$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: 6td+5CGCWti9XmV/1b10mPTcrpNzAySGw1cndpWhjGc= Subject key identifier: 0C:3C:70:D9:45:CC:0B:A2:F0:4C:31:A2:F8:0D:6E:E6:DC:FA:D1:AB Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 05D6 Signing time: Sun 02 Nov 2025 23:04:32 +0000 Manifest this update: Sun 02 Nov 2025 23:04:31 +0000 Manifest next update: Sun 09 Nov 2025 23:04:31 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: zAAQmhKwpA8lopOOPDI9+twz7FFuClZJpgIlObTItEw=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: qEzwTZZUC4uMW1HAy4f00w0OgM+P5McKSsq6Y4WD9MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Nov 2 23:04:31 2025 GMT Not After : Nov 9 23:04:31 2025 GMT Subject: CN=6907e37f-7fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:21:7f:6d:d2:2a:7b:24:ee:77:8c:10:81: d8:3a:b5:c8:ea:31:53:99:4c:fe:2a:4f:64:a4:3d: 64:44:41:d3:57:46:b8:fb:27:23:0b:06:cd:bd:92: 56:a7:ea:6b:43:b1:b6:bd:46:8c:52:ea:8f:0d:6a: 11:17:ba:dd:01:02:0b:85:01:cc:8e:a0:46:ab:aa: 50:e9:bb:7a:a1:4d:f6:5f:68:a9:c3:2d:8f:e2:39: c4:74:ea:11:ac:9a:5d:7a:e2:0b:d9:0d:0c:1e:ab: b5:31:7e:34:1d:97:a4:6e:e9:85:33:b6:04:1a:13: bf:89:8a:96:ab:95:5d:fa:e6:01:94:82:8c:73:9e: ea:3c:91:9e:89:44:59:75:f5:6f:0e:76:27:49:21: ba:22:12:61:99:95:d2:f1:63:82:dc:dd:2f:90:8c: e2:15:08:c0:5d:f9:30:9c:99:8f:4b:27:98:f7:53: c2:b8:57:df:60:a3:4a:ab:4c:c9:aa:a3:f6:a5:a0: 6d:cc:66:1e:4a:98:2a:ee:13:7c:47:f1:a5:12:a9: 99:7c:0a:3c:1c:a1:0d:47:ef:14:22:8a:d4:ca:cf: cf:86:1e:5e:bf:62:f7:f4:52:d1:46:21:50:cb:ee: b5:d2:2b:38:57:51:30:e6:b4:d7:72:d8:c3:d1:7c: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:70:D9:45:CC:0B:A2:F0:4C:31:A2:F8:0D:6E:E6:DC:FA:D1:AB X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:bc:be:c2:c4:07:13:b7:19:09:63:00:38:6e:43:b9:bd:d8: 68:8c:61:26:c6:6a:8a:b0:62:45:c6:0a:bb:0b:b2:a1:4c:f8: 9e:ff:67:95:7e:bb:0d:b8:9e:4c:a8:88:91:8f:a3:f2:87:a3: eb:7b:51:3c:b9:49:2d:89:1a:8d:80:a6:c2:3b:0d:b6:a6:1c: 99:53:36:f9:e5:a1:f6:b4:e7:8d:21:8e:c7:35:d1:c4:3b:2e: f2:8a:a8:2d:a5:db:82:a1:80:ab:2e:fd:d1:f4:b5:e6:0a:a7: e8:05:a8:de:ec:b2:d7:83:ce:05:b2:4d:53:11:4e:f9:57:3e: de:86:f6:c1:3d:75:70:ec:9a:4e:b6:eb:a0:24:ec:06:17:a2: 75:2b:ed:0b:f8:87:e5:84:ae:78:d2:8b:53:01:e2:3b:58:c8: fc:60:ea:6d:98:99:9b:84:2d:e8:11:8e:34:c2:3d:82:03:e5: 0a:6f:b1:24:7a:bb:43:d8:88:b7:f1:b7:48:84:48:91:52:7a: e6:ba:5d:b7:66:38:38:6e:78:7a:d6:5b:b2:09:31:e9:72:8a: f5:95:d9:96:3e:54:b1:42:23:fc:a5:6f:83:2d:05:4f:68:f9: 4a:38:6a:5e:d5:24:cb:99:43:70:dd:2b:07:fb:31:f0:61:cb: f2:24:fd:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUxMTAyMjMwNDMxWhcNMjUxMTA5MjMwNDMxWjAYMRYwFAYD VQQDEw02OTA3ZTM3Zi03ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26Ehf23SKnsk7neMEIHYOrXI6jFTmUz+Kk9kpD1kREHTV0a4+ycjCwbNvZJW p+prQ7G2vUaMUuqPDWoRF7rdAQILhQHMjqBGq6pQ6bt6oU32X2ipwy2P4jnEdOoR rJpdeuIL2Q0MHqu1MX40HZekbumFM7YEGhO/iYqWq5Vd+uYBlIKMc57qPJGeiURZ dfVvDnYnSSG6IhJhmZXS8WOC3N0vkIziFQjAXfkwnJmPSyeY91PCuFffYKNKq0zJ qqP2paBtzGYeSpgq7hN8R/GlEqmZfAo8HKENR+8UIorUys/Phh5ev2L39FLRRiFQ y+610is4V1Ew5rTXctjD0XzHLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw8cNlF zAui8EwxovgNbubc+tGrMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgvL7CxAcTtxkJYwA4bkO5vdhojGEmxmqKsGJFxgq7C7KhTPie/2eV frsNuJ5MqIiRj6Pyh6Pre1E8uUktiRqNgKbCOw22phyZUzb55aH2tOeNIY7HNdHE Oy7yiqgtpduCoYCrLv3R9LXmCqfoBaje7LLXg84Fsk1TEU75Vz7ehvbBPXVw7JpO tuugJOwGF6J1K+0L+IflhK540otTAeI7WMj8YOptmJmbhC3oEY40wj2CA+UKb7Ek ertD2Ii38bdIhEiRUnrmul23Zjg4bnh61luyCTHpcor1ldmWPlSxQiP8pW+DLQVP aPlKOGpe1STLmUNw3SsH+zHwYcvyJP2d -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:55 2025 by rpki-client