$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: xFuos7J5PhJ5q94P5NCUgnz6NO7KT2Yi9SvoE9q0sbc= Subject key identifier: 3C:EB:2D:82:62:3E:86:3D:B8:BC:E9:E5:1F:69:89:A1:B2:78:D8:62 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 01F0 Signing time: Thu 06 Nov 2025 22:35:06 +0000 Manifest this update: Thu 06 Nov 2025 22:35:05 +0000 Manifest next update: Thu 13 Nov 2025 22:35:05 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: ExFLJNu1AFZUeC3eS2TMhFMnw/8fpL+w5I7pKD8SBU4=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 22:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Nov 6 22:35:05 2025 GMT Not After : Nov 13 22:35:05 2025 GMT Subject: CN=690d2299-2c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:ad:16:dd:93:07:13:0d:76:69:34:03:ce: 3d:36:b2:6b:51:e5:32:65:cb:56:59:9b:60:f1:ee: 16:26:00:1f:9c:6d:82:45:8e:17:fb:d1:65:c0:0d: dd:f3:90:7f:0c:86:a5:ab:79:be:6b:e9:78:2f:48: 17:f2:3c:3b:78:76:d8:40:93:49:12:08:b9:5a:21: e2:0f:7e:b5:92:c9:38:e8:e4:15:a6:5e:c5:48:5f: bc:2a:6b:5e:bc:12:52:5c:c7:57:fe:6e:9d:6a:4f: 17:1f:63:71:a2:29:67:08:1c:ca:a4:f4:98:6b:57: ad:59:fe:ed:e8:57:f5:38:8c:96:ad:f9:df:d6:b1: 0b:6d:14:03:6f:a1:7c:a8:14:cc:bd:c3:55:ff:38: 2e:f5:37:b0:4b:5d:bd:f6:91:1a:c4:e4:1a:ad:70: 3a:4e:dc:da:1c:a6:af:6f:13:d0:73:33:85:b7:bb: d7:ac:8d:ca:20:2c:37:ac:fe:05:cc:52:5b:f0:b7: 59:33:66:27:48:6d:69:ef:e6:84:c1:ba:dd:29:21: 39:68:a1:cf:73:cc:ec:2e:bd:18:43:c7:ff:8e:dc: 77:36:24:41:dc:05:a5:f2:d8:a7:bf:30:be:0b:32: 8f:97:a5:79:cc:db:ea:19:3f:e2:13:be:e4:1c:89: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:2D:82:62:3E:86:3D:B8:BC:E9:E5:1F:69:89:A1:B2:78:D8:62 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:68:0e:96:3a:b3:1f:1e:8f:0c:38:f1:d6:fc:f5:29:14:4c: e5:83:68:6d:92:43:46:28:fc:52:82:8b:2a:36:8b:32:67:6d: 27:68:cf:61:56:07:32:74:9c:94:03:dc:89:ca:13:e2:f1:4e: 82:00:d4:54:2a:6c:85:c1:00:4f:fa:ca:9d:ee:06:fe:fa:0e: e0:69:8d:55:84:b8:7f:54:71:a9:b1:93:26:22:39:bd:b7:9a: 33:67:7b:c9:35:71:9b:6b:ba:6e:a7:1e:5f:1c:57:a0:52:85: 76:10:15:45:97:34:5f:ab:e8:3e:ff:38:dc:f0:23:cb:ee:2b: 37:a9:2f:cf:35:c6:26:92:9b:df:01:09:6c:c2:49:e0:c3:45: cc:ef:e8:2f:34:57:d4:2d:9f:94:1e:9a:e2:b3:c0:ab:df:9c: 28:4b:bc:9b:3b:c5:6b:a8:4d:53:1b:5f:74:5a:c7:be:de:e1: 1e:c3:e8:e1:53:bb:f9:f0:3e:0b:23:8a:ef:0f:3f:62:b7:cb: 66:77:c2:75:01:30:77:c1:ef:27:f6:67:09:e8:08:8b:c9:3f: 82:3c:ee:5f:ed:22:a3:84:ab:be:a1:04:d7:1c:18:8c:0c:a7: a1:54:49:e9:51:39:18:18:b4:ad:e6:10:50:4e:2f:fe:64:a8: 45:6b:fe:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjUxMTA2MjIzNTA1WhcNMjUxMTEzMjIzNTA1WjAYMRYwFAYD VQQDEw02OTBkMjI5OS0yYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwratFt2TBxMNdmk0A849NrJrUeUyZctWWZtg8e4WJgAfnG2CRY4X+9FlwA3d 85B/DIalq3m+a+l4L0gX8jw7eHbYQJNJEgi5WiHiD361ksk46OQVpl7FSF+8Kmte vBJSXMdX/m6dak8XH2NxoilnCBzKpPSYa1etWf7t6Ff1OIyWrfnf1rELbRQDb6F8 qBTMvcNV/zgu9TewS1299pEaxOQarXA6TtzaHKavbxPQczOFt7vXrI3KICw3rP4F zFJb8LdZM2YnSG1p7+aEwbrdKSE5aKHPc8zsLr0YQ8f/jtx3NiRB3AWl8tinvzC+ CzKPl6V5zNvqGT/iE77kHInnGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzrLYJi PoY9uLzp5R9piaGyeNhiMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaaA6WOrMfHo8MOPHW/PUpFEzlg2htkkNGKPxSgosqNosyZ20naM9h VgcydJyUA9yJyhPi8U6CANRUKmyFwQBP+sqd7gb++g7gaY1VhLh/VHGpsZMmIjm9 t5ozZ3vJNXGba7pupx5fHFegUoV2EBVFlzRfq+g+/zjc8CPL7is3qS/PNcYmkpvf AQlswkngw0XM7+gvNFfULZ+UHpris8Cr35woS7ybO8VrqE1TG190Wse+3uEew+jh U7v58D4LI4rvDz9it8tmd8J1ATB3we8n9mcJ6AiLyT+CPO5f7SKjhKu+oQTXHBiM DKehVEnpUTkYGLSt5hBQTi/+ZKhFa/7u -----END CERTIFICATE-----Generated at Sat Nov 8 05:15:18 2025 by rpki-client