIdI5iGX8enPYiudkSLS3i+ ZWOm9uFXw1lt3UVOdWH4W0wIfSvWMdyk79Hn/Yh8mU2TQLMxat8vmK2v+z2tSM/d 33dOhzwY47zm4XYb4vBXLqSX490ryzRhAq0l1UN78SX+6CtUAOU113L+DflwFvpv XhwjuOP+IswlSgemOyiB2ACZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNZqRHs Sgl3yT7rxFHXWJujK9pDMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATEzT3FUyH+4jT4NFdTYOjPHCfD7Tw83M/Mi8RUUURAy1wv648JC2J f/RdFOpGshNW7MIY0Socg7FLUMTbVPPjW7IKG2KPfD2tB7MBC7jWQNw3/MMEKzJs wtvE0L1p8UvQUaf68+a40ujCqY4Dc4VrZapBAwjiVD5WPBM7lr6/xF8h2B5husL+ wEF8r3KGqqxUSCsH0Ms0kDKkoIQW+OuhJzQtGurOOhCAAdGq1sLvHiPlDwfrDz9i RL/uZ6AgnBYxcdBdCrudp11pciixWjXmEgDTldBtDnnKzb7bF6udUVAvFeompj5L gSWWxGtRSeyXF0hkX3rfvjSFq6I/U9Ck -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:18 2025 by rpki-client