$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: WeqYmC3EGECsg9snidERDmFNy3BWOBJjL3cEBwGo/EA= Subject key identifier: 4D:B8:03:C2:91:C1:80:4F:28:2A:48:C1:D0:7A:A6:87:7F:02:50:F1 Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 04B9 Signing time: Sun 02 Nov 2025 23:51:31 +0000 Manifest this update: Sun 02 Nov 2025 23:51:30 +0000 Manifest next update: Sun 09 Nov 2025 23:51:30 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: fuJgyCW6aoIlzKe4PzyjIWDIwdD3nSLPT5SUWEWU/eY=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: VtnOs46KlpQVSJ9THDVnSS8EzLS3A9xUSm3n/4RNrWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: Nov 2 23:51:30 2025 GMT Not After : Nov 9 23:51:30 2025 GMT Subject: CN=6907ee82-3ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:56:78:31:17:2e:25:e8:d7:31:83:ac:b6: 67:fd:89:02:df:01:09:01:2b:8e:28:dc:28:e5:7f: 59:d4:da:97:60:a6:4c:d5:10:c2:61:38:07:41:28: 31:4f:86:01:21:ae:c3:97:2d:28:8d:5c:3d:60:13: ef:bf:48:dc:73:fa:ae:a1:3d:44:af:ac:bf:ef:38: 6a:12:5f:33:f5:7e:0a:1e:2f:ff:c7:96:3d:5d:8f: 06:6c:6d:1c:5b:c7:9c:34:13:15:80:af:b7:b6:03: 65:88:45:8a:d5:62:95:fd:2b:d5:12:30:d2:f2:b8: 22:02:4f:2d:af:f4:6b:5b:eb:98:54:bf:dc:20:40: f5:09:20:b1:2b:ac:b2:90:3e:48:75:4c:a2:07:7b: 8f:5e:6c:46:88:ce:67:e0:4c:ca:b8:c1:0d:f0:0b: 48:08:62:1a:87:0d:e6:eb:61:f3:02:d9:ca:4c:95: a2:5f:a7:e1:64:58:e4:9e:d2:3c:08:59:ac:f5:09: 9c:77:cd:e3:d4:02:aa:fc:c9:93:9f:6d:12:91:d5: 45:0c:36:67:41:08:f0:e8:6d:63:5d:d9:9b:7f:a9: 7f:3f:2f:8d:4c:6a:19:03:20:73:43:7e:96:98:87: b6:c3:60:4e:51:3c:b8:16:bd:6c:68:e0:f1:ad:07: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B8:03:C2:91:C1:80:4F:28:2A:48:C1:D0:7A:A6:87:7F:02:50:F1 X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a5:1c:cb:ce:60:fa:37:93:74:08:6a:91:e0:22:6a:f4:9d: 93:e3:5a:0e:10:83:dc:5d:4e:24:26:9a:b5:0a:55:4e:f0:7f: ea:f2:d8:02:51:a2:5a:58:30:ea:f4:67:a5:ce:b5:38:e2:67: cb:cb:7d:56:60:43:b1:a5:be:6a:76:4d:85:09:d4:d2:5e:f0: 1f:b7:ee:f6:9b:d0:c2:33:7b:ba:b4:50:58:67:27:e9:74:cd: a8:8a:dd:f8:a4:cc:c0:34:81:95:e4:65:01:36:7b:99:f8:d4: 0b:a3:a9:98:9a:03:22:a9:1c:ee:fa:2e:1f:ea:f7:d5:b3:bd: 1d:c1:c1:3a:cc:6c:06:9f:6b:81:c0:cd:cc:bf:ca:80:81:4b: 9e:ba:69:32:3b:a7:f9:b0:ef:9a:8f:36:49:c3:ff:5d:5d:c4: 02:44:a8:30:70:6a:43:d1:fc:67:0e:d2:b7:06:70:c1:98:bc: ed:b0:35:26:be:e2:3c:09:cf:a6:d5:1e:83:f3:e3:c9:d8:d0: 89:d7:5c:ac:74:2a:be:05:5d:69:ed:75:df:ed:11:a8:15:01: 5c:ee:77:c0:8c:ef:2e:de:b3:c5:bd:75:e5:54:52:ad:3a:b8: 48:4d:40:c7:38:8d:1a:eb:64:98:11:ed:7c:a5:c6:aa:ee:99: 48:18:a5:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjUxMTAyMjM1MTMwWhcNMjUxMTA5MjM1MTMwWjAYMRYwFAYD VQQDEw02OTA3ZWU4Mi0zYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4edWeDEXLiXo1zGDrLZn/YkC3wEJASuOKNwo5X9Z1NqXYKZM1RDCYTgHQSgx T4YBIa7Dly0ojVw9YBPvv0jcc/quoT1Er6y/7zhqEl8z9X4KHi//x5Y9XY8GbG0c W8ecNBMVgK+3tgNliEWK1WKV/SvVEjDS8rgiAk8tr/RrW+uYVL/cIED1CSCxK6yy kD5IdUyiB3uPXmxGiM5n4EzKuMEN8AtICGIahw3m62HzAtnKTJWiX6fhZFjkntI8 CFms9Qmcd83j1AKq/MmTn20SkdVFDDZnQQjw6G1jXdmbf6l/Py+NTGoZAyBzQ36W mIe2w2BOUTy4Fr1saODxrQe+GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE24A8KR wYBPKCpIwdB6pod/AlDxMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPpRzLzmD6N5N0CGqR4CJq9J2T41oOEIPcXU4kJpq1ClVO8H/q8tgC UaJaWDDq9GelzrU44mfLy31WYEOxpb5qdk2FCdTSXvAft+72m9DCM3u6tFBYZyfp dM2oit34pMzANIGV5GUBNnuZ+NQLo6mYmgMiqRzu+i4f6vfVs70dwcE6zGwGn2uB wM3Mv8qAgUueumkyO6f5sO+ajzZJw/9dXcQCRKgwcGpD0fxnDtK3BnDBmLztsDUm vuI8Cc+m1R6D8+PJ2NCJ11ysdCq+BV1p7XXf7RGoFQFc7nfAjO8u3rPFvXXlVFKt OrhITUDHOI0a62SYEe18pcaq7plIGKWO -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:18 2025 by rpki-client