$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: pVE32RpjgHHXFfo1TIFr/c9KCtvTEUByI6pZDbkMOaw= Subject key identifier: 38:E6:89:32:39:94:9E:1C:4D:AC:95:1D:50:5D:EC:5A:15:B6:49:B5 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0B28 Signing time: Sun 02 Nov 2025 19:15:17 +0000 Manifest this update: Sun 02 Nov 2025 19:15:16 +0000 Manifest next update: Sun 09 Nov 2025 19:15:16 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: RfdVS6l2iwBpFZ/PcJQKV20TeBR1o92lFXUZGrKX99E=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: 8QV3Z7HQrXKgQcgsCkmTuSXwKLorUwTjpR6lcWwX/xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Nov 2 19:15:16 2025 GMT Not After : Nov 9 19:15:16 2025 GMT Subject: CN=6907adc5-fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:64:2e:e1:e2:6b:f6:56:24:9c:6d:1d:ce:91: a1:5f:9e:5b:35:97:d5:ab:d4:62:f8:93:d6:06:bd: 92:c7:c7:59:ba:08:df:a8:f7:0d:b9:93:a9:b5:62: 2c:c2:c7:d6:3c:a8:70:84:1e:6c:4c:12:5b:f1:8e: 36:7c:94:25:fa:d5:ce:07:88:74:4c:f9:86:56:9d: e6:85:dd:3c:3a:93:0a:03:ad:b6:69:65:e2:74:f6: ea:f6:21:ee:ed:9a:69:6a:1b:d3:cb:72:f2:23:74: 4c:f1:60:cb:de:21:22:97:77:d3:02:78:1c:dd:c5: 02:13:f4:53:ce:10:b8:24:f2:5a:54:bd:aa:0e:5c: 72:b2:c0:5c:82:b4:4f:f2:fb:73:d5:a7:56:c5:47: f6:c9:02:e8:57:01:a3:67:8b:2f:1c:2d:1a:00:98: 1c:81:8b:3c:01:15:b3:48:56:bd:d3:0a:b3:b4:09: 63:d0:88:84:10:f9:e3:11:1a:9c:3f:71:0b:38:cc: 41:1e:10:cd:a9:e3:18:03:7d:06:de:9c:c4:5b:bf: 39:f4:69:8b:20:f6:b5:02:cf:71:33:14:07:cc:1e: de:f6:c1:d5:27:8f:ea:15:8e:42:25:47:8b:ac:1b: 4b:8b:9d:f7:da:ef:a9:89:76:e5:47:5a:29:26:54: 6c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E6:89:32:39:94:9E:1C:4D:AC:95:1D:50:5D:EC:5A:15:B6:49:B5 X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:79:32:db:d0:5b:e1:b6:fe:85:99:81:bb:cc:85:1b:c0:cf: 01:29:7c:21:c1:1c:ad:34:e3:15:b9:ad:bb:e1:4b:27:98:5f: f3:b2:46:b1:df:be:fa:bb:15:93:67:7d:9f:7c:97:69:eb:bc: 79:5b:39:d2:c4:d2:ba:f3:0f:60:c2:fa:61:13:9d:f6:25:35: db:3a:16:13:7b:7d:f6:10:9e:e1:cc:f6:7f:6b:c8:56:ce:5f: 88:38:60:85:d2:b0:87:67:ae:d4:32:46:10:de:30:ea:44:86: 27:27:3f:64:3f:9c:f8:0a:da:51:89:30:9d:aa:99:34:ec:99: a4:57:93:cb:0c:7a:64:e4:02:c1:8d:03:1f:59:4e:bc:1c:08: 76:62:6b:63:65:94:5c:a8:91:35:2c:21:b7:91:45:8b:b5:6e: ba:3a:97:f5:27:ed:16:20:da:fc:59:f3:35:53:30:bc:26:94: 9c:6a:35:44:fa:fe:f4:ba:40:ca:c7:f6:27:56:8a:74:a5:bd: 16:14:02:46:bd:e1:32:c6:30:c1:c9:9d:a8:9e:07:e0:c4:76: e8:b2:36:ed:b5:1f:90:a7:06:8e:64:10:9d:10:cd:c6:c7:16: 22:3b:dd:4c:33:e2:04:87:f0:1c:f5:61:3a:0d:03:c4:1b:61: 9d:51:d4:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjUxMTAyMTkxNTE2WhcNMjUxMTA5MTkxNTE2WjAYMRYwFAYD VQQDEw02OTA3YWRjNS1mYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WQu4eJr9lYknG0dzpGhX55bNZfVq9Ri+JPWBr2Sx8dZugjfqPcNuZOptWIs wsfWPKhwhB5sTBJb8Y42fJQl+tXOB4h0TPmGVp3mhd08OpMKA622aWXidPbq9iHu 7ZppahvTy3LyI3RM8WDL3iEil3fTAngc3cUCE/RTzhC4JPJaVL2qDlxyssBcgrRP 8vtz1adWxUf2yQLoVwGjZ4svHC0aAJgcgYs8ARWzSFa90wqztAlj0IiEEPnjERqc P3ELOMxBHhDNqeMYA30G3pzEW7859GmLIPa1As9xMxQHzB7e9sHVJ4/qFY5CJUeL rBtLi5332u+piXblR1opJlRsMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjmiTI5 lJ4cTayVHVBd7FoVtkm1MB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjeTLb0Fvhtv6FmYG7zIUbwM8BKXwhwRytNOMVua274UsnmF/zskax 3776uxWTZ32ffJdp67x5WznSxNK68w9gwvphE532JTXbOhYTe332EJ7hzPZ/a8hW zl+IOGCF0rCHZ67UMkYQ3jDqRIYnJz9kP5z4CtpRiTCdqpk07JmkV5PLDHpk5ALB jQMfWU68HAh2YmtjZZRcqJE1LCG3kUWLtW66Opf1J+0WINr8WfM1UzC8JpScajVE +v70ukDKx/YnVop0pb0WFAJGveEyxjDByZ2ongfgxHbosjbttR+QpwaOZBCdEM3G xxYiO91MM+IEh/Ac9WE6DQPEG2GdUdRF -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:30 2025 by rpki-client