$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: Kn6uqipN51DVCsfvfe3xK5wH6wnQaOrbW9GUIdNnlQ4= Subject key identifier: 6B:64:6B:76:DE:58:BE:60:C6:82:84:B6:C1:D3:47:C8:38:61:3A:1F Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 047D Signing time: Mon 03 Nov 2025 00:16:37 +0000 Manifest this update: Mon 03 Nov 2025 00:16:37 +0000 Manifest next update: Mon 10 Nov 2025 00:16:37 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: KvhnCptMDJQ3pmGMbZ/zzwGnE2hvU3jtYZvq75WTXWU=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Nov 3 00:16:37 2025 GMT Not After : Nov 10 00:16:37 2025 GMT Subject: CN=6907f465-f9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:82:a8:23:1c:1b:76:0e:b3:20:ec:14:2d: 22:25:af:9e:1d:4c:50:f0:7f:e8:20:f5:65:16:25: 63:15:f7:66:a7:7d:5d:d0:cd:35:fb:f4:c8:25:c8: 82:09:88:81:3f:00:94:8b:89:4f:ae:de:91:98:1b: 16:6e:bf:f4:63:cf:bb:85:11:2d:dc:7c:ed:a9:d3: 09:af:17:b2:ba:b6:6f:15:62:84:f1:d4:84:f8:10: b9:8d:f8:da:49:57:4b:5a:a9:db:f9:76:b4:3e:46: dd:dc:5f:64:dd:ef:58:4d:a9:80:20:12:1e:c5:88: c1:7f:c9:77:70:ca:d5:70:78:58:a6:96:19:9a:77: f4:2f:1d:52:28:49:00:20:27:4f:97:db:83:fb:05: a5:2b:28:82:90:c1:dc:3f:09:43:5c:96:9e:e0:ba: c2:7a:5d:8e:1d:a7:da:39:ea:72:52:5e:9d:ae:c4: c8:02:50:93:cb:60:c1:b4:8c:fc:6d:78:77:61:20: 56:10:86:11:cb:96:59:68:ed:e0:75:9c:2d:4c:88: de:9e:60:91:1e:28:9a:a7:80:a1:ab:6e:c0:8a:fc: ec:ba:ee:bc:b0:24:b8:a7:3e:bb:b8:6c:7f:ba:c1: e7:56:de:66:3c:43:a5:7d:71:19:ca:e7:eb:cf:5d: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:64:6B:76:DE:58:BE:60:C6:82:84:B6:C1:D3:47:C8:38:61:3A:1F X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:39:a7:02:c9:fe:36:37:28:32:7a:51:70:78:34:92:bf:47: df:c4:ba:af:89:96:78:05:80:d8:1c:b4:eb:b8:64:9c:d0:bb: 10:30:d4:3b:c1:c7:f7:55:3b:31:60:04:fa:c9:9f:3e:9d:41: 24:b2:88:53:04:cc:97:8d:58:b8:8c:7c:f0:08:85:6e:44:91: 8c:91:5b:71:72:3e:1a:e4:07:8a:09:f9:de:7e:02:53:69:41: 8d:99:07:29:69:77:bc:3d:83:ab:9b:63:21:1b:88:6e:e8:b7: 8f:67:15:64:f3:dc:4e:82:b5:9a:e8:74:9b:0f:b9:50:ac:c2: 7b:d7:37:96:8e:a0:21:1a:f4:3b:6f:ad:64:27:ac:e2:66:02: 95:52:4b:7b:27:95:21:ac:82:14:be:3c:c0:89:c5:5d:c0:27: 41:c5:c4:a6:dc:d7:c4:d1:a3:fa:82:5f:f3:33:f5:32:c6:bb: 3d:51:0f:f8:77:95:72:78:3a:4f:80:91:be:90:0b:12:d7:fb: 78:52:00:49:e3:01:c4:96:83:4f:5c:48:48:7c:69:23:6d:ed: fe:c6:3a:46:e7:42:95:48:35:3b:9e:69:45:df:78:71:2f:12: 34:63:bb:22:8c:c1:81:30:1d:e9:b9:2c:8b:0d:29:44:8c:f2: f2:b5:7c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUxMTAzMDAxNjM3WhcNMjUxMTEwMDAxNjM3WjAYMRYwFAYD VQQDEw02OTA3ZjQ2NS1mOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7eCqCMcG3YOsyDsFC0iJa+eHUxQ8H/oIPVlFiVjFfdmp31d0M01+/TIJciC CYiBPwCUi4lPrt6RmBsWbr/0Y8+7hREt3HztqdMJrxeyurZvFWKE8dSE+BC5jfja SVdLWqnb+Xa0Pkbd3F9k3e9YTamAIBIexYjBf8l3cMrVcHhYppYZmnf0Lx1SKEkA ICdPl9uD+wWlKyiCkMHcPwlDXJae4LrCel2OHafaOepyUl6drsTIAlCTy2DBtIz8 bXh3YSBWEIYRy5ZZaO3gdZwtTIjenmCRHiiap4Chq27Aivzsuu68sCS4pz67uGx/ usHnVt5mPEOlfXEZyufrz113uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtka3be WL5gxoKEtsHTR8g4YTofMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbOacCyf42NygyelFweDSSv0ffxLqviZZ4BYDYHLTruGSc0LsQMNQ7 wcf3VTsxYAT6yZ8+nUEksohTBMyXjVi4jHzwCIVuRJGMkVtxcj4a5AeKCfnefgJT aUGNmQcpaXe8PYOrm2MhG4hu6LePZxVk89xOgrWa6HSbD7lQrMJ71zeWjqAhGvQ7 b61kJ6ziZgKVUkt7J5UhrIIUvjzAicVdwCdBxcSm3NfE0aP6gl/zM/Uyxrs9UQ/4 d5VyeDpPgJG+kAsS1/t4UgBJ4wHEloNPXEhIfGkjbe3+xjpG50KVSDU7nmlF33hx LxI0Y7sijMGBMB3puSyLDSlEjPLytXza -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:11 2025 by rpki-client