$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: 97TBaO8CmalGmVNMZAFWuPq25KqcheTy0mS1Y7ywRi4= Subject key identifier: A2:AC:84:E4:B3:8C:CE:5E:76:A5:58:C3:16:37:D7:E3:BD:CC:FE:15 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04DE Signing time: Sun 02 Nov 2025 23:45:07 +0000 Manifest this update: Sun 02 Nov 2025 23:45:06 +0000 Manifest next update: Sun 09 Nov 2025 23:45:06 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: d4GzZnULq9VYrxLiNBM6mmDI3qsjYrFWkLftmNXgKIY=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Nov 2 23:45:06 2025 GMT Not After : Nov 9 23:45:06 2025 GMT Subject: CN=6907ed02-0e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:96:47:8b:d6:42:0f:7d:90:c4:4c:3d:f0: 6e:f8:5a:e6:85:57:d6:d9:b5:97:52:83:eb:21:4c: 87:2f:31:cb:aa:08:a9:a4:34:69:23:da:34:96:20: ce:1b:e9:98:47:6e:32:68:15:f2:2e:26:80:76:76: 5b:dd:ba:ee:38:8b:1c:dd:0a:7b:c9:ec:1c:a0:81: 71:c8:e0:ea:32:2b:2e:88:88:97:8c:fd:cb:c3:bc: d1:28:dc:ec:e6:36:ee:1f:17:e9:f0:fa:ac:9c:b6: 93:66:dd:e3:28:44:5b:04:96:0b:1d:f3:1a:d4:40: 3c:39:68:45:a6:8a:0b:3b:8d:7e:d0:89:51:eb:3a: b3:61:02:b9:6d:59:8b:86:c6:32:33:29:41:aa:f8: 12:a3:25:f5:9a:e3:03:7b:18:c4:aa:c6:2e:47:7b: 6b:6e:51:0f:7a:af:43:2a:10:09:b5:42:51:0d:0b: 7a:91:be:71:6a:05:72:19:7f:be:c3:18:db:24:40: 8c:4b:86:79:dd:e3:79:61:46:07:26:c1:05:3f:81: 03:20:77:a1:83:96:9a:0a:3e:92:7a:e1:1f:4d:ce: 44:40:a3:74:1f:b7:20:63:3e:eb:dd:35:2d:89:9d: 20:89:49:47:bd:c8:8b:70:3f:43:4b:05:d9:e9:15: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AC:84:E4:B3:8C:CE:5E:76:A5:58:C3:16:37:D7:E3:BD:CC:FE:15 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:f6:ed:ea:f8:07:61:c3:9d:4a:f5:5a:5a:87:b2:e8:ce: 2f:bb:77:23:9e:26:a4:33:c7:e6:27:a3:79:85:eb:23:59:9e: ea:23:5b:26:37:32:39:f2:ae:36:5d:98:5b:db:d6:88:83:6b: dd:33:69:03:93:64:f6:1b:7e:6e:10:06:56:18:cf:d8:df:8c: 0c:3f:a5:b6:e5:b9:7b:ad:f0:01:49:fb:9d:8a:e6:24:63:ec: 6f:72:a6:59:91:be:19:f8:2f:d1:ac:fb:bd:25:5f:0a:f0:12: 39:e6:d2:66:44:6a:09:e2:03:86:7c:db:4f:3c:0d:0e:bf:71: f4:b3:65:88:99:2f:b8:88:27:c2:55:01:84:97:b4:f9:0f:76: 02:69:18:a0:73:05:0d:9c:c8:a8:c4:7c:f6:49:13:c7:cc:28: bb:fc:14:7e:73:55:e5:73:79:38:98:9f:84:ac:4b:6b:5f:75: e5:00:64:08:09:8b:a4:68:5f:15:0b:91:a4:a8:ac:d3:e1:1d: bf:50:77:c6:d0:f1:fd:d4:a3:35:03:2a:a6:90:00:95:97:c3: ec:e4:6d:4c:0a:68:06:3e:22:48:9a:05:b8:40:52:23:cc:c8: 90:b1:29:c1:12:0d:a2:15:c4:00:0b:43:16:6b:d6:c4:4a:9c: 5a:1e:71:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUxMTAyMjM0NTA2WhcNMjUxMTA5MjM0NTA2WjAYMRYwFAYD VQQDEw02OTA3ZWQwMi0wZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2neWR4vWQg99kMRMPfBu+FrmhVfW2bWXUoPrIUyHLzHLqgippDRpI9o0liDO G+mYR24yaBXyLiaAdnZb3bruOIsc3Qp7yewcoIFxyODqMisuiIiXjP3Lw7zRKNzs 5jbuHxfp8PqsnLaTZt3jKERbBJYLHfMa1EA8OWhFpooLO41+0IlR6zqzYQK5bVmL hsYyMylBqvgSoyX1muMDexjEqsYuR3trblEPeq9DKhAJtUJRDQt6kb5xagVyGX++ wxjbJECMS4Z53eN5YUYHJsEFP4EDIHehg5aaCj6SeuEfTc5EQKN0H7cgYz7r3TUt iZ0giUlHvciLcD9DSwXZ6RW1LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKshOSz jM5edqVYwxY31+O9zP4VMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEIfbt6vgHYcOdSvVaWoey6M4vu3cjniakM8fmJ6N5hesjWZ7qI1sm NzI58q42XZhb29aIg2vdM2kDk2T2G35uEAZWGM/Y34wMP6W25bl7rfABSfudiuYk Y+xvcqZZkb4Z+C/RrPu9JV8K8BI55tJmRGoJ4gOGfNtPPA0Ov3H0s2WImS+4iCfC VQGEl7T5D3YCaRigcwUNnMioxHz2SRPHzCi7/BR+c1Xlc3k4mJ+ErEtrX3XlAGQI CYukaF8VC5GkqKzT4R2/UHfG0PH91KM1AyqmkACVl8Ps5G1MCmgGPiJImgW4QFIj zMiQsSnBEg2iFcQAC0MWa9bESpxaHnHf -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:40 2025 by rpki-client