$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: lA1ZQnqKW89DJVCvAYH9ehSAI+XSWEgPBrVOGDA31FQ= Subject key identifier: 8B:B1:21:F2:43:EF:C7:80:B7:C3:52:4B:37:F4:5D:ED:7E:C8:EC:63 Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 03D9 Signing time: Mon 03 Nov 2025 00:36:55 +0000 Manifest this update: Mon 03 Nov 2025 00:36:54 +0000 Manifest next update: Mon 10 Nov 2025 00:36:54 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: Cy1hQpD+Qc6nEeCMCfLXMKnRl3ZXb6oSU4WqbbpsBLA=) 2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: BfZYjuf+MTJqrBceGA5aBPWPAbWyAIIKEVtel+HzA+s=) 3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: G6DqHnh4blUKVwDCX+3yAB5EHH1Zl+1SenKDUoryx8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Nov 3 00:36:54 2025 GMT Not After : Nov 10 00:36:54 2025 GMT Subject: CN=6907f926-3e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:db:8a:e8:92:c1:1c:7f:af:62:df:cf:fd:d3: a6:b7:66:95:4c:27:3d:f5:c1:22:f9:56:09:96:c7: 3b:44:10:d7:32:cd:92:57:b6:f4:17:6a:9f:86:2a: 6c:c0:72:67:c7:a6:e9:bf:e5:ea:54:12:f5:e6:2e: d8:0f:2f:14:57:f6:fa:45:5c:04:00:02:1e:d8:c5: b9:d4:5e:fd:0f:4c:69:be:36:65:1c:b7:e8:8f:82: 1d:d4:42:10:0e:74:c6:90:d3:d9:13:b2:73:62:b6: 88:24:4a:18:3c:c7:5e:d2:90:3b:f1:98:fe:7c:63: 7a:f0:07:9e:c7:bd:46:41:51:b3:4a:33:d6:29:c5: 2c:b1:0e:01:f4:d5:03:38:52:1b:00:3d:2c:b8:5f: 18:15:2b:4c:ec:eb:fe:3c:13:15:07:ae:3f:11:cc: bf:90:41:07:1e:7b:e5:5d:ae:a2:54:df:09:a3:8c: ab:cc:63:5b:62:51:7c:50:d1:54:f7:48:07:6f:cd: 00:0a:54:b6:14:25:73:bb:60:87:fa:07:8d:f4:73: f9:bc:7e:ed:99:40:79:ba:0f:2e:c6:d1:a8:2f:9a: 94:2f:57:0b:c9:c4:7f:4e:00:13:d3:c4:4d:d6:ae: 6f:ab:33:fe:2b:a7:0c:da:2a:6e:b1:04:8b:b1:21: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:21:F2:43:EF:C7:80:B7:C3:52:4B:37:F4:5D:ED:7E:C8:EC:63 X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9d:6c:f8:40:f2:65:12:0d:5f:a6:ee:3e:49:ed:e3:3a:1f: 63:b1:57:f4:bb:e6:8b:09:92:47:04:77:a8:19:3a:81:82:75: 71:61:d4:98:38:12:6b:47:a9:53:34:de:de:e4:a4:f9:9b:f6: 05:70:a9:d1:28:8c:b5:c7:5e:5e:ee:17:40:29:02:17:00:12: c5:55:9b:3f:55:5f:48:de:1b:83:c0:41:b2:74:49:ba:95:43: d9:b1:48:93:5f:01:36:6d:c6:65:db:4a:a3:59:98:57:23:2d: ac:ff:1a:a0:23:72:e3:5d:46:45:8b:d5:1e:f1:23:f7:81:51: 9d:50:36:9e:6f:53:a1:c5:b2:06:10:86:d9:90:c9:84:ed:fa: 6e:8a:2e:85:28:30:6a:6b:57:3a:1b:b4:47:ed:c8:c4:1b:82: 5c:ea:5a:cd:c9:42:33:e7:28:97:90:ba:20:76:8a:fe:0e:84: 8f:e3:32:5a:1e:00:12:2d:2e:33:9c:c9:a7:50:d1:a4:fe:82: ba:e3:83:bc:1a:ae:fd:91:12:d1:ff:46:ce:7e:32:8e:05:78: 1c:7a:4b:b3:9f:da:2a:19:cd:3d:b2:d8:57:68:5f:b2:e4:a2: a5:e4:82:56:83:1d:f6:c6:8b:af:fd:c4:20:66:74:ac:66:48: 35:d3:ed:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjUxMTAzMDAzNjU0WhcNMjUxMTEwMDAzNjU0WjAYMRYwFAYD VQQDEw02OTA3ZjkyNi0zZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89uK6JLBHH+vYt/P/dOmt2aVTCc99cEi+VYJlsc7RBDXMs2SV7b0F2qfhips wHJnx6bpv+XqVBL15i7YDy8UV/b6RVwEAAIe2MW51F79D0xpvjZlHLfoj4Id1EIQ DnTGkNPZE7JzYraIJEoYPMde0pA78Zj+fGN68Aeex71GQVGzSjPWKcUssQ4B9NUD OFIbAD0suF8YFStM7Ov+PBMVB64/Ecy/kEEHHnvlXa6iVN8Jo4yrzGNbYlF8UNFU 90gHb80AClS2FCVzu2CH+geN9HP5vH7tmUB5ug8uxtGoL5qUL1cLycR/TgAT08RN 1q5vqzP+K6cM2ipusQSLsSEcjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuxIfJD 78eAt8NSSzf0Xe1+yOxjMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3nWz4QPJlEg1fpu4+Se3jOh9jsVf0u+aLCZJHBHeoGTqBgnVxYdSY OBJrR6lTNN7e5KT5m/YFcKnRKIy1x15e7hdAKQIXABLFVZs/VV9I3huDwEGydEm6 lUPZsUiTXwE2bcZl20qjWZhXIy2s/xqgI3LjXUZFi9Ue8SP3gVGdUDaeb1OhxbIG EIbZkMmE7fpuii6FKDBqa1c6G7RH7cjEG4Jc6lrNyUIz5yiXkLogdor+DoSP4zJa HgASLS4znMmnUNGk/oK644O8Gq79kRLR/0bOfjKOBXgcekuzn9oqGc09sthXaF+y 5KKl5IJWgx32xouv/cQgZnSsZkg10+09 -----END CERTIFICATE-----Generated at Tue Nov 4 11:07:19 2025 by rpki-client