$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: diIHNQisoRUzwYKmd5Z2BW/vP/W1iVVwMrLa/aafORA= Subject key identifier: A5:2F:CD:C6:03:47:7E:EC:6A:D0:DD:B2:8C:2E:A0:26:EA:8C:47:7F Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 033F Signing time: Wed 05 Nov 2025 01:07:03 +0000 Manifest this update: Wed 05 Nov 2025 01:07:03 +0000 Manifest next update: Wed 12 Nov 2025 01:07:03 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: HaCxA+7P0w0exB2QI9TtsBlPoyyZBHTFpHJBnAtfGxI=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: Cq6mdfvGMSMUVVy722vXaVlEzZ5zjpH7LRI1e0MUF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Nov 5 01:07:03 2025 GMT Not After : Nov 12 01:07:03 2025 GMT Subject: CN=690aa337-7f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:21:7b:de:2a:6f:f3:80:4f:81:26:93:c9: d3:72:fc:b6:cf:2b:2c:19:c6:65:6b:2e:2e:6c:54: 90:25:f9:8c:b5:1e:63:8d:2e:50:c9:8e:3d:2c:6d: 3a:e1:76:d1:ed:e9:43:19:a2:4e:ac:a4:9b:d1:40: e4:e5:5c:10:59:b6:67:80:84:cb:e9:78:d4:5d:82: cf:7f:82:37:e4:1b:b4:b7:20:0c:a5:59:f8:a2:22: c3:7a:9d:42:86:58:7f:f7:c9:47:79:43:13:a6:09: fc:97:63:2e:68:8c:8e:29:27:80:5b:1c:c7:61:16: 2b:75:ec:81:c6:df:36:da:e3:e8:b7:eb:a0:65:ce: 67:c5:6b:6e:d3:60:b1:fd:f5:97:03:5a:21:ee:35: a2:8a:46:bb:44:5f:df:5a:be:e4:ae:93:c7:5d:17: 22:49:0b:87:de:ad:c0:64:bd:6c:c4:b9:de:8d:18: 1b:25:2d:d0:15:01:75:9f:0a:a8:f5:c7:3e:70:d1: 8e:6e:c0:cf:08:bc:df:a5:a7:c2:50:fe:0c:ee:25: ec:02:0b:7d:1b:4e:56:d0:57:d0:a1:74:ee:59:4f: 1d:48:32:e6:54:ae:41:06:9d:27:b6:32:d8:ff:5a: 9d:0c:3c:31:2e:99:a4:2d:20:56:60:e8:0d:85:ba: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2F:CD:C6:03:47:7E:EC:6A:D0:DD:B2:8C:2E:A0:26:EA:8C:47:7F X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:8e:f5:ba:9a:24:a5:73:31:52:ee:b9:65:42:67:23:96:51: fd:80:df:56:b4:7c:64:3a:8e:62:59:c9:60:05:d9:aa:4d:f2: 5e:d7:ea:7d:cb:a2:1b:71:5b:38:5c:ce:85:1a:df:5d:5e:8b: 6d:11:f8:83:9f:05:a3:15:3e:fe:2d:7d:48:d3:a1:20:05:11: c1:fc:a0:7f:c0:f9:cc:ff:65:45:60:6f:13:08:d0:59:8c:07: 33:f4:e7:6c:82:80:cc:c6:8c:d4:a9:d8:49:cb:5c:c9:52:10: 25:2c:31:b5:bc:8c:0c:6e:79:92:9b:d8:7e:f1:21:9d:cb:89: 33:72:7e:f3:a7:a4:dc:92:d4:8d:3b:b9:99:4e:45:11:6f:14: 40:82:c4:3c:0d:ad:88:e9:a6:be:48:b1:d3:ba:a6:eb:46:60: b6:55:60:f7:5d:06:4a:e0:46:a9:e0:88:c0:0a:7e:a2:d6:a2: f6:fb:85:35:87:1d:95:85:54:3e:10:da:f7:0a:6a:d6:b2:d8: 40:76:1f:05:df:73:d2:39:0e:db:28:65:b3:49:ec:76:a7:ff: 2e:d8:32:c0:62:8d:da:de:46:58:f9:a0:a7:29:d4:b8:6b:56: 50:0d:3d:f4:64:c2:2a:c1:e6:79:46:6c:4c:72:46:5e:63:31: a1:79:af:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjUxMTA1MDEwNzAzWhcNMjUxMTEyMDEwNzAzWjAYMRYwFAYD VQQDEw02OTBhYTMzNy03ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt20he94qb/OAT4Emk8nTcvy2zyssGcZlay4ubFSQJfmMtR5jjS5QyY49LG06 4XbR7elDGaJOrKSb0UDk5VwQWbZngITL6XjUXYLPf4I35Bu0tyAMpVn4oiLDep1C hlh/98lHeUMTpgn8l2MuaIyOKSeAWxzHYRYrdeyBxt822uPot+ugZc5nxWtu02Cx /fWXA1oh7jWiika7RF/fWr7krpPHXRciSQuH3q3AZL1sxLnejRgbJS3QFQF1nwqo 9cc+cNGObsDPCLzfpafCUP4M7iXsAgt9G05W0FfQoXTuWU8dSDLmVK5BBp0ntjLY /1qdDDwxLpmkLSBWYOgNhbqBowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUvzcYD R37satDdsowuoCbqjEd/MB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYjvW6miSlczFS7rllQmcjllH9gN9WtHxkOo5iWclgBdmqTfJe1+p9 y6IbcVs4XM6FGt9dXottEfiDnwWjFT7+LX1I06EgBRHB/KB/wPnM/2VFYG8TCNBZ jAcz9OdsgoDMxozUqdhJy1zJUhAlLDG1vIwMbnmSm9h+8SGdy4kzcn7zp6TcktSN O7mZTkURbxRAgsQ8Da2I6aa+SLHTuqbrRmC2VWD3XQZK4Eap4IjACn6i1qL2+4U1 hx2VhVQ+ENr3CmrWsthAdh8F33PSOQ7bKGWzSex2p/8u2DLAYo3a3kZY+aCnKdS4 a1ZQDT30ZMIqweZ5RmxMckZeYzGhea9P -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:24 2025 by rpki-client