$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: vkxvreY3Ym2zRC0u/TCBkwHQCUevNuoiioA9HLnb1ic= Subject key identifier: 14:EF:3A:A9:0C:87:5A:7D:D1:7E:8D:2A:E9:F7:37:C8:A0:FC:36:F8 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0C81 Signing time: Tue 04 Nov 2025 18:32:34 +0000 Manifest this update: Tue 04 Nov 2025 18:32:33 +0000 Manifest next update: Tue 11 Nov 2025 18:32:33 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: b1P78W7UDcA+A1AxZm0IIO7xmT6v29G0OhBw9KkgtqY=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Nov 4 18:32:33 2025 GMT Not After : Nov 11 18:32:33 2025 GMT Subject: CN=690a46c1-4a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:cb:1e:a9:d7:ca:4e:a4:c3:7e:18:fd:56: 38:e5:d9:91:b2:37:f1:22:81:bd:b3:98:93:bd:ae: 0a:6b:eb:32:41:d6:0b:11:5e:41:5e:02:6a:85:7d: 74:e6:8c:68:50:ae:76:ce:02:bd:d2:c9:ea:dc:aa: f3:d3:eb:69:31:64:b7:94:51:8e:4f:1d:44:66:51: e4:d4:f7:29:1a:d5:41:c4:c8:d3:58:1c:95:e4:57: 55:76:80:f8:47:c8:4d:f1:40:03:fe:dd:5a:cc:2e: 26:2b:c1:a3:19:bd:cd:1a:8d:f9:bf:ab:96:c5:94: eb:c4:33:88:2b:81:4a:b9:7f:01:d0:15:53:03:71: 5b:4f:85:51:68:92:1d:33:08:4f:89:eb:b4:e5:64: 18:a9:9d:00:2c:42:24:0d:c9:a6:1f:69:b8:b7:8c: bf:73:73:a4:d4:d6:40:01:e2:4b:87:43:9b:e4:e8: 4c:5d:f8:db:c1:5e:39:a5:6c:b9:bb:57:eb:45:2c: 3e:b7:b7:86:b6:8e:95:70:3a:b2:77:83:d2:58:22: 63:04:6d:98:5f:63:f8:38:bd:3f:10:73:4c:7e:ec: 8c:05:cc:f0:49:43:ab:cf:8c:63:2a:33:1e:b9:44: 49:f4:3b:bb:96:fa:43:37:0d:9e:0b:b8:51:a9:07: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EF:3A:A9:0C:87:5A:7D:D1:7E:8D:2A:E9:F7:37:C8:A0:FC:36:F8 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:38:f5:05:9c:e5:1e:07:43:bb:a5:f9:6f:2b:7f:b8:8c: 72:e7:fd:43:59:d1:86:d0:ef:24:87:1b:f8:1a:ee:3c:3e:a1: 94:49:6d:24:09:8b:97:db:d8:e8:6e:77:22:1d:3c:d2:ba:32: ba:16:5d:a3:df:43:2e:2b:06:4f:07:70:cb:7f:9e:7b:61:b6: 6c:94:c0:ed:22:4c:94:36:36:c8:b0:c0:66:45:3a:51:0a:41: 62:c4:98:67:48:a6:5a:7d:12:5a:93:6b:04:a5:e6:f1:a1:ae: 6a:77:4d:cc:e2:31:fe:2d:fa:87:92:ce:6b:9d:14:74:86:15: 6e:39:2a:30:be:8a:8e:d1:81:7a:7e:67:20:93:0b:0e:7a:1d: 46:08:83:d2:7f:c5:70:69:31:4c:cf:0b:f5:2d:d8:ec:89:a5: 69:fa:ec:38:0f:6b:c5:c9:ac:6f:82:7d:50:00:dc:59:ec:e7: f7:83:49:b1:c5:a3:a3:eb:c9:02:0d:9b:f5:a3:a5:4a:9e:fc: fd:4f:c5:72:ca:6f:f5:2c:1a:e7:34:c7:f1:e0:dd:ae:82:bc: 42:da:44:26:0e:84:d7:57:95:d0:51:24:cd:d0:67:db:39:46: 1e:e0:16:2d:5d:ad:b8:14:02:dc:7d:15:df:3e:18:ea:f8:27: be:73:c7:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjUxMTA0MTgzMjMzWhcNMjUxMTExMTgzMjMzWjAYMRYwFAYD VQQDEw02OTBhNDZjMS00YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNzLHqnXyk6kw34Y/VY45dmRsjfxIoG9s5iTva4Ka+syQdYLEV5BXgJqhX10 5oxoUK52zgK90snq3Krz0+tpMWS3lFGOTx1EZlHk1PcpGtVBxMjTWByV5FdVdoD4 R8hN8UAD/t1azC4mK8GjGb3NGo35v6uWxZTrxDOIK4FKuX8B0BVTA3FbT4VRaJId MwhPieu05WQYqZ0ALEIkDcmmH2m4t4y/c3Ok1NZAAeJLh0Ob5OhMXfjbwV45pWy5 u1frRSw+t7eGto6VcDqyd4PSWCJjBG2YX2P4OL0/EHNMfuyMBczwSUOrz4xjKjMe uURJ9Du7lvpDNw2eC7hRqQc4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTvOqkM h1p90X6NKun3N8ig/Db4MB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR8jj1BZzlHgdDu6X5byt/uIxy5/1DWdGG0O8khxv4Gu48PqGUSW0k CYuX29jobnciHTzSujK6Fl2j30MuKwZPB3DLf557YbZslMDtIkyUNjbIsMBmRTpR CkFixJhnSKZafRJak2sEpebxoa5qd03M4jH+LfqHks5rnRR0hhVuOSowvoqO0YF6 fmcgkwsOeh1GCIPSf8VwaTFMzwv1LdjsiaVp+uw4D2vFyaxvgn1QANxZ7Of3g0mx xaOj68kCDZv1o6VKnvz9T8Vyym/1LBrnNMfx4N2ugrxC2kQmDoTXV5XQUSTN0Gfb OUYe4BYtXa24FALcfRXfPhjq+Ce+c8fg -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:03 2025 by rpki-client