$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json) Hash identifier: thaunaxX33KUHQLcYuvDji22m/TqkQNrGJihCbBFUUU= Subject key identifier: 43:1B:41:6E:4F:C0:61:CD:E7:03:5A:9A:35:F7:9F:73:2B:97:96:65 Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft Manifest number: 0526 Signing time: Tue 04 Nov 2025 23:37:14 +0000 Manifest this update: Tue 04 Nov 2025 23:37:13 +0000 Manifest next update: Tue 11 Nov 2025 23:37:13 +0000 Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: ZSkPB4VPTuQO8xTXC9SxkSzA1EXxqyyMo1mFedk4zFQ=) 2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: j71cmSthQcDo2Eras5pbfgnd1wVSMIr06Qrqouii3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: Nov 4 23:37:13 2025 GMT Not After : Nov 11 23:37:13 2025 GMT Subject: CN=690a8e2a-b873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:08:2b:7e:73:5b:79:6e:a0:1d:14:e8:dc: ac:00:e5:32:70:01:b2:ff:6a:ae:7f:9b:45:dc:09: 32:d5:7c:27:1b:c6:30:44:c0:dd:9e:b4:c3:5a:c6: dc:fc:70:bb:fa:37:9d:57:11:48:ea:97:0b:76:ec: c9:f2:53:2b:c2:69:ba:a3:c2:ee:65:10:e5:14:9f: a6:50:ed:e4:10:a1:53:86:4c:88:18:0a:e9:df:b7: 3e:2a:01:1e:e2:e6:d1:92:6e:c9:2d:f4:b5:6e:e5: fb:46:91:06:9f:a4:59:59:6a:84:24:b9:dc:02:f7: c2:52:4f:be:db:8b:1d:4e:23:fc:f8:39:d2:c3:f0: e4:5b:93:39:e3:0d:84:ab:b9:36:11:37:cf:1c:7c: 1b:c6:dc:2e:f7:8a:23:60:c1:b9:9a:d0:03:6b:ca: 32:6a:29:5f:ce:d3:6d:b3:bd:94:50:b1:21:d2:c0: b2:bd:27:88:77:b1:56:e1:a1:e7:b5:24:98:45:2d: f2:cd:2f:9a:07:9f:64:cc:0a:98:ef:db:a2:d4:77: a3:af:6d:95:b2:5c:05:3a:f1:bf:c6:50:60:ab:83: 26:e1:84:1d:99:a2:56:d9:9b:fa:ec:ab:e4:a5:23: a1:42:e9:d0:fa:e5:fd:1c:dd:e9:0b:ca:48:12:67: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:41:6E:4F:C0:61:CD:E7:03:5A:9A:35:F7:9F:73:2B:97:96:65 X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:61:50:0c:85:65:42:48:bf:07:52:0d:4c:7f:35:b2:0b:10: 30:17:bd:b0:80:51:a8:c0:b0:ee:a7:e4:f2:c1:23:f5:9e:6e: d9:13:d0:62:0d:e5:d8:1f:13:89:fe:85:26:70:60:70:05:2e: 22:df:f4:8f:41:61:47:b5:e7:4c:4b:3b:e3:f3:59:a7:1e:cd: 7b:6c:42:93:45:79:40:7d:a6:3e:9c:fd:e8:79:3f:92:66:8a: b6:d6:08:73:7f:e2:bc:f7:62:93:59:ba:8d:2a:be:af:33:a6: 62:71:da:b9:a7:65:8f:44:e4:1c:5c:6e:cd:69:8f:35:6b:b8: a0:e1:f3:e7:46:fb:99:ca:05:fd:e3:61:43:6d:ee:bd:ed:46: ac:21:1e:31:64:a6:7f:cd:98:b9:d9:cb:61:0f:c3:f1:2f:b1: 9b:8d:ff:ae:4d:f5:f2:75:da:63:96:ae:d6:10:da:de:95:0e: 47:e9:39:44:d7:6e:46:bc:a3:d0:b3:59:28:d7:8d:c3:74:ff: 6c:4f:6a:69:99:83:08:34:7f:d6:5a:e0:09:c7:77:16:fa:88: 95:30:77:9e:14:2d:00:ed:77:1e:72:a0:dd:4a:c9:a9:c7:94: ca:d1:ce:2b:a1:fe:ce:70:eb:b2:25:4b:47:29:7a:cd:4b:64: 83:81:8c:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjUxMTA0MjMzNzEzWhcNMjUxMTExMjMzNzEzWjAYMRYwFAYD VQQDEw02OTBhOGUyYS1iODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sMIK35zW3luoB0U6NysAOUycAGy/2quf5tF3Aky1XwnG8YwRMDdnrTDWsbc /HC7+jedVxFI6pcLduzJ8lMrwmm6o8LuZRDlFJ+mUO3kEKFThkyIGArp37c+KgEe 4ubRkm7JLfS1buX7RpEGn6RZWWqEJLncAvfCUk++24sdTiP8+DnSw/DkW5M54w2E q7k2ETfPHHwbxtwu94ojYMG5mtADa8oyailfztNts72UULEh0sCyvSeId7FW4aHn tSSYRS3yzS+aB59kzAqY79ui1Hejr22VslwFOvG/xlBgq4Mm4YQdmaJW2Zv67Kvk pSOhQunQ+uX9HN3pC8pIEmeCQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMbQW5P wGHN5wNamjX3n3Mrl5ZlMB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt NnVzYjkwQjJsTnRPM2ExVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdYVAMhWVCSL8HUg1MfzWyCxAwF72wgFGowLDup+TywSP1nm7ZE9Bi DeXYHxOJ/oUmcGBwBS4i3/SPQWFHtedMSzvj81mnHs17bEKTRXlAfaY+nP3oeT+S Zoq21ghzf+K892KTWbqNKr6vM6Zicdq5p2WPROQcXG7NaY81a7ig4fPnRvuZygX9 42FDbe697UasIR4xZKZ/zZi52cthD8PxL7Gbjf+uTfXyddpjlq7WENrelQ5H6TlE 125GvKPQs1ko143DdP9sT2ppmYMINH/WWuAJx3cW+oiVMHeeFC0A7XcecqDdSsmp x5TK0c4rof7OcOuyJUtHKXrNS2SDgYzw -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:33 2025 by rpki-client