$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: z6QoZCCFF4gf1ZKQBeYAIat06c8QnVTqBR4B5daCZ5A= Subject key identifier: 88:D6:B1:2A:E2:17:7C:02:AC:CB:91:02:66:33:0C:27:07:30:17:F3 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A91 Signing time: Sun 02 Nov 2025 19:32:28 +0000 Manifest this update: Sun 02 Nov 2025 19:32:28 +0000 Manifest next update: Sun 09 Nov 2025 19:32:28 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: GxZteNAsl1+BbVm+/fPpWX6QPohGRxTGYRsdqYMbQzY=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2714 (0xa9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Nov 2 19:32:28 2025 GMT Not After : Nov 9 19:32:28 2025 GMT Subject: CN=6907b1cc-af30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:e7:39:7b:3f:38:61:11:a1:c3:1c:54:c9: c9:95:a2:ba:ea:09:ab:ec:50:75:1b:1b:ab:59:b6: 4b:cc:04:77:27:a0:95:84:8e:3f:42:90:45:2b:51: 19:94:b3:4e:78:4c:dd:c8:e7:13:a1:16:3c:06:c5: 3d:e6:d7:49:a4:3a:fe:2a:59:f7:9d:1a:65:82:66: 15:45:e4:08:d6:d1:01:12:fb:bc:2a:5a:cd:fe:1e: e9:ee:1f:cd:3c:88:e0:84:84:95:23:f8:c7:af:f0: 06:a6:70:d7:e8:32:2d:b5:94:e0:5f:b6:74:a4:c9: 98:d9:ad:0e:8a:25:4e:3d:06:16:58:a3:03:46:0d: 60:05:d1:02:7d:84:37:5c:6c:9b:43:c6:18:ac:01: 08:95:99:62:5c:67:3d:f1:c1:aa:ad:fe:74:af:b1: 90:4e:c9:9e:e1:bf:c0:52:8c:81:57:96:5c:a8:32: c0:d2:9e:1e:75:e2:a3:1e:91:0a:b5:ec:86:0b:36: 85:53:f8:7d:65:f8:b5:34:f7:29:88:e4:9f:27:25: 7e:25:0d:9c:d8:d0:99:1d:c8:fc:54:45:23:8b:a9: 8f:20:cd:34:8f:c4:e9:64:4c:39:b9:3e:c3:34:fa: 58:5d:ca:ca:f1:25:fb:94:bd:58:f6:54:62:00:14: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:B1:2A:E2:17:7C:02:AC:CB:91:02:66:33:0C:27:07:30:17:F3 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ea:3a:ee:00:d1:ab:d3:9e:43:65:34:ac:f6:83:95:ea:30: 59:62:26:6a:5f:73:f5:09:90:5a:96:5f:07:de:5e:8c:e1:80: d6:19:e0:53:ba:7f:90:b8:85:a6:0e:d9:ae:66:2c:28:39:ea: 08:09:4d:db:2b:35:f5:ba:5c:85:19:c0:69:48:d9:c1:09:6e: b5:08:59:bc:ca:3d:bb:00:ce:de:30:63:1f:0a:55:22:fa:00: 97:29:7a:a8:07:c8:68:3c:80:a4:0c:16:bb:05:97:7b:f3:47: 77:b2:7a:bc:df:f5:dd:98:07:d1:2b:fe:7a:a1:b2:d1:8a:aa: 8d:a6:52:11:8f:c8:35:fa:8c:65:5f:d9:86:c6:56:de:40:b2: 18:95:56:6d:6c:52:c7:ef:02:6b:7a:06:1f:cb:4e:c8:ad:18: 87:82:78:12:08:c6:c9:8d:20:0e:4e:28:99:8f:67:a1:c4:96: 78:b2:ff:0e:c9:b4:b2:7e:10:3b:64:29:59:5a:76:ff:bc:25: 1b:85:1a:72:9a:ac:21:9d:47:36:50:65:ab:9c:58:09:12:40: d0:57:63:67:85:60:68:c0:ee:1e:15:9b:65:2d:79:c7:15:66: 0d:0f:0e:66:73:07:ba:c9:4a:28:7b:09:cc:d6:73:2f:46:99: b0:69:4b:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUxMTAyMTkzMjI4WhcNMjUxMTA5MTkzMjI4WjAYMRYwFAYD VQQDEw02OTA3YjFjYy1hZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kjnOXs/OGERocMcVMnJlaK66gmr7FB1GxurWbZLzAR3J6CVhI4/QpBFK1EZ lLNOeEzdyOcToRY8BsU95tdJpDr+Kln3nRplgmYVReQI1tEBEvu8KlrN/h7p7h/N PIjghISVI/jHr/AGpnDX6DIttZTgX7Z0pMmY2a0OiiVOPQYWWKMDRg1gBdECfYQ3 XGybQ8YYrAEIlZliXGc98cGqrf50r7GQTsme4b/AUoyBV5ZcqDLA0p4edeKjHpEK teyGCzaFU/h9Zfi1NPcpiOSfJyV+JQ2c2NCZHcj8VEUji6mPIM00j8TpZEw5uT7D NPpYXcrK8SX7lL1Y9lRiABRUTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjWsSri F3wCrMuRAmYzDCcHMBfzMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB66jruANGr055DZTSs9oOV6jBZYiZqX3P1CZBall8H3l6M4YDWGeBT un+QuIWmDtmuZiwoOeoICU3bKzX1ulyFGcBpSNnBCW61CFm8yj27AM7eMGMfClUi +gCXKXqoB8hoPICkDBa7BZd780d3snq83/XdmAfRK/56obLRiqqNplIRj8g1+oxl X9mGxlbeQLIYlVZtbFLH7wJregYfy07IrRiHgngSCMbJjSAOTiiZj2ehxJZ4sv8O ybSyfhA7ZClZWnb/vCUbhRpymqwhnUc2UGWrnFgJEkDQV2NnhWBowO4eFZtlLXnH FWYNDw5mcwe6yUooewnM1nMvRpmwaUv5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:29 2025 by rpki-client