$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft File: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json) Hash identifier: f+r9JGiE7pimG1ioe/OY9ete1R2LcfpJ4apb8eUPAMs= Subject key identifier: D6:03:B7:A9:E8:14:AF:0B:E5:AE:AC:93:0A:1A:7D:98:54:2D:58:31 Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC Certificate issuer: /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft Manifest number: 09 Signing time: Mon 03 Nov 2025 08:01:32 +0000 Manifest this update: Mon 03 Nov 2025 08:01:32 +0000 Manifest next update: Mon 10 Nov 2025 08:01:32 +0000 Files and hashes: 1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: jH5Fr7V8vbYrStBRFqWEgmuzF4E4FwUStth8uP1k3Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC Validity Not Before: Nov 3 08:01:32 2025 GMT Not After : Nov 10 08:01:32 2025 GMT Subject: CN=6908615c-8073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:f1:40:48:c5:d8:71:12:8a:fe:35:6c:f2: 0f:31:be:8b:22:50:f4:8b:76:18:3e:e2:c1:2c:12: 9f:dd:51:f9:ed:fe:54:36:80:9c:36:b7:4e:76:40: e4:73:28:24:04:1d:62:07:78:21:de:d0:08:39:b8: 3e:be:18:f7:e3:5f:ff:d0:8a:bd:f3:33:ee:74:0e: d6:f2:b3:77:2e:4c:82:b8:eb:df:e1:dc:2c:e5:af: ca:7a:e1:bc:1c:75:8b:05:d1:89:13:8e:8a:c3:b7: 87:6c:79:b1:41:d4:e6:10:db:d8:72:5f:4e:9e:57: 94:43:43:c4:74:bc:1f:b7:a1:cc:b3:d8:7a:bc:75: 1c:95:4d:82:64:1a:df:2f:bb:e8:15:c3:87:9c:4e: 30:1b:b2:cd:83:09:a0:ab:29:0a:ee:5e:6e:9b:ce: 44:b3:4a:90:2c:3f:aa:49:86:1c:17:77:ea:4a:1f: 67:9b:36:7a:2a:b5:ff:99:fb:e4:25:66:1d:4c:c3: 18:08:99:f8:2f:3a:98:e6:66:c4:a8:77:59:69:bd: 81:b9:6d:bc:39:af:ff:01:48:bf:3e:b5:ca:db:43: 37:d9:ea:fd:14:4e:5b:58:ec:77:1d:c4:f1:7c:a5: 71:bc:2f:25:e9:92:c2:bf:38:1a:5e:5e:c7:1a:f4: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:03:B7:A9:E8:14:AF:0B:E5:AE:AC:93:0A:1A:7D:98:54:2D:58:31 X509v3 Authority Key Identifier: keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:2d:23:91:f8:e6:a0:74:0a:eb:5a:d3:c2:c9:33:b2:91:66: d6:a3:6b:04:01:b3:a3:a6:53:94:a6:b3:f6:40:81:5e:02:b0: 4f:db:6b:fc:3b:59:99:93:31:e2:70:ee:8e:91:7e:55:be:35: 8b:94:eb:23:f2:f3:03:45:0c:58:83:4d:0a:57:4c:e7:20:b9: 50:b7:97:5a:04:3b:8d:01:e8:9d:9d:84:ad:9e:35:c5:37:f1: ca:d2:b1:ce:78:bc:28:8b:58:67:12:b5:5e:4f:18:93:f5:1a: 57:87:21:64:f4:18:5d:ab:7f:2b:71:16:58:3c:e7:fd:f1:bf: 87:a5:28:cb:20:9d:22:29:33:90:b2:7b:d2:08:0e:8b:a7:a4: b9:44:eb:88:82:21:71:73:f3:b0:4e:fa:55:1f:40:ea:85:64: b4:4b:0f:e5:20:60:a5:3b:48:01:76:65:93:fa:9e:2f:7f:a6: ce:0a:04:94:31:dd:67:1d:31:4f:16:46:16:42:4f:7c:b5:f6: 76:a7:b9:53:b9:8a:fd:9a:2a:1f:54:48:a1:11:3a:13:b6:84: 8c:55:2b:ca:62:7a:c1:c3:79:bc:0a:e2:9b:1d:83:ea:88:a3: c4:f8:a4:47:d1:ff:e7:ea:8b:66:33:8d:d5:f8:66:7c:cf:66: bc:11:09:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTk5NjExMC8GA1UEBRMoRDZBNjAyOTM0QUNCRTQxNEIzNDlBMDE1NjlFQkI2NjYx RTU0QTJCQzAeFw0yNTExMDMwODAxMzJaFw0yNTExMTAwODAxMzJaMBgxFjAUBgNV BAMTDTY5MDg2MTVjLTgwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIc/FASMXYcRKK/jVs8g8xvosiUPSLdhg+4sEsEp/dUfnt/lQ2gJw2t052QORz KCQEHWIHeCHe0Ag5uD6+GPfjX//Qir3zM+50Dtbys3cuTIK469/h3Czlr8p64bwc dYsF0YkTjorDt4dsebFB1OYQ29hyX06eV5RDQ8R0vB+3ocyz2Hq8dRyVTYJkGt8v u+gVw4ecTjAbss2DCaCrKQruXm6bzkSzSpAsP6pJhhwXd+pKH2ebNnoqtf+Z++Ql Zh1MwxgImfgvOpjmZsSod1lpvYG5bbw5r/8BSL8+tcrbQzfZ6v0UTltY7HcdxPF8 pXG8LyXpksK/OBpeXsca9G1PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1gO3qegU rwvlrqyTChp9mFQtWDEwHwYDVR0jBBgwFoAU1qYCk0rL5BSzSaAVaeu2Zh5Uorww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0I4Q0Q3MzRFQUU2 NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJTelNhQVZhZXUyWmg1VW9y dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXFZQ2swckw1QlN6U2FBVmFldTJaaDVVb3J3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx OTk2L0I4Q0Q3MzRFQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJT elNhQVZhZXUyWmg1VW9ydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMItI5H45qB0Cuta08LJM7KRZtajawQBs6OmU5Sms/ZAgV4CsE/ba/w7 WZmTMeJw7o6RflW+NYuU6yPy8wNFDFiDTQpXTOcguVC3l1oEO40B6J2dhK2eNcU3 8crSsc54vCiLWGcStV5PGJP1GleHIWT0GF2rfytxFlg85/3xv4elKMsgnSIpM5Cy e9IIDounpLlE64iCIXFz87BO+lUfQOqFZLRLD+UgYKU7SAF2ZZP6ni9/ps4KBJQx 3WcdMU8WRhZCT3y19nanuVO5iv2aKh9USKEROhO2hIxVK8piesHDebwK4psdg+qI o8T4pEfR/+fqi2YzjdX4ZnzPZrwRCZY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:56 2025 by rpki-client