$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: H4DA4eK+er5LWVwrbT6y621JY06Y3y2JJ0CHgGbCp5c= Subject key identifier: 57:88:36:74:0C:72:2D:34:D2:1D:FA:0E:2E:7D:37:1A:9C:2B:3B:49 Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 03E8 Signing time: Mon 03 Nov 2025 00:28:51 +0000 Manifest this update: Mon 03 Nov 2025 00:28:51 +0000 Manifest next update: Mon 10 Nov 2025 00:28:51 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: zgGiajXglntU+fdsj9TGdLyyNx8UULofUKrc66I3lmQ=) 2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=) 3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Nov 3 00:28:51 2025 GMT Not After : Nov 10 00:28:51 2025 GMT Subject: CN=6907f743-336a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:00:7a:54:3e:98:8f:2c:1e:0a:3c:00:12:fb: 3f:d7:2b:41:62:ae:b1:c9:35:ec:55:b9:67:24:00: 70:08:f2:61:20:03:0e:40:b3:e6:fe:b5:c7:77:47: 90:26:d9:85:43:57:1b:ea:f5:52:6c:9b:b6:f9:5e: 30:f0:78:51:1a:0f:b1:b2:c6:22:60:e7:28:71:a3: e6:d0:98:d3:44:cb:17:d9:1b:d6:f8:71:e2:4d:1c: 33:ef:15:ab:b6:02:aa:8c:fa:37:40:9f:5c:f8:10: 3e:4e:a1:b1:0c:26:23:8a:1b:75:fb:e4:ed:78:72: fe:14:0b:f9:69:6b:f1:78:6f:0e:b4:79:7a:a3:9f: cb:76:3d:f3:cc:b5:ab:23:01:be:68:be:2a:5c:6a: 97:85:21:57:63:85:06:90:d3:70:3e:17:8e:0d:37: e2:ed:f3:93:9c:b5:ac:98:a6:3b:8e:05:27:d5:ec: d7:43:df:11:a1:66:d6:c3:dc:c2:54:ab:48:4c:a6: 2a:bc:63:97:26:bb:5c:0f:7a:ff:ec:d2:8c:7d:e0: 9c:23:42:d2:52:ac:e0:7e:0e:9e:e0:ff:23:aa:2c: 34:2c:86:71:b4:95:e5:3f:31:30:8a:08:b3:55:fd: e8:cc:6a:09:1f:8c:df:a6:41:6f:0d:b3:c3:14:8f: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:36:74:0C:72:2D:34:D2:1D:FA:0E:2E:7D:37:1A:9C:2B:3B:49 X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0f:8d:96:f0:0f:8c:35:f2:88:2c:f6:48:63:fd:3f:5b:90: e0:10:56:67:09:5b:32:64:ad:67:6c:06:7a:ba:66:1f:f4:97: 47:c9:63:fc:25:b7:10:26:a4:c0:92:ca:12:fd:d6:08:80:cb: 43:72:a2:25:0d:86:60:cb:ac:20:5b:57:42:b4:40:12:7c:29: 6b:71:a9:53:3e:87:fd:34:bb:f3:1a:e0:0d:46:6b:74:4c:5b: 57:ba:73:a7:c8:d1:d6:36:aa:d9:05:9a:8b:93:81:62:d1:9a: 8c:d5:96:1e:41:38:e5:64:16:8d:45:9d:78:13:be:ce:11:a2: 1b:54:5b:4b:50:3e:9d:b3:a0:ef:51:dd:b8:fa:55:9e:dc:47: 38:74:ed:e9:b2:7f:a0:dd:f6:65:30:b7:31:b3:4b:41:f3:14: c2:3e:f8:4c:6a:fa:8a:89:30:6f:21:65:d4:a2:fa:30:63:9b: bf:2a:d2:5b:cb:35:a2:07:7e:5e:be:1c:77:52:2e:33:a1:b1: 50:87:a0:76:de:f6:2b:7a:81:f4:a2:88:82:1a:bc:0b:85:62: cd:b6:56:a2:1e:32:4a:c4:08:ce:88:32:0b:bc:35:27:08:02: 80:01:3f:99:c8:29:35:83:b8:0b:83:ab:d5:42:90:ca:4e:86: 90:9e:58:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjUxMTAzMDAyODUxWhcNMjUxMTEwMDAyODUxWjAYMRYwFAYD VQQDEw02OTA3Zjc0My0zMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QB6VD6YjyweCjwAEvs/1ytBYq6xyTXsVblnJABwCPJhIAMOQLPm/rXHd0eQ JtmFQ1cb6vVSbJu2+V4w8HhRGg+xssYiYOcocaPm0JjTRMsX2RvW+HHiTRwz7xWr tgKqjPo3QJ9c+BA+TqGxDCYjiht1++TteHL+FAv5aWvxeG8OtHl6o5/Ldj3zzLWr IwG+aL4qXGqXhSFXY4UGkNNwPheODTfi7fOTnLWsmKY7jgUn1ezXQ98RoWbWw9zC VKtITKYqvGOXJrtcD3r/7NKMfeCcI0LSUqzgfg6e4P8jqiw0LIZxtJXlPzEwigiz Vf3ozGoJH4zfpkFvDbPDFI+ybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeINnQM ci000h36Di59NxqcKztJMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7D42W8A+MNfKILPZIY/0/W5DgEFZnCVsyZK1nbAZ6umYf9JdHyWP8 JbcQJqTAksoS/dYIgMtDcqIlDYZgy6wgW1dCtEASfClrcalTPof9NLvzGuANRmt0 TFtXunOnyNHWNqrZBZqLk4Fi0ZqM1ZYeQTjlZBaNRZ14E77OEaIbVFtLUD6ds6Dv Ud24+lWe3Ec4dO3psn+g3fZlMLcxs0tB8xTCPvhMavqKiTBvIWXUovowY5u/KtJb yzWiB35evhx3Ui4zobFQh6B23vYreoH0ooiCGrwLhWLNtlaiHjJKxAjOiDILvDUn CAKAAT+ZyCk1g7gLg6vVQpDKToaQnljS -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:25 2025 by rpki-client