$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: JdEaweuAyc+LrLm50wh59i9kdIxvURJgAd3couR1eZk= Subject key identifier: ED:12:18:63:BC:67:9D:70:C0:4F:7D:B8:23:5F:0A:53:5D:B5:EC:E9 Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 02B6 Signing time: Mon 03 Nov 2025 01:28:18 +0000 Manifest this update: Mon 03 Nov 2025 01:28:17 +0000 Manifest next update: Mon 10 Nov 2025 01:28:17 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: ffwyZTvATzkgdQSkS0oK4n3xMwfBpis0aqpTFEWWhOQ=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: hbJJRaC5M5LUQTbnkq8W618J1VcGyMM13Drb0UsxWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Nov 3 01:28:17 2025 GMT Not After : Nov 10 01:28:17 2025 GMT Subject: CN=69080531-15e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:e1:a9:57:88:71:60:9b:e3:21:11:90:6c: 9a:33:71:a8:14:71:1e:2e:ff:19:ff:31:16:d3:73: 39:d2:1c:a5:01:dc:d4:e7:94:ef:82:ad:3a:57:de: 5e:6b:37:4b:24:10:ce:5c:4d:6e:11:59:88:cb:f5: 7e:e4:c1:ab:09:b8:93:af:2f:09:32:87:23:16:46: 66:d8:18:49:68:ef:1a:54:db:bb:ff:23:83:4b:15: c0:30:5e:d4:c5:24:85:21:73:a9:90:b4:5a:29:b2: 1f:59:ae:71:e9:64:3b:ad:34:a0:18:0b:47:ac:47: 98:64:88:b2:34:78:65:ce:be:a3:56:8f:d2:b2:5f: fb:b1:0d:58:fa:08:5c:6d:84:70:3b:dc:ec:4c:d9: 74:5b:dc:c5:70:e9:c4:e9:4b:04:70:87:04:ca:df: ae:28:a4:e6:b3:0f:d3:6b:9c:c7:fc:2a:4e:ce:dc: 88:62:f5:16:ed:3e:17:f6:b3:b3:de:40:c9:25:29: bf:f1:66:10:aa:1b:0e:23:8a:a2:b2:31:74:69:8f: d4:d9:2d:02:d3:35:af:94:9f:3a:e4:b4:d9:0a:6d: 4f:d6:82:ef:04:70:b0:f5:f8:3e:e4:3a:b2:1a:ee: d6:1f:6c:c9:1f:8b:f7:2e:d4:35:2f:d2:35:9e:bd: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:12:18:63:BC:67:9D:70:C0:4F:7D:B8:23:5F:0A:53:5D:B5:EC:E9 X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b7:d4:7b:e3:a7:bf:18:37:ab:92:4d:86:19:07:3b:97:c1: 25:c7:ba:83:56:92:f0:bd:18:d6:24:2c:65:c1:d0:56:d4:f7: b8:56:e6:2b:0f:8b:68:22:a3:91:27:0d:23:65:e2:e6:c5:06: a2:e1:f6:15:f9:c9:88:fe:db:47:fd:09:f5:08:5a:e4:cb:ed: 24:5c:54:89:6f:dd:a0:27:65:0e:af:a2:ea:fe:01:43:fc:e1: cc:32:dd:d3:c7:1d:d9:9d:cb:7d:38:92:2d:76:04:c5:23:9e: 0c:4c:42:0b:7f:1d:07:34:fd:97:69:0e:5a:28:7f:aa:1e:07: 65:f1:b4:7c:2d:5e:94:7b:c3:a7:eb:8a:86:0d:6f:63:22:95: 3d:cf:0c:1f:ab:bd:a7:5a:f3:ae:4b:11:6a:71:a3:f3:69:77: 3a:fe:a7:2f:de:85:03:b3:d6:81:e1:e8:f4:f9:60:e4:51:15: 30:54:1e:4b:94:85:1d:95:50:2c:a0:69:d5:38:bf:c3:71:13: 52:25:e1:a9:08:75:c8:ee:62:53:10:7a:2d:30:71:a7:15:a2: fd:06:2d:5b:58:c5:23:95:f3:9e:c4:81:41:1a:22:98:c7:d8: 9a:27:04:37:9a:c4:6f:e8:90:82:42:8a:9b:b1:d4:e2:6f:8e: 31:4d:1e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjUxMTAzMDEyODE3WhcNMjUxMTEwMDEyODE3WjAYMRYwFAYD VQQDEw02OTA4MDUzMS0xNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL/hqVeIcWCb4yERkGyaM3GoFHEeLv8Z/zEW03M50hylAdzU55Tvgq06V95e azdLJBDOXE1uEVmIy/V+5MGrCbiTry8JMocjFkZm2BhJaO8aVNu7/yODSxXAMF7U xSSFIXOpkLRaKbIfWa5x6WQ7rTSgGAtHrEeYZIiyNHhlzr6jVo/Ssl/7sQ1Y+ghc bYRwO9zsTNl0W9zFcOnE6UsEcIcEyt+uKKTmsw/Ta5zH/CpOztyIYvUW7T4X9rOz 3kDJJSm/8WYQqhsOI4qisjF0aY/U2S0C0zWvlJ865LTZCm1P1oLvBHCw9fg+5Dqy Gu7WH2zJH4v3LtQ1L9I1nr0pvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0SGGO8 Z51wwE99uCNfClNdtezpMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOt9R746e/GDerkk2GGQc7l8Elx7qDVpLwvRjWJCxlwdBW1Pe4VuYr D4toIqORJw0jZeLmxQai4fYV+cmI/ttH/Qn1CFrky+0kXFSJb92gJ2UOr6Lq/gFD /OHMMt3Txx3Znct9OJItdgTFI54MTEILfx0HNP2XaQ5aKH+qHgdl8bR8LV6Ue8On 64qGDW9jIpU9zwwfq72nWvOuSxFqcaPzaXc6/qcv3oUDs9aB4ej0+WDkURUwVB5L lIUdlVAsoGnVOL/DcRNSJeGpCHXI7mJTEHotMHGnFaL9Bi1bWMUjlfOexIFBGiKY x9iaJwQ3msRv6JCCQoqbsdTib44xTR4j -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:51 2025 by rpki-client