$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: tm64pImek8zP26o1TlAmIZHE6ITCXMhUP4nFMtMkJaE= Subject key identifier: 89:40:5D:16:AA:86:C5:2A:C0:40:DA:8C:4C:C8:7B:8D:7A:B1:BA:03 Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 355E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 351C Signing time: Sun 02 Nov 2025 14:41:20 +0000 Manifest this update: Sun 02 Nov 2025 14:41:20 +0000 Manifest next update: Sun 09 Nov 2025 14:41:20 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: vJKfa3zUvFRJN0MgA2Z3go1yWpuHRIjGz+GyjQvBehc=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: V+iG3uoTEhOB1RpnqXAIwFGBw4WNdCYvL4uQOduviF4=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: we2qvgf2vxZ4ZPjgEZi4dnNDvsLxezsmqMuBAL4C+Nw=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: ku0ByaK/68w8G7tu0tDiWUq8Zdb9YUsOCXoz+0AOmhM=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: 4O6f6zO4+rp67RvHt+QYmoPjYNWBYX03aCYC6rT0bKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13662 (0x355e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Nov 2 14:41:20 2025 GMT Not After : Nov 9 14:41:20 2025 GMT Subject: CN=69076d90-31be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:bc:e4:98:d8:52:7e:63:65:02:65:f1:c7: c9:bf:a8:60:a0:88:23:f6:1e:90:02:1b:b8:4b:02: a3:b7:9f:8e:b1:77:7a:f1:4b:af:d7:17:18:b8:01: 6d:2d:03:7c:c2:3f:44:01:2c:73:9c:5c:8d:f1:58: 1c:ae:f7:f3:9e:27:78:4d:23:21:dc:af:a8:93:82: 39:ba:b4:d4:cc:1f:77:2a:c6:b5:ff:d3:2c:56:77: c8:03:38:7d:c2:a7:39:e6:b3:76:d2:3e:18:33:3b: 63:3c:5a:33:51:d4:e6:3e:6f:4e:15:fa:c3:c9:ee: a0:38:da:28:60:73:f9:a7:db:7b:58:60:18:b0:df: bd:48:ca:13:ac:0d:54:1e:9a:0c:b2:ce:98:a7:8f: 3c:fb:17:f2:87:d2:c3:ae:19:e6:cb:56:1f:91:f9: cd:a3:f3:02:b6:a6:93:3f:b3:6b:22:38:6b:24:61: 31:0f:4f:80:12:33:b3:a1:cd:42:35:51:8f:5d:33: 5e:d7:6d:2e:33:6d:25:d3:0b:98:c7:c5:ee:d4:4e: 2d:92:64:39:ce:c9:95:c1:1a:83:9b:81:40:5a:27: c3:ee:b8:81:22:e4:22:ec:72:c9:1e:9c:08:11:b3: 5a:cf:4a:5a:f7:02:97:c5:6b:18:9f:bb:b9:b2:45: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:5D:16:AA:86:C5:2A:C0:40:DA:8C:4C:C8:7B:8D:7A:B1:BA:03 X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:70:26:4a:1e:27:0d:d0:28:d1:6d:f2:09:8e:87:fb:de:f9: df:86:73:5d:7a:36:f2:02:44:6c:51:c7:2a:d2:c2:48:38:83: 45:cd:a7:87:c4:63:d0:84:7b:a7:36:36:55:3c:02:62:94:98: ff:f0:81:46:83:7b:3f:ef:50:2d:a7:fe:04:9d:83:e0:53:bd: e1:f0:e4:c5:a2:42:bd:71:18:27:71:d1:e5:10:65:76:f3:de: db:bc:d1:a2:6b:c1:75:0e:d0:87:96:79:fa:64:34:82:91:c8: 31:fb:e1:c4:60:b6:45:51:06:98:a7:5b:54:05:0f:bf:b0:fb: 71:9e:92:22:b6:08:69:cf:ea:ac:9c:da:1d:27:8d:af:d1:5b: a0:c0:1a:ef:67:2d:72:db:b0:a4:d9:cf:e4:9e:d6:a7:10:6a: 7e:22:69:39:4a:75:3e:9e:db:ec:59:b0:dc:5a:6f:06:4a:5d: 55:21:86:da:90:68:82:ab:28:5b:65:99:95:bc:fe:ed:4d:8e: 5c:02:02:29:62:7e:24:31:fd:9c:f4:5f:9c:aa:c4:75:87:d6: 6a:88:c6:7b:d4:bd:1a:75:e8:0e:85:28:86:7d:6e:22:5e:0c: 4a:72:80:0f:96:4d:ae:23:79:95:a9:a4:3f:a8:e8:74:32:40: b3:60:a0:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUxMTAyMTQ0MTIwWhcNMjUxMTA5MTQ0MTIwWjAYMRYwFAYD VQQDEw02OTA3NmQ5MC0zMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P685JjYUn5jZQJl8cfJv6hgoIgj9h6QAhu4SwKjt5+OsXd68Uuv1xcYuAFt LQN8wj9EASxznFyN8Vgcrvfznid4TSMh3K+ok4I5urTUzB93Ksa1/9MsVnfIAzh9 wqc55rN20j4YMztjPFozUdTmPm9OFfrDye6gONooYHP5p9t7WGAYsN+9SMoTrA1U HpoMss6Yp488+xfyh9LDrhnmy1YfkfnNo/MCtqaTP7NrIjhrJGExD0+AEjOzoc1C NVGPXTNe120uM20l0wuYx8Xu1E4tkmQ5zsmVwRqDm4FAWifD7riBIuQi7HLJHpwI EbNaz0pa9wKXxWsYn7u5skV5GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlAXRaq hsUqwEDajEzIe416sboDMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHcCZKHicN0CjRbfIJjof73vnfhnNdejbyAkRsUccq0sJIOINFzaeH xGPQhHunNjZVPAJilJj/8IFGg3s/71Atp/4EnYPgU73h8OTFokK9cRgncdHlEGV2 897bvNGia8F1DtCHlnn6ZDSCkcgx++HEYLZFUQaYp1tUBQ+/sPtxnpIitghpz+qs nNodJ42v0VugwBrvZy1y27Ck2c/kntanEGp+Imk5SnU+ntvsWbDcWm8GSl1VIYba kGiCqyhbZZmVvP7tTY5cAgIpYn4kMf2c9F+cqsR1h9ZqiMZ71L0adegOhSiGfW4i XgxKcoAPlk2uI3mVqaQ/qOh0MkCzYKCv -----END CERTIFICATE-----Generated at Tue Nov 4 04:12:30 2025 by rpki-client