$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft File: 8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json) Hash identifier: I5QGdrh/dVJcVU2FGiaVXiNkrm7zzhbO3f0kw4NIrQI= Subject key identifier: 94:09:AE:78:E4:65:B5:14:46:03:82:BF:DC:DC:BF:6F:DA:13:05:29 Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 07:37:41 +0000 Manifest this update: Mon 03 Nov 2025 07:37:40 +0000 Manifest next update: Mon 10 Nov 2025 07:37:40 +0000 Files and hashes: 1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: 00ddVSlOufHnK2JsOdsd0VDjdyYBc6xP1xClAItiVIo=) 2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: S2srypxp7sEj5mgpvV1lWNa9dizgL57pVNGYl/RcGuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A Validity Not Before: Nov 3 07:37:40 2025 GMT Not After : Nov 10 07:37:40 2025 GMT Subject: CN=69085bc4-c53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:ed:c9:58:21:c7:b7:8f:01:f3:65:d1:59: d7:ab:06:db:b0:4c:06:5f:7f:ba:e8:38:19:5b:16: e8:a2:6b:b0:23:e7:ed:7f:df:3c:7d:4e:f6:64:3b: dc:c3:b3:8f:2c:71:b7:85:d1:46:d1:fb:f4:56:88: 2c:f6:66:12:00:6c:32:11:d6:94:03:fc:90:68:f7: 7f:66:4d:74:ff:63:ca:b2:ed:36:64:74:08:95:18: 5a:49:e5:00:39:dc:bd:d7:1b:4e:42:33:d2:91:2f: d5:aa:ea:b9:9a:c6:c5:c5:1f:fd:24:b1:0a:42:f0: a1:d0:55:e3:8b:bd:fc:f4:03:05:96:f7:d6:48:7c: 98:17:67:d6:57:6c:3c:f9:c8:b5:29:ae:f9:f8:70: cb:e2:fd:9a:e4:78:98:44:86:6d:27:33:94:3c:94: 08:bf:65:d3:3c:1f:0b:0e:00:05:3e:ce:ef:78:e6: 28:ec:7c:7d:24:46:c1:b5:68:60:2c:23:e5:ab:d3: cb:a9:b6:b4:0f:69:51:21:98:e1:de:d2:22:4d:01: 81:ee:83:79:49:93:3d:03:db:a6:2f:84:da:87:7c: e0:8b:71:15:b0:2b:47:7c:ef:eb:b9:8d:5c:df:2d: f1:0a:0e:f5:8f:33:7d:a3:c3:85:30:4b:1c:aa:7f: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:09:AE:78:E4:65:B5:14:46:03:82:BF:DC:DC:BF:6F:DA:13:05:29 X509v3 Authority Key Identifier: keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5c:7e:2a:05:5c:87:af:78:4d:ca:9d:bb:58:0c:d1:bf:6c: 36:c2:67:d1:0c:31:e6:cd:11:45:ab:fe:a9:41:86:9a:84:30: 49:de:ee:de:3a:59:c0:10:3d:6f:90:f9:14:d3:b6:0b:69:ae: 98:16:33:fc:be:85:3d:cb:1a:b0:67:9e:5f:68:fe:93:1a:f8: c6:ae:2f:3e:5f:90:7b:86:37:a1:b4:6d:02:2b:07:40:cf:2d: f2:74:9f:e3:12:fe:c1:68:ab:60:42:36:4f:19:49:16:8c:d6: 1a:39:22:e4:35:02:c1:2a:7d:57:2c:e7:c8:53:09:5b:30:c2: d1:a1:0f:3a:f6:06:17:93:52:92:17:8e:6e:41:a8:5f:67:6b: fb:89:d9:2a:12:07:64:57:81:03:60:22:c1:8a:8b:e4:b4:83: 24:58:ac:42:c0:d5:87:ef:3a:9e:a5:1b:7d:26:3f:a4:a4:d1: 87:2d:ba:40:93:ad:9d:b7:ba:6d:4c:a9:d7:54:37:91:6c:54: e7:7d:d5:56:8d:96:a4:ff:6c:59:20:ef:d4:17:ba:30:10:bf: 6d:db:4d:b0:28:f0:ad:76:31:d6:fc:db:0e:51:5d:44:9a:86: 11:6e:c0:c9:96:74:cf:63:4d:15:6c:0e:c0:19:db:1f:87:c0: 5f:a2:cc:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkM0NjExMC8GA1UEBRMoRjAzREZEM0IxNjA2NDU0Q0ExQkE4NjkwM0U3OUFEQTcw NTBCQTE2QTAeFw0yNTExMDMwNzM3NDBaFw0yNTExMTAwNzM3NDBaMBgxFjAUBgNV BAMTDTY5MDg1YmM0LWM1M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSa+3JWCHHt48B82XRWderBtuwTAZff7roOBlbFuiia7Aj5+1/3zx9TvZkO9zD s48scbeF0UbR+/RWiCz2ZhIAbDIR1pQD/JBo939mTXT/Y8qy7TZkdAiVGFpJ5QA5 3L3XG05CM9KRL9Wq6rmaxsXFH/0ksQpC8KHQVeOLvfz0AwWW99ZIfJgXZ9ZXbDz5 yLUprvn4cMvi/ZrkeJhEhm0nM5Q8lAi/ZdM8HwsOAAU+zu945ijsfH0kRsG1aGAs I+Wr08uptrQPaVEhmOHe0iJNAYHug3lJkz0D26YvhNqHfOCLcRWwK0d87+u5jVzf LfEKDvWPM32jw4UwSxyqf/vnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlAmueORl tRRGA4K/3Ny/b9oTBSkwHwYDVR0jBBgwFoAU8D39OxYGRUyhuoaQPnmtpwULoWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQzQ2LzkwMDM4OUZFNzEw RDExRjA4MDgzNDUyRkM0RjlBRTAyLzhEMzlPeFlHUlV5aHVvYVFQbm10cHdVTG9X by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEQzOU94WUdSVXlodW9hUVBubXRwd1VMb1dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QzQ2LzkwMDM4OUZFNzEwRDExRjA4MDgzNDUyRkM0RjlBRTAyLzhEMzlPeFlHUlV5 aHVvYVFQbm10cHdVTG9Xby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5cfioFXIeveE3KnbtYDNG/bDbCZ9EMMebNEUWr/qlBhpqEMEne7t46 WcAQPW+Q+RTTtgtprpgWM/y+hT3LGrBnnl9o/pMa+MauLz5fkHuGN6G0bQIrB0DP LfJ0n+MS/sFoq2BCNk8ZSRaM1ho5IuQ1AsEqfVcs58hTCVswwtGhDzr2BheTUpIX jm5BqF9na/uJ2SoSB2RXgQNgIsGKi+S0gyRYrELA1YfvOp6lG30mP6Sk0YctukCT rZ23um1MqddUN5FsVOd91VaNlqT/bFkg79QXujAQv23bTbAo8K12Mdb82w5RXUSa hhFuwMmWdM9jTRVsDsAZ2x+HwF+izFM= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:31 2025 by rpki-client