$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: ELmueAjiUzAfjMTIP7yqKPcKBrWQviV5OvxYw7sLhss= Subject key identifier: BD:01:F7:4C:D3:33:ED:55:47:EB:2E:1F:E5:EC:C7:F6:BB:7D:58:78 Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0DE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0DDD Signing time: Sun 02 Nov 2025 17:52:41 +0000 Manifest this update: Sun 02 Nov 2025 17:52:40 +0000 Manifest next update: Sun 09 Nov 2025 17:52:40 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: G34OMSronRxQLJBnjYIxtZBXiD7JFNxXOiP8G5Bw0LM=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: nnMRznD8HI2Yb7yh15XfK/3vrMLq6BY/UPlfXXuokSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3556 (0xde4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: Nov 2 17:52:40 2025 GMT Not After : Nov 9 17:52:40 2025 GMT Subject: CN=69079a68-d791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:2f:32:37:97:f3:29:f5:90:2a:15:4a:6e: 72:75:b1:66:2f:1f:14:2a:92:35:0b:53:8e:e7:15: db:bb:29:86:89:0b:b4:55:d2:4f:99:56:78:38:98: 0f:4d:04:05:74:c5:10:65:a0:79:a6:e8:7c:e5:83: 1b:7d:38:c1:f0:ac:28:d4:0d:48:1a:0b:e1:e4:a9: 28:a2:0c:f4:5f:7d:ba:00:50:3c:6e:94:c7:ea:04: a3:b5:2f:62:4d:33:0f:1d:d7:2a:9b:67:5c:fa:49: b8:bf:ab:81:22:58:3c:c6:e3:4a:c9:c8:25:46:85: c5:4b:e1:de:63:92:b6:48:5b:aa:4b:80:ff:2e:da: f1:0d:41:63:d4:b6:e7:bd:a1:05:95:5e:7e:e8:87: c9:a0:b0:6f:df:25:84:cf:8b:da:ec:46:ee:c0:4e: 7f:79:e3:aa:57:9a:7f:f5:ef:0a:1e:7b:15:d1:44: 56:54:46:14:6b:1e:db:62:36:e8:4d:2b:50:ba:55: 71:73:e7:b0:70:9b:21:73:b2:77:8a:0b:60:aa:aa: f9:3d:2a:11:38:cd:03:28:7e:2f:96:aa:cf:dd:fe: 23:f2:b1:ad:6e:46:ae:95:ce:96:6a:18:1c:0a:d1: a5:2f:a5:40:6f:1f:eb:87:2f:a5:55:3a:7f:2b:5d: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:F7:4C:D3:33:ED:55:47:EB:2E:1F:E5:EC:C7:F6:BB:7D:58:78 X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3f:59:7a:5a:5e:5a:be:ca:fd:62:4e:5e:96:b1:d8:e2:e4: a8:c2:13:84:78:6d:3d:ee:d7:f7:98:fa:ec:4d:cf:bd:d6:fc: ff:1f:fc:2d:0a:2b:20:52:d7:2d:11:8e:b5:08:55:cd:b9:87: 8a:29:8c:67:eb:1a:ff:3f:e8:a5:eb:b5:77:d4:7f:fe:20:a9: 8e:40:32:f6:e1:10:ed:53:48:18:f4:0b:a7:8b:18:b1:d0:6e: f2:9e:09:91:ae:ec:27:f3:00:e1:30:54:17:07:62:e5:79:4f: 67:e1:3c:5c:c3:5e:ed:a7:ba:7a:0b:db:87:54:b7:ec:d3:d3: bd:fa:52:c1:0c:ec:bb:34:ed:bd:e2:ca:97:f2:d2:6e:bb:d9: a3:35:11:e7:62:19:f2:2c:44:f6:22:e9:fc:d0:3b:eb:13:95: 9c:59:87:e5:d6:0c:a1:fa:4b:e9:c4:3a:bb:c1:79:72:b7:4d: 3a:45:8c:d5:af:b5:1e:05:de:64:a5:7e:be:91:04:cc:95:d2: c7:be:71:06:29:d1:83:89:e9:ce:87:4e:a5:8d:c4:e8:55:b2: 7c:f2:53:66:f7:75:14:85:7a:83:d7:d9:41:f2:bd:65:65:6f: 69:82:e6:ce:ea:09:86:60:3a:41:f1:fc:82:1c:c2:b7:0b:a0: 22:e3:33:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUxMTAyMTc1MjQwWhcNMjUxMTA5MTc1MjQwWjAYMRYwFAYD VQQDEw02OTA3OWE2OC1kNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzAvMjeX8yn1kCoVSm5ydbFmLx8UKpI1C1OO5xXbuymGiQu0VdJPmVZ4OJgP TQQFdMUQZaB5puh85YMbfTjB8Kwo1A1IGgvh5Kkoogz0X326AFA8bpTH6gSjtS9i TTMPHdcqm2dc+km4v6uBIlg8xuNKycglRoXFS+HeY5K2SFuqS4D/LtrxDUFj1Lbn vaEFlV5+6IfJoLBv3yWEz4va7EbuwE5/eeOqV5p/9e8KHnsV0URWVEYUax7bYjbo TStQulVxc+ewcJshc7J3igtgqqr5PSoROM0DKH4vlqrP3f4j8rGtbkaulc6Wahgc CtGlL6VAbx/rhy+lVTp/K11inwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0B90zT M+1VR+suH+Xsx/a7fVh4MB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUP1l6Wl5avsr9Yk5elrHY4uSowhOEeG097tf3mPrsTc+91vz/H/wt CisgUtctEY61CFXNuYeKKYxn6xr/P+il67V31H/+IKmOQDL24RDtU0gY9Aunixix 0G7yngmRruwn8wDhMFQXB2LleU9n4Txcw17tp7p6C9uHVLfs09O9+lLBDOy7NO29 4sqX8tJuu9mjNRHnYhnyLET2Iun80DvrE5WcWYfl1gyh+kvpxDq7wXlyt006RYzV r7UeBd5kpX6+kQTMldLHvnEGKdGDienOh06ljcToVbJ88lNm93UUhXqD19lB8r1l ZW9pgubO6gmGYDpB8fyCHMK3C6Ai4zOi -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:01 2025 by rpki-client