$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: YtHdjjD5GKdy2qTv7YoqKgz8s1YStaZqe5WNiPsFs6s= Subject key identifier: 50:D2:48:CE:A5:42:CF:41:2B:33:F0:71:20:76:18:43:12:05:B0:D8 Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 07D8 Signing time: Sun 02 Nov 2025 21:09:50 +0000 Manifest this update: Sun 02 Nov 2025 21:09:50 +0000 Manifest next update: Sun 09 Nov 2025 21:09:50 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: fkr/LQIRlJv2omsmLWlQvwEtLPH1FhSwidAgDqjH3hc=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: tku8g/IBMXsDJnLZ5j41i0Ddo6BJiQ1UMhvs9gK1Tr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Nov 2 21:09:50 2025 GMT Not After : Nov 9 21:09:50 2025 GMT Subject: CN=6907c89e-8ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6b:a2:fd:66:c3:99:7d:18:2d:e6:cc:15:db: bf:71:e9:ce:4a:7f:cd:f5:38:70:6f:d4:8c:dd:03: 4e:de:e6:3b:c2:ab:1f:99:8c:46:c7:5f:51:d3:3d: bf:12:c8:59:61:47:ae:4d:59:c5:0c:58:f0:a1:a7: 8e:52:4a:17:ea:19:d6:f8:39:b2:31:e4:92:f2:38: 1e:3c:9f:ca:b6:fd:4f:34:c1:6b:e4:34:1d:fb:9d: f3:c4:90:4a:58:e2:21:33:2e:09:af:f2:07:a3:bf: e3:50:d4:61:08:5a:bf:43:e9:2f:8d:61:0e:f1:56: d9:f2:7f:bf:ed:a5:30:30:8a:29:b8:7e:b4:5c:e4: 37:7d:0f:43:38:96:6d:b2:e9:07:c6:9a:ed:22:02: 55:28:2d:25:3f:0b:5a:07:e9:b9:5c:0c:8a:b4:3a: f5:86:5b:03:0a:4c:f2:e1:7d:1e:b4:d5:e0:f6:b0: df:60:b1:18:d4:b7:43:2b:9f:73:c0:d9:1b:e8:22: cc:e3:78:f4:83:09:ab:e8:16:52:ed:9c:fd:46:58: 6a:45:20:32:02:85:ba:dc:90:ee:8c:03:55:71:12: 27:50:b0:8d:e6:21:72:e8:89:38:d3:18:80:5c:99: 37:02:6f:4c:ef:2e:a4:0d:c8:4a:14:f0:ab:ab:c6: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D2:48:CE:A5:42:CF:41:2B:33:F0:71:20:76:18:43:12:05:B0:D8 X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3c:d0:e9:06:5f:27:5a:81:17:98:8b:bd:10:db:e1:11:be: 7b:a4:fd:95:69:db:69:92:a6:24:00:92:0d:c4:6d:97:73:27: f0:63:fe:18:6a:1e:3c:e2:df:0a:7d:1f:27:90:12:86:25:da: 36:b0:4d:eb:be:fb:8d:73:d4:d4:5f:2f:18:19:e6:69:ba:22: c0:7e:7d:b7:50:59:42:30:a2:05:62:a4:67:74:3b:db:12:70: f3:83:86:4a:bb:4d:a4:ee:c0:f7:3a:4d:1a:90:ec:e4:df:c9: d6:da:1c:62:14:4d:7c:ca:d1:05:ae:6b:d2:ef:c9:56:07:c2: 87:2e:f7:72:05:94:49:90:aa:3e:1e:e1:73:00:64:96:44:78: 22:3f:f4:3f:94:35:56:47:e1:7d:60:2e:c2:ae:ec:14:5f:ed: 16:95:0d:72:fb:cd:1a:a8:1d:8d:34:47:ac:b8:d7:83:51:1f: 89:69:7b:79:63:ed:a6:2d:e2:df:78:67:84:43:ab:ac:98:46: 4a:65:89:c6:ce:9c:0d:71:0e:a5:2b:db:cf:59:5e:db:0f:c3: ac:61:8b:23:9e:58:9d:20:83:8a:0e:2c:86:8d:8e:10:bc:50: 9a:64:a3:d3:50:fd:02:f6:bc:95:14:e3:7b:f0:69:5c:75:10: 84:97:28:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjUxMTAyMjEwOTUwWhcNMjUxMTA5MjEwOTUwWjAYMRYwFAYD VQQDEw02OTA3Yzg5ZS04YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mui/WbDmX0YLebMFdu/cenOSn/N9Thwb9SM3QNO3uY7wqsfmYxGx19R0z2/ EshZYUeuTVnFDFjwoaeOUkoX6hnW+DmyMeSS8jgePJ/Ktv1PNMFr5DQd+53zxJBK WOIhMy4Jr/IHo7/jUNRhCFq/Q+kvjWEO8VbZ8n+/7aUwMIopuH60XOQ3fQ9DOJZt sukHxprtIgJVKC0lPwtaB+m5XAyKtDr1hlsDCkzy4X0etNXg9rDfYLEY1LdDK59z wNkb6CLM43j0gwmr6BZS7Zz9RlhqRSAyAoW63JDujANVcRInULCN5iFy6Ik40xiA XJk3Am9M7y6kDchKFPCrq8aNvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDSSM6l Qs9BKzPwcSB2GEMSBbDYMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7PNDpBl8nWoEXmIu9ENvhEb57pP2VadtpkqYkAJINxG2XcyfwY/4Y ah484t8KfR8nkBKGJdo2sE3rvvuNc9TUXy8YGeZpuiLAfn23UFlCMKIFYqRndDvb EnDzg4ZKu02k7sD3Ok0akOzk38nW2hxiFE18ytEFrmvS78lWB8KHLvdyBZRJkKo+ HuFzAGSWRHgiP/Q/lDVWR+F9YC7CruwUX+0WlQ1y+80aqB2NNEesuNeDUR+JaXt5 Y+2mLeLfeGeEQ6usmEZKZYnGzpwNcQ6lK9vPWV7bD8OsYYsjnlidIIOKDiyGjY4Q vFCaZKPTUP0C9ryVFON78GlcdRCElyhk -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:23 2025 by rpki-client