$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft File: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json) Hash identifier: 6EXUegx/BACRqMvqQBAcZq2v3VUNUNaqH/NzYUE7N1o= Subject key identifier: F3:66:C7:19:11:6E:B9:9C:16:1F:43:13:62:EE:2A:70:2F:9A:83:22 Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 07:49:19 +0000 Manifest this update: Mon 03 Nov 2025 07:49:18 +0000 Manifest next update: Mon 10 Nov 2025 07:49:18 +0000 Files and hashes: 1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: eCXNcPdiMMrDw1nh7fLpzHWTi1TpH/RHS2W/hx+0KT0=) 2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Validity Not Before: Nov 3 07:49:18 2025 GMT Not After : Nov 10 07:49:18 2025 GMT Subject: CN=69085e7e-face Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:dd:f9:e4:32:0d:2a:54:56:2f:4f:ae:e9: 0f:ef:15:b9:19:9e:a6:25:f5:87:f3:65:f4:7a:74: 1c:88:43:85:96:40:7a:c2:fa:ad:f6:98:70:96:a3: b2:31:10:53:fd:fa:4e:07:fa:9d:7b:f1:8a:08:13: 6c:3d:33:b6:ad:b1:75:1e:73:69:26:19:a8:a3:12: 03:55:56:fa:0c:b0:a9:5a:90:2a:2b:9d:cd:e6:b9: 63:ab:63:a5:a5:8e:18:1a:14:c7:b2:7b:f4:dd:03: a9:43:58:80:f8:af:f5:a0:68:a7:07:e7:f6:8b:5f: 0c:20:f4:07:46:eb:96:1c:eb:09:5f:2c:03:5f:e1: a6:2c:5e:0e:4e:5e:4b:63:32:81:90:14:ec:7f:77: 34:d1:8a:03:26:c9:ae:b3:39:7c:7a:b9:d4:19:c3: 43:73:d4:e8:60:ab:f7:8a:a9:f8:7e:2e:b5:39:77: dd:ed:10:50:25:4a:5d:f0:39:f9:20:9c:3a:70:4c: ce:f2:37:2d:58:c5:75:30:0d:8a:cf:e1:fe:79:72: 8a:66:38:89:ee:ba:19:1e:8a:e7:8b:bb:ae:90:a2: 93:81:7a:ed:35:51:2e:72:fe:39:d3:61:64:50:ab: 51:c2:71:02:38:ac:d8:a8:d1:0e:db:dc:43:61:b6: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:66:C7:19:11:6E:B9:9C:16:1F:43:13:62:EE:2A:70:2F:9A:83:22 X509v3 Authority Key Identifier: keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9e:4b:f9:da:c1:80:5d:5d:1f:dc:7a:ea:dd:c1:54:8b:91: d6:ee:50:66:41:2f:ca:3b:c1:78:20:b0:91:f9:96:9d:e9:8e: 43:da:56:37:86:9e:9e:0d:30:8f:2b:08:d8:11:2c:1f:d2:f5: 71:3e:4f:05:8e:c8:1d:64:e3:77:59:f5:ca:29:71:62:f6:75: a1:da:a5:4c:2f:e1:7b:66:8c:be:12:64:b0:cb:31:e0:13:6b: 5d:47:ef:82:f6:30:0c:a7:96:92:29:b7:70:cc:35:0b:3b:b4: ef:1f:e2:9c:91:68:79:d6:a8:76:9f:fd:af:4a:8e:d2:41:cd: 2b:97:8a:40:32:1c:44:3a:d7:64:c4:a6:64:61:88:9f:0d:7c: cd:56:5d:8a:ec:23:22:2e:ad:1d:cf:6b:34:06:56:ce:9d:64: 1b:f8:c9:19:ce:32:48:c2:8b:c4:48:0c:64:d2:77:c0:df:bf: dc:b1:6e:be:4a:02:05:cc:ae:a8:4c:e0:57:bc:e5:69:13:fe: c8:bc:89:1e:cc:c1:9a:29:7e:68:6f:d9:1f:10:5c:27:fe:f1: 25:42:8f:42:7b:e8:49:2d:5b:3a:be:68:14:5a:3e:c5:30:d6: 79:eb:31:c7:a0:17:b4:5a:20:82:cf:60:ea:e0:58:9e:c3:fa: 90:5e:56:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NERBQzExMC8GA1UEBRMoOUJCNkIxNEVGQjUyMjQ4RTg0QkJGQjZDODM3OUZEQUVE QjA5OUNGNDAeFw0yNTExMDMwNzQ5MThaFw0yNTExMTAwNzQ5MThaMBgxFjAUBgNV BAMTDTY5MDg1ZTdlLWZhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDp9355DINKlRWL0+u6Q/vFbkZnqYl9YfzZfR6dByIQ4WWQHrC+q32mHCWo7Ix EFP9+k4H+p178YoIE2w9M7atsXUec2kmGaijEgNVVvoMsKlakCornc3muWOrY6Wl jhgaFMeye/TdA6lDWID4r/WgaKcH5/aLXwwg9AdG65Yc6wlfLANf4aYsXg5OXktj MoGQFOx/dzTRigMmya6zOXx6udQZw0Nz1Ohgq/eKqfh+LrU5d93tEFAlSl3wOfkg nDpwTM7yNy1YxXUwDYrP4f55copmOInuuhkeiueLu66QopOBeu01US5y/jnTYWRQ q1HCcQI4rNio0Q7b3ENhtmnFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU82bHGRFu uZwWH0MTYu4qcC+agyIwHwYDVR0jBBgwFoAUm7axTvtSJI6Eu/tsg3n9rtsJnPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0REFDL0RCNDgwRkI4OTA5 NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5Q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTdheFR2dFNKSTZFdV90c2czbjlydHNKblBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 REFDL0RCNDgwRkI4OTA5NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2 RXVfdHNnM245cnRzSm5QUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIeeS/nawYBdXR/ceurdwVSLkdbuUGZBL8o7wXggsJH5lp3pjkPaVjeG np4NMI8rCNgRLB/S9XE+TwWOyB1k43dZ9copcWL2daHapUwv4XtmjL4SZLDLMeAT a11H74L2MAynlpIpt3DMNQs7tO8f4pyRaHnWqHaf/a9KjtJBzSuXikAyHEQ612TE pmRhiJ8NfM1WXYrsIyIurR3PazQGVs6dZBv4yRnOMkjCi8RIDGTSd8Dfv9yxbr5K AgXMrqhM4Fe85WkT/si8iR7MwZopfmhv2R8QXCf+8SVCj0J76EktWzq+aBRaPsUw 1nnrMcegF7RaIILPYOrgWJ7D+pBeVhw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:43 2025 by rpki-client