$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: sFsK4F9fIH+hlnl+q392DyuNf+a1J1vxTTQPmL5TxEk= Subject key identifier: 28:69:B5:D3:1F:6D:00:77:86:0A:0E:15:D2:26:A2:9A:46:15:12:F0 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 24F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 24DB Signing time: Sun 02 Nov 2025 15:47:16 +0000 Manifest this update: Sun 02 Nov 2025 15:47:16 +0000 Manifest next update: Sun 09 Nov 2025 15:47:16 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: xffU53ISI4PV8YgcwMT6DnNM1FO5ngKk9y3vT3GnTDU=) 2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=) 3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9464 (0x24f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Nov 2 15:47:16 2025 GMT Not After : Nov 9 15:47:16 2025 GMT Subject: CN=69077d04-1a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:38:0e:73:a0:1f:9f:1d:22:d7:4b:71:ef: e4:14:26:77:d9:35:19:f5:f0:03:70:ac:c5:4d:1f: e5:14:6d:39:48:42:e0:81:46:b7:09:49:44:cb:71: db:de:0a:17:6c:37:c9:18:8c:2b:d2:f4:7b:69:db: 09:c8:0c:74:39:9a:2e:67:51:8a:a2:07:82:34:1d: 96:31:4f:22:96:82:30:1b:8f:13:d5:69:2b:fe:c5: 8b:80:a3:9e:c6:ad:e9:a1:09:c5:e9:f1:09:cd:7e: 77:58:eb:a0:20:da:61:2e:8f:28:4f:63:73:03:ac: 04:1b:8e:8c:de:a1:75:00:65:64:eb:a4:ac:78:c0: dd:ed:67:d1:48:0a:dc:23:67:1e:e9:b3:a6:53:b8: 4f:05:cf:8c:63:1b:1c:56:ff:e7:00:33:5c:73:e2: 0c:2d:39:32:ee:e2:af:8d:ab:65:0b:d8:80:92:bf: 65:f8:56:0f:1a:98:c5:6a:1a:b2:1e:4f:4f:9b:43: 76:66:fb:af:57:75:44:9e:89:ac:d4:04:65:fa:a6: de:9b:24:5e:29:04:46:76:95:2b:77:48:14:a0:45: 61:d3:20:1a:cd:55:bb:87:c3:27:0c:26:04:9a:eb: 59:c3:63:72:be:5f:ee:25:05:54:be:32:74:22:80: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:69:B5:D3:1F:6D:00:77:86:0A:0E:15:D2:26:A2:9A:46:15:12:F0 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:29:c8:0b:1e:ed:99:52:40:10:78:f0:ce:22:54:79:a4:3f: 9b:56:f2:fb:f1:e1:76:cd:4f:d4:73:3a:88:cf:a3:82:dc:28: 04:ae:8e:a7:9a:b7:2f:8e:03:b6:d6:10:5c:fd:83:b1:7a:8c: 19:2d:61:b7:12:01:92:0c:c4:e2:2c:a4:dd:51:cf:77:a2:55: 20:b1:ed:e7:33:e8:f4:89:84:1a:5a:03:7f:08:bf:f9:0e:24: 0d:64:59:fe:2f:51:63:50:91:f8:b4:ea:8f:d2:b2:81:ab:ad: 68:18:ce:97:3b:23:85:77:63:03:2b:47:72:ce:61:07:98:ec: c2:47:d1:a5:ae:09:5f:70:ff:a5:6e:c3:97:14:b8:18:6c:50: b5:b3:58:ea:97:f1:bd:ad:92:c6:9d:fe:e4:9d:59:da:66:92: 66:3b:33:fd:81:10:ec:38:0b:89:bf:d9:b8:4e:40:8a:be:4d: 79:95:30:af:4d:b1:cf:04:15:08:f6:b6:81:7a:46:8f:9c:7d: ad:e2:80:b2:fa:4a:cd:35:98:86:59:02:09:5b:13:74:cb:14: 12:2a:74:84:da:58:07:e6:d3:7f:a5:1b:f6:45:9c:0d:f7:3b: ea:3d:d5:a4:c9:78:d2:5b:cb:b3:41:fb:52:f9:f0:62:c3:b7: 3a:84:0a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUxMTAyMTU0NzE2WhcNMjUxMTA5MTU0NzE2WjAYMRYwFAYD VQQDEw02OTA3N2QwNC0xYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq704DnOgH58dItdLce/kFCZ32TUZ9fADcKzFTR/lFG05SELggUa3CUlEy3Hb 3goXbDfJGIwr0vR7adsJyAx0OZouZ1GKogeCNB2WMU8iloIwG48T1Wkr/sWLgKOe xq3poQnF6fEJzX53WOugINphLo8oT2NzA6wEG46M3qF1AGVk66SseMDd7WfRSArc I2ce6bOmU7hPBc+MYxscVv/nADNcc+IMLTky7uKvjatlC9iAkr9l+FYPGpjFahqy Hk9Pm0N2ZvuvV3VEnoms1ARl+qbemyReKQRGdpUrd0gUoEVh0yAazVW7h8MnDCYE mutZw2Nyvl/uJQVUvjJ0IoAAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChptdMf bQB3hgoOFdImoppGFRLwMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKcgLHu2ZUkAQePDOIlR5pD+bVvL78eF2zU/UczqIz6OC3CgEro6n mrcvjgO21hBc/YOxeowZLWG3EgGSDMTiLKTdUc93olUgse3nM+j0iYQaWgN/CL/5 DiQNZFn+L1FjUJH4tOqP0rKBq61oGM6XOyOFd2MDK0dyzmEHmOzCR9GlrglfcP+l bsOXFLgYbFC1s1jql/G9rZLGnf7knVnaZpJmOzP9gRDsOAuJv9m4TkCKvk15lTCv TbHPBBUI9raBekaPnH2t4oCy+krNNZiGWQIJWxN0yxQSKnSE2lgH5tN/pRv2RZwN 9zvqPdWkyXjSW8uzQftS+fBiw7c6hAq6 -----END CERTIFICATE-----Generated at Tue Nov 4 14:03:32 2025 by rpki-client