$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: DMR7xZ2zOkri4XHgAQVHTmOQ9dF0hTkY9fA6LuifjF4= Subject key identifier: 1E:3A:69:66:72:98:BD:97:25:2F:30:BE:7A:10:67:12:AD:07:44:23 Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 0861 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 085B Signing time: Tue 04 Nov 2025 20:44:02 +0000 Manifest this update: Tue 04 Nov 2025 20:44:01 +0000 Manifest next update: Tue 11 Nov 2025 20:44:01 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: P4CaeH43nl0yjZghU/B2cCdrd123IsVMOme9/0/TEEA=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2145 (0x861) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Nov 4 20:44:01 2025 GMT Not After : Nov 11 20:44:01 2025 GMT Subject: CN=690a6592-2e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:3c:7c:cb:2f:64:4c:ee:66:ca:50:6d:b3: 6c:b4:6b:83:ce:e4:9f:2d:25:20:ce:82:f6:f6:50: a3:a4:ed:ad:ef:8b:6c:60:49:54:50:42:cb:3f:bf: 95:57:46:05:3d:cb:73:50:0a:3b:f4:1b:f9:bc:75: d5:e8:d5:63:90:80:59:05:49:87:eb:d2:f8:cf:df: 64:40:ec:41:bf:a4:29:b1:08:3c:83:d7:58:7a:6b: f7:9a:72:97:9d:6e:53:58:38:64:8a:54:4e:a4:32: c0:81:af:a5:17:e6:b0:8b:47:d8:70:35:30:9d:80: 45:ce:de:75:e2:3c:5d:21:01:d8:b1:39:00:bd:7e: bb:19:60:55:88:22:b1:3b:3b:de:5b:d5:5b:b9:22: 8a:e8:47:d7:c4:2e:59:95:00:db:b0:d7:7f:12:34: 9d:5b:0e:c8:74:0d:ea:b4:ec:06:b0:14:49:99:02: e7:4d:b7:b4:e0:77:ae:e3:7e:01:2e:88:23:e1:7a: 60:fb:53:0d:11:8f:01:5f:3a:89:b5:9b:8e:aa:7c: a9:94:a1:8b:e9:ec:91:14:e1:ca:7a:37:d6:ee:4e: e6:33:39:19:40:e2:a6:93:e9:ca:a4:8e:bd:7a:52: e4:2e:4d:e8:f8:9c:30:20:d6:72:2e:c4:c7:68:00: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3A:69:66:72:98:BD:97:25:2F:30:BE:7A:10:67:12:AD:07:44:23 X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:43:e8:ee:14:93:52:e7:14:2b:be:02:99:12:79:3d:b7:2b: 16:9b:57:3d:93:ff:53:ad:8b:d6:8b:83:2b:70:f3:ba:71:bc: 1c:49:66:44:b8:02:29:d7:c4:8f:75:66:ac:62:10:74:3f:bc: c9:99:ae:2a:12:ea:60:be:c9:d9:d6:71:77:1c:57:4e:34:e9: 17:3b:58:b5:1c:e6:ba:44:9e:68:70:7b:7d:63:82:ff:40:30: ab:ab:85:f0:5b:a7:8c:57:22:7c:88:9d:31:e6:ab:fe:18:1e: 9f:3e:ca:55:cf:34:69:6a:cd:32:6f:62:01:f0:37:3e:cb:c3: f7:d1:39:ea:b3:cb:ba:11:5e:03:a8:01:40:a3:02:b4:7f:cc: 10:c1:fb:da:37:e6:50:1a:ed:bc:ab:75:ff:7e:96:6f:f3:79: f8:26:78:da:e7:8b:d1:ad:48:1f:1e:f7:d1:44:47:73:5d:b0: e6:fe:61:f5:d0:fd:c9:47:aa:65:33:3a:6c:31:49:69:43:93: cd:62:32:e6:a4:8e:d4:ee:c5:66:9c:6a:e2:30:0d:21:5b:eb: 25:a2:c9:a5:02:80:73:2e:96:15:9a:df:9f:6e:21:b7:a4:74: c9:df:d9:6a:27:76:a9:88:92:8b:5b:cc:16:23:6e:c7:01:80: cb:50:47:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUxMTA0MjA0NDAxWhcNMjUxMTExMjA0NDAxWjAYMRYwFAYD VQQDEw02OTBhNjU5Mi0yZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dA8fMsvZEzuZspQbbNstGuDzuSfLSUgzoL29lCjpO2t74tsYElUUELLP7+V V0YFPctzUAo79Bv5vHXV6NVjkIBZBUmH69L4z99kQOxBv6QpsQg8g9dYemv3mnKX nW5TWDhkilROpDLAga+lF+awi0fYcDUwnYBFzt514jxdIQHYsTkAvX67GWBViCKx OzveW9VbuSKK6EfXxC5ZlQDbsNd/EjSdWw7IdA3qtOwGsBRJmQLnTbe04Heu434B Logj4Xpg+1MNEY8BXzqJtZuOqnyplKGL6eyRFOHKejfW7k7mMzkZQOKmk+nKpI69 elLkLk3o+JwwINZyLsTHaAAgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB46aWZy mL2XJS8wvnoQZxKtB0QjMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Q+juFJNS5xQrvgKZEnk9tysWm1c9k/9TrYvWi4MrcPO6cbwcSWZE uAIp18SPdWasYhB0P7zJma4qEupgvsnZ1nF3HFdONOkXO1i1HOa6RJ5ocHt9Y4L/ QDCrq4XwW6eMVyJ8iJ0x5qv+GB6fPspVzzRpas0yb2IB8Dc+y8P30Tnqs8u6EV4D qAFAowK0f8wQwfvaN+ZQGu28q3X/fpZv83n4Jnja54vRrUgfHvfRREdzXbDm/mH1 0P3JR6plMzpsMUlpQ5PNYjLmpI7U7sVmnGriMA0hW+slosmlAoBzLpYVmt+fbiG3 pHTJ39lqJ3apiJKLW8wWI27HAYDLUEfq -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:30 2025 by rpki-client