$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: NOA0BaxWxVkmU/yhBDzO0UtD/16JvMNJE5iYGI2Brm8= Subject key identifier: ED:53:31:3E:D2:60:13:F4:FA:9F:09:71:48:B5:9F:BE:82:12:E6:D1 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 0590 Signing time: Tue 04 Nov 2025 23:16:17 +0000 Manifest this update: Tue 04 Nov 2025 23:16:16 +0000 Manifest next update: Tue 11 Nov 2025 23:16:16 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: b9JZKNIDvjDY+1tD+JT/EQT/8MAm+9urCfObRDLtihg=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: LSj0rBxO9Z29e6JUXgqXeUATalGSgm5CqWXMd5B6WOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Nov 4 23:16:16 2025 GMT Not After : Nov 11 23:16:16 2025 GMT Subject: CN=690a8941-e7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:30:d3:08:e5:13:de:4e:4f:50:7c:5f:70: 85:74:ac:a0:15:1a:1c:64:01:45:f9:97:f0:31:cc: 47:e8:85:74:cd:79:cf:e6:2c:53:a3:f3:73:ec:24: 76:17:66:86:d9:5f:6c:45:2b:88:c9:60:a4:a6:80: 0d:a7:b0:b2:48:68:d3:ba:8e:61:e5:4f:53:5b:e1: 27:a0:27:f2:5e:0f:de:90:5a:82:f5:86:ff:c0:8f: f5:10:89:25:74:e7:c1:95:47:61:2c:0a:ab:7d:2d: 72:51:54:31:1b:8d:91:21:38:54:20:42:b3:26:5d: 09:9c:5b:57:0a:16:2b:3c:a3:6f:b9:fc:d7:64:f3: 63:12:87:c9:9b:80:82:83:63:f2:1c:df:67:92:70: b7:e7:db:f0:cd:61:b1:da:bc:00:5a:3f:d1:6a:c6: c6:2f:91:6b:52:8b:6d:e9:97:73:60:98:17:24:cd: ac:66:d5:10:4a:fa:ef:a8:a1:62:7d:e9:97:ed:b7: f0:b2:51:72:30:63:e8:c4:9d:31:81:62:7f:cd:13: d6:1c:3f:92:10:ef:28:c5:4b:ad:6d:92:68:fa:db: 0f:8b:d6:60:c9:4c:c4:f3:24:7f:13:21:bb:fb:14: 1b:7a:65:31:fb:8a:7d:4f:17:b6:e8:fd:48:76:80: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:53:31:3E:D2:60:13:F4:FA:9F:09:71:48:B5:9F:BE:82:12:E6:D1 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:dc:40:2c:8b:d0:6a:d0:4e:b2:49:79:c6:ca:55:3f:40:2b: 66:33:8b:69:48:99:63:39:d2:cd:7f:d2:49:2c:ec:0d:cc:92: ee:f7:58:78:b2:4e:2e:54:bd:b0:30:ef:73:e3:4c:66:03:fb: 1b:ad:41:17:39:25:a8:90:09:df:4b:6c:24:f8:c9:6e:14:5e: 72:34:4a:e3:6f:e4:53:08:2e:f8:d9:3e:b7:ca:dc:85:fe:23: 73:aa:3c:cd:5c:e1:f9:5e:45:3b:d1:4a:63:a1:90:54:fd:ea: 2e:7c:b3:cd:8d:d6:f7:ce:22:94:a2:3a:af:88:0d:12:2d:2a: 28:a9:8c:c0:26:01:0f:f4:fb:68:ec:d5:c7:6d:17:3d:3f:89: ac:fd:f9:2b:71:1c:f2:22:0e:c5:7f:2d:2d:16:96:f2:ae:63: c2:ce:f3:3c:cf:d7:e6:2a:27:5f:66:af:99:50:07:b7:7a:5a: 87:27:31:ae:c1:b9:fc:22:97:6e:fb:55:c5:ef:11:08:29:2c: f8:eb:c2:63:42:15:64:ea:1a:26:8b:b7:63:f6:ae:0f:3c:ce: 4e:8d:09:14:7c:9c:a4:e7:90:78:ad:d0:f3:69:51:9c:72:41: 52:82:0c:4a:1d:ac:ac:45:f3:35:ac:65:91:fa:58:fc:8d:39: 77:9b:21:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUxMTA0MjMxNjE2WhcNMjUxMTExMjMxNjE2WjAYMRYwFAYD VQQDEw02OTBhODk0MS1lN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6Uw0wjlE95OT1B8X3CFdKygFRocZAFF+ZfwMcxH6IV0zXnP5ixTo/Nz7CR2 F2aG2V9sRSuIyWCkpoANp7CySGjTuo5h5U9TW+EnoCfyXg/ekFqC9Yb/wI/1EIkl dOfBlUdhLAqrfS1yUVQxG42RIThUIEKzJl0JnFtXChYrPKNvufzXZPNjEofJm4CC g2PyHN9nknC359vwzWGx2rwAWj/RasbGL5FrUott6ZdzYJgXJM2sZtUQSvrvqKFi femX7bfwslFyMGPoxJ0xgWJ/zRPWHD+SEO8oxUutbZJo+tsPi9ZgyUzE8yR/EyG7 +xQbemUx+4p9Txe26P1IdoAC4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1TMT7S YBP0+p8JcUi1n76CEubRMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz3EAsi9Bq0E6ySXnGylU/QCtmM4tpSJljOdLNf9JJLOwNzJLu91h4 sk4uVL2wMO9z40xmA/sbrUEXOSWokAnfS2wk+MluFF5yNErjb+RTCC742T63ytyF /iNzqjzNXOH5XkU70UpjoZBU/eoufLPNjdb3ziKUojqviA0SLSooqYzAJgEP9Pto 7NXHbRc9P4ms/fkrcRzyIg7Ffy0tFpbyrmPCzvM8z9fmKidfZq+ZUAe3elqHJzGu wbn8Ipdu+1XF7xEIKSz468JjQhVk6homi7dj9q4PPM5OjQkUfJyk55B4rdDzaVGc ckFSggxKHaysRfM1rGWR+lj8jTl3myGB -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:32 2025 by rpki-client