$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: yu83fHRGslRuvZxv2YPotYv3Cr1/yzyxtITB3FRAZW8= Subject key identifier: 83:56:05:7B:48:E8:AD:E7:51:AC:89:3D:DD:E2:A1:E7:A1:3A:67:92 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0B8B Signing time: Tue 04 Nov 2025 19:18:14 +0000 Manifest this update: Tue 04 Nov 2025 19:18:14 +0000 Manifest next update: Tue 11 Nov 2025 19:18:14 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: RSsxrEuZOlpFufxl2nIw4wLBtPHG04PvzhS/VEX7+WY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Nov 4 19:18:14 2025 GMT Not After : Nov 11 19:18:14 2025 GMT Subject: CN=690a5176-1b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:00:52:32:67:9c:df:c2:7f:d8:90:74:e1: fa:42:a9:32:9b:0c:07:c2:4b:cc:2f:32:78:33:4b: e4:fd:cd:3a:02:aa:34:66:57:59:f3:2e:37:6e:a9: 36:2f:14:e9:75:50:bc:86:90:5f:96:6c:ba:21:b6: c8:bd:b5:5b:f5:a7:a6:71:ad:84:a6:f7:91:e2:05: 83:30:31:55:99:00:f6:58:a9:99:73:00:cb:30:50: 77:29:c5:31:f2:1d:41:3b:8d:3b:45:f8:38:ef:e9: 3c:3e:4c:60:b4:5d:fd:62:49:48:79:76:c5:62:03: 06:e1:c1:db:60:29:cf:1a:95:ed:4b:e9:4c:ff:76: 22:1a:11:b2:74:9e:9d:b5:48:ce:c2:34:b0:26:27: bf:b0:15:19:5b:ce:ba:2a:78:99:54:bd:d0:a7:c8: 26:20:34:96:c9:97:d7:13:43:14:15:18:1d:7f:17: 84:a3:15:82:43:dc:de:74:a8:77:9d:18:5b:9c:71: 62:66:62:ec:4f:e7:e0:75:5c:dd:6a:3e:dd:89:62: 09:25:12:2a:6c:e4:c3:f5:32:79:fd:33:a3:48:92: de:65:e4:c8:be:eb:14:80:d8:a0:bc:94:9f:c6:02: 5e:f0:5e:25:d9:63:a0:46:56:83:d2:e1:b2:b0:d3: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:56:05:7B:48:E8:AD:E7:51:AC:89:3D:DD:E2:A1:E7:A1:3A:67:92 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d7:9f:33:d0:56:db:ac:76:9b:da:28:a2:fa:8f:12:57:2d: b9:1a:6a:c0:c8:cb:f3:60:03:a4:25:0c:b0:47:1c:f2:e1:f3: ff:3f:49:08:29:66:d5:cc:1f:6c:67:0a:60:0b:0a:21:b1:8b: 83:62:4b:a4:3c:b7:32:ee:f4:e3:85:8a:39:99:83:cf:7b:4f: b1:0b:f3:55:07:bc:e2:06:64:cf:28:6f:e4:0f:87:03:1b:b2: 54:91:9a:69:af:9e:23:37:9d:53:5e:b1:d4:06:ae:e4:0e:64: 21:25:a2:15:c2:d0:61:8d:d0:3c:14:fd:48:3d:64:72:cb:ea: 14:98:77:15:e9:bb:2c:11:74:80:e4:6a:59:50:95:2c:4d:d8: b4:ed:bf:53:9d:05:08:26:29:a5:2f:72:f3:9d:8c:37:68:85: f8:e5:f8:9f:8a:b0:f5:7f:0d:18:2b:fc:94:db:d3:9a:27:41: c0:73:00:44:05:61:8e:8f:d6:a4:d8:c2:f5:c5:ab:94:17:8c: d4:d8:28:d6:1a:21:f3:6a:f7:18:07:5d:08:33:ea:49:e9:2e: ce:a3:24:5a:26:9b:b9:59:58:49:c7:00:93:60:3d:62:5a:9f: 18:9c:2e:a9:04:8f:a9:4b:d3:33:d7:a1:53:71:48:a5:94:9b: 56:69:63:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUxMTA0MTkxODE0WhcNMjUxMTExMTkxODE0WjAYMRYwFAYD VQQDEw02OTBhNTE3Ni0xYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqkAUjJnnN/Cf9iQdOH6QqkymwwHwkvMLzJ4M0vk/c06Aqo0ZldZ8y43bqk2 LxTpdVC8hpBflmy6IbbIvbVb9aemca2EpveR4gWDMDFVmQD2WKmZcwDLMFB3KcUx 8h1BO407Rfg47+k8PkxgtF39YklIeXbFYgMG4cHbYCnPGpXtS+lM/3YiGhGydJ6d tUjOwjSwJie/sBUZW866KniZVL3Qp8gmIDSWyZfXE0MUFRgdfxeEoxWCQ9zedKh3 nRhbnHFiZmLsT+fgdVzdaj7diWIJJRIqbOTD9TJ5/TOjSJLeZeTIvusUgNigvJSf xgJe8F4l2WOgRlaD0uGysNNA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINWBXtI 6K3nUayJPd3ioeehOmeSMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI158z0FbbrHab2iii+o8SVy25GmrAyMvzYAOkJQywRxzy4fP/P0kI KWbVzB9sZwpgCwohsYuDYkukPLcy7vTjhYo5mYPPe0+xC/NVB7ziBmTPKG/kD4cD G7JUkZppr54jN51TXrHUBq7kDmQhJaIVwtBhjdA8FP1IPWRyy+oUmHcV6bssEXSA 5GpZUJUsTdi07b9TnQUIJimlL3LznYw3aIX45fifirD1fw0YK/yU29OaJ0HAcwBE BWGOj9ak2ML1xauUF4zU2CjWGiHzavcYB10IM+pJ6S7OoyRaJpu5WVhJxwCTYD1i Wp8YnC6pBI+pS9Mz16FTcUillJtWaWOK -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:08 2025 by rpki-client