$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft File: C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json) Hash identifier: By+YOpm64EottrWeVt/jjbbMBkHMMqCFh/ZZnFP8f6k= Subject key identifier: 76:C8:11:3A:86:81:40:33:88:6B:78:3E:B3:DE:7E:0F:A9:1A:82:95 Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Certificate serial: 0855 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft Manifest number: 0847 Signing time: Sun 02 Nov 2025 20:44:54 +0000 Manifest this update: Sun 02 Nov 2025 20:44:54 +0000 Manifest next update: Sun 09 Nov 2025 20:44:54 +0000 Files and hashes: 1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: F5OHeXQ3O2hdHj1pm2fHgs0KZLiS3ofSgp5gKknpUNs=) 2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: P0Z3h3HuumfxbGBOlXuGuMnAJ1+xepxRxLb1CH8TQZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155DEB, serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Validity Not Before: Nov 2 20:44:54 2025 GMT Not After : Nov 9 20:44:54 2025 GMT Subject: CN=6907c2c6-b01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:87:10:a7:38:5c:99:fe:b3:e1:52:02:ba: c8:e5:db:5b:6c:03:4f:e8:ae:49:50:38:3f:c6:f4: f5:7d:2d:99:c4:21:9b:06:c5:4b:56:e2:10:58:53: 59:82:b5:55:19:d6:10:a0:51:0f:b1:01:6f:83:f3: b1:7f:87:34:ed:70:6c:aa:16:e3:67:ee:93:88:91: f6:e0:4b:9b:27:00:62:b1:5b:69:27:3f:4a:0e:19: 70:b9:a8:a8:71:63:0b:e0:fb:aa:9d:de:6e:0a:66: 7c:b6:02:5b:7f:c3:4a:9e:0c:55:1f:eb:ad:dc:79: 5e:8e:20:73:4c:90:2f:16:a5:cc:ba:b1:8a:cb:d2: 69:c6:e3:6a:be:19:5d:e5:22:2c:ce:3b:e9:fb:e3: 49:8e:7c:e9:f7:c5:ff:71:bd:0f:c1:9c:f5:ec:24: 84:9a:72:37:08:7d:03:32:15:79:f6:68:23:11:d7: 12:82:56:4a:aa:de:14:b6:28:f6:4e:7b:01:4e:75: 12:d3:ba:ab:66:4d:02:f6:6e:47:cc:82:ee:06:d7: 73:2d:78:c7:f7:4a:6e:af:e2:78:d7:59:8c:df:bb: ed:12:06:1c:d3:0b:44:22:50:8b:96:c3:1b:03:cb: 97:f3:be:7e:c2:ff:91:87:95:39:82:22:e2:bd:fb: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:11:3A:86:81:40:33:88:6B:78:3E:B3:DE:7E:0F:A9:1A:82:95 X509v3 Authority Key Identifier: keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fb:27:57:dd:da:1b:49:b5:86:29:a6:55:60:1e:e5:ba:07: 6c:8e:84:b1:07:21:29:09:7b:6c:f4:c9:9d:40:4d:4e:3e:61: 35:05:32:db:3d:f2:e5:be:ff:f7:96:a0:90:f3:cd:60:a5:97: 01:07:e0:6e:76:40:46:55:39:68:3f:fa:fc:de:d0:a2:65:40: 9a:3a:96:8e:97:55:10:28:f5:31:0e:82:96:4d:3e:61:91:17: fe:1e:c8:86:6c:be:e5:cf:b1:e0:9f:bd:66:e5:5d:10:f5:9a: 56:ba:86:bb:14:ca:54:f9:8d:34:26:2b:3c:3b:72:7d:9a:18: d7:07:11:75:4f:db:54:2d:42:d8:d6:34:ff:01:f3:dc:97:0e: 7f:73:7d:a8:a7:76:72:3e:95:7c:99:e0:52:9c:f3:91:bb:7f: 99:ff:25:c0:cf:f7:5f:85:1a:e6:99:05:dc:6a:75:63:20:cd: 02:e1:5b:29:e6:5c:32:10:da:0e:70:11:a0:8a:20:47:45:bb: a8:e5:5c:6b:b7:8d:8f:8f:6f:77:41:d4:79:92:d2:df:a0:aa: 16:73:e8:99:b1:7a:79:ff:d7:96:a5:29:06:5c:3c:84:92:b1: 5b:99:71:40:7c:7e:61:05:f7:a4:63:65:10:a3:69:7e:26:d4: 65:2a:b7:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdCQjU3MUE1MjAw Q0U1NUQ4RjMwHhcNMjUxMTAyMjA0NDU0WhcNMjUxMTA5MjA0NDU0WjAYMRYwFAYD VQQDEw02OTA3YzJjNi1iMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf+HEKc4XJn+s+FSArrI5dtbbANP6K5JUDg/xvT1fS2ZxCGbBsVLVuIQWFNZ grVVGdYQoFEPsQFvg/Oxf4c07XBsqhbjZ+6TiJH24EubJwBisVtpJz9KDhlwuaio cWML4Puqnd5uCmZ8tgJbf8NKngxVH+ut3HlejiBzTJAvFqXMurGKy9JpxuNqvhld 5SIszjvp++NJjnzp98X/cb0PwZz17CSEmnI3CH0DMhV59mgjEdcSglZKqt4Utij2 TnsBTnUS07qrZk0C9m5HzILuBtdzLXjH90pur+J411mM37vtEgYc0wtEIlCLlsMb A8uX875+wv+Rh5U5giLivfvAcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbIETqG gUAziGt4PrPefg+pGoKVMB8GA1UdIwQYMBaAFAtTuApsnIrrdNbXu1caUgDOVdjz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NURFQi8xNjJDQjI3NEVB NEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1dDAxdGU3VnhwU0FNNVYy UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MxTzRDbXljaXV0MDF0ZTdWeHBTQU01VjJQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NURFQi8xNjJDQjI3NEVBNEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1 dDAxdGU3VnhwU0FNNVYyUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk+ydX3dobSbWGKaZVYB7lugdsjoSxByEpCXts9MmdQE1OPmE1BTLb PfLlvv/3lqCQ881gpZcBB+BudkBGVTloP/r83tCiZUCaOpaOl1UQKPUxDoKWTT5h kRf+HsiGbL7lz7Hgn71m5V0Q9ZpWuoa7FMpU+Y00Jis8O3J9mhjXBxF1T9tULULY 1jT/AfPclw5/c32op3ZyPpV8meBSnPORu3+Z/yXAz/dfhRrmmQXcanVjIM0C4Vsp 5lwyENoOcBGgiiBHRbuo5Vxrt42Pj293QdR5ktLfoKoWc+iZsXp5/9eWpSkGXDyE krFbmXFAfH5hBfekY2UQo2l+JtRlKrfU -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:56 2025 by rpki-client