$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json) Hash identifier: 2/9HpV+qTsfHipNPfrGEbMSI4W9ajo7k1z3F0lSDXWo= Subject key identifier: FD:21:6D:13:A3:17:F7:A1:41:DE:20:13:90:21:08:5B:5E:5C:C0:A9 Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft Manifest number: 037F Signing time: Wed 05 Nov 2025 00:54:35 +0000 Manifest this update: Wed 05 Nov 2025 00:54:34 +0000 Manifest next update: Wed 12 Nov 2025 00:54:34 +0000 Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: VyI5ft6/8hkHQQKqTwrC7J8hRgqmJSja6AfL7TykN0w=) 2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: /wLCOfPhuY3TbRlUp4zKmXpIpLo+qttM1HDHUEGC0Us=) 3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: qvqgBUl0a4zKeWl1I3fwpsPKJV0El11IrKtIQQYLmrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Nov 5 00:54:34 2025 GMT Not After : Nov 12 00:54:34 2025 GMT Subject: CN=690aa04a-3990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:f8:d9:ca:50:5c:9d:75:ce:54:7a:cc:d1: 3a:03:ae:47:94:79:2e:c8:a4:3a:ac:1c:5c:95:51: 84:22:57:b7:77:69:b7:32:31:d3:95:1e:45:92:74: 9c:8e:46:ca:fe:98:76:a3:7b:03:a9:e0:cb:0d:93: 6f:e8:57:c2:b5:18:18:d6:f7:43:cd:5f:88:f0:82: 98:44:38:b2:ab:cb:1e:5d:30:6d:b1:37:2f:eb:ce: 8d:4f:43:33:2c:41:64:9f:ca:af:86:87:14:48:f7: 22:ed:54:43:94:00:61:46:2c:b3:36:69:87:bc:9c: 44:75:e7:9d:48:18:97:66:8c:81:90:c3:e0:3c:12: 91:41:7d:ce:03:be:89:5e:7e:f5:22:00:9d:16:fe: 9c:bb:8b:9e:39:e5:e3:82:28:e3:21:19:63:91:73: 50:97:67:43:2a:e7:9f:65:f9:7a:f8:7f:39:7e:84: 15:73:77:f1:c9:98:67:4f:77:76:6a:39:d4:8b:8e: 60:ab:be:85:e7:26:24:54:c9:5d:ea:97:98:38:9a: 61:c4:02:bb:9a:7b:86:10:44:fa:06:0d:03:da:22: a1:7b:1e:61:6c:9d:95:45:d3:1d:7c:6e:25:a7:49: db:d0:95:d1:7b:15:ff:04:f3:54:99:72:2a:24:bd: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:21:6D:13:A3:17:F7:A1:41:DE:20:13:90:21:08:5B:5E:5C:C0:A9 X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:a3:45:65:5f:e8:d3:16:a4:b4:94:32:28:72:06:e1:bf:38: 3b:42:50:50:ca:bc:8a:46:27:45:c9:17:9c:a5:cd:ac:c6:af: 30:1a:7f:f9:16:3e:c7:ad:9b:dc:04:84:3f:94:0e:17:3b:4d: 30:39:a8:06:75:78:ea:4f:f1:b0:45:7c:6d:44:fd:c8:d6:85: 00:8e:0a:0e:e3:53:b0:be:d5:ac:af:e4:0f:b3:12:c0:f7:30: a4:d9:6b:5d:3e:12:8e:e3:ea:68:a2:8f:86:eb:93:41:23:6d: 69:c3:fc:ba:04:b1:1a:5e:3f:95:b5:d1:23:a6:58:ba:e3:42: f1:b0:30:9b:fe:7f:a9:11:3a:db:ec:e9:8a:7b:80:d3:2d:89: 6b:a7:c0:c8:81:7b:a7:65:1c:fc:9e:41:2f:be:17:45:95:bc: 70:de:57:a4:73:00:4d:c7:c0:fa:5c:32:86:9e:35:7d:75:e8: 7d:dc:9d:5e:a3:15:dc:64:86:f7:88:4c:a7:7f:c1:dd:2d:43: b6:dc:b6:12:a0:83:61:7b:4c:9e:3f:fc:f3:ed:6a:5b:19:5c: f5:c7:48:1a:68:82:28:a1:d4:fe:88:4b:be:4d:bc:99:44:e8: f3:8e:95:0d:30:b2:85:db:48:54:60:fd:a6:59:df:71:3c:54: 31:86:22:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjUxMTA1MDA1NDM0WhcNMjUxMTEyMDA1NDM0WjAYMRYwFAYD VQQDEw02OTBhYTA0YS0zOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uv42cpQXJ11zlR6zNE6A65HlHkuyKQ6rBxclVGEIle3d2m3MjHTlR5FknSc jkbK/ph2o3sDqeDLDZNv6FfCtRgY1vdDzV+I8IKYRDiyq8seXTBtsTcv686NT0Mz LEFkn8qvhocUSPci7VRDlABhRiyzNmmHvJxEdeedSBiXZoyBkMPgPBKRQX3OA76J Xn71IgCdFv6cu4ueOeXjgijjIRljkXNQl2dDKuefZfl6+H85foQVc3fxyZhnT3d2 ajnUi45gq76F5yYkVMld6peYOJphxAK7mnuGEET6Bg0D2iKhex5hbJ2VRdMdfG4l p0nb0JXRexX/BPNUmXIqJL3RvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0hbROj F/ehQd4gE5AhCFteXMCpMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0 LS1nSVBlMXBlaWJXSS01bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVo0VlX+jTFqS0lDIocgbhvzg7QlBQyryKRidFyRecpc2sxq8wGn/5 Fj7HrZvcBIQ/lA4XO00wOagGdXjqT/GwRXxtRP3I1oUAjgoO41OwvtWsr+QPsxLA 9zCk2WtdPhKO4+pooo+G65NBI21pw/y6BLEaXj+VtdEjpli640LxsDCb/n+pETrb 7OmKe4DTLYlrp8DIgXunZRz8nkEvvhdFlbxw3lekcwBNx8D6XDKGnjV9deh93J1e oxXcZIb3iEynf8HdLUO23LYSoINhe0yeP/zz7WpbGVz1x0gaaIIoodT+iEu+TbyZ ROjzjpUNMLKF20hUYP2mWd9xPFQxhiLi -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:28 2025 by rpki-client