$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json) Hash identifier: q9zkuR9/HVlZPDRD3iAqmLLdVIXj8dwylFSOSJAE4sU= Subject key identifier: FC:DC:BE:3A:02:F2:12:2E:DC:25:1D:8B:47:8F:60:F7:55:1B:40:30 Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Certificate serial: 0DDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft Manifest number: 0DC8 Signing time: Sun 02 Nov 2025 17:53:45 +0000 Manifest this update: Sun 02 Nov 2025 17:53:45 +0000 Manifest next update: Sun 09 Nov 2025 17:53:45 +0000 Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: 7iyYfmG2Lw4FRZ00s1oDisl3OUypj4TwWIPFsXYdp/Q=) 2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=) 3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=) 4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=) 5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Validity Not Before: Nov 2 17:53:45 2025 GMT Not After : Nov 9 17:53:45 2025 GMT Subject: CN=69079aa9-d5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:3f:4a:c7:4b:8e:c5:27:a7:f4:55:bf:db: f6:5f:88:26:db:79:1f:57:8e:3b:a4:36:73:ee:24: 2e:2e:6c:44:d3:ca:b5:54:f4:eb:43:09:a3:a0:f7: a2:e5:33:20:95:8d:98:e1:ac:73:5b:2b:8a:ce:bb: 16:a0:a1:c8:60:b9:94:fe:1d:88:d4:22:d5:62:52: 23:47:84:29:53:d2:db:a4:f2:dc:85:ba:73:5e:1b: af:65:11:da:71:01:15:2e:00:51:7f:a8:68:67:32: 87:d5:30:be:53:1c:04:ca:b0:de:d3:6e:d7:18:21: 29:d4:e6:3e:9e:f1:4c:36:ad:1c:e9:e3:6d:68:44: c1:60:46:33:13:5c:58:62:67:a0:6b:67:ea:11:d5: a6:af:79:3d:12:15:b7:1a:94:b4:7d:90:06:03:1d: da:5c:79:96:e8:bd:2a:bb:7b:76:4d:70:63:d4:66: 5b:2a:15:e0:54:99:3d:7f:17:20:60:a7:d6:6c:f9: d3:1b:f7:2e:b7:8c:e0:3b:9d:65:e6:15:2a:28:f7: 93:10:a2:33:5a:f6:17:3c:26:a5:f8:64:38:f0:7e: 46:46:25:b8:97:1f:f8:a4:35:84:f7:eb:5a:2d:1a: 35:8b:45:09:7f:01:b7:c8:66:7d:ca:3d:51:a2:63: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:BE:3A:02:F2:12:2E:DC:25:1D:8B:47:8F:60:F7:55:1B:40:30 X509v3 Authority Key Identifier: keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c6:f4:a7:7b:c8:3d:7d:8d:96:77:1b:c6:41:a4:9d:40:44: 65:73:83:fb:2f:7a:85:44:d6:ee:e5:89:fc:8a:24:d9:45:49: 3a:27:4a:c4:c0:14:74:64:ff:ef:fc:83:e3:f3:69:dc:20:77: ac:4a:b6:33:08:b3:f6:89:2a:25:71:23:a9:eb:1d:f7:2f:5f: 3e:7d:f2:2c:05:39:c0:d6:1b:64:12:ea:2d:b8:7c:58:61:fc: 72:93:9a:21:59:fe:46:fa:e3:b8:a7:79:60:8d:4b:40:2c:1b: 94:d7:3a:5b:3b:c4:7e:ff:a5:46:86:42:13:d6:01:0f:a8:cb: 13:af:1c:25:90:1a:f5:82:06:c2:31:1b:2a:56:07:be:73:e8: c7:38:e1:7e:45:8b:12:20:ea:85:b9:ba:83:67:9e:a7:80:65: 4f:b1:46:0b:f8:9f:b5:f0:96:90:92:1e:94:5c:39:7d:a8:70: c6:9f:cf:4f:73:ae:28:13:01:12:80:b6:6b:27:43:ec:2a:2f: 61:48:00:b5:ed:f7:37:a0:46:1e:15:d7:bb:b7:f7:38:4d:da: 78:6c:b3:b8:36:9a:3b:a1:ff:9d:a4:49:4e:9b:4f:f8:af:d5: 95:f6:65:da:70:09:db:c5:7d:b4:06:0b:dc:3c:af:7d:5a:90: 49:cc:3a:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4 OTFFNEY0NEUwHhcNMjUxMTAyMTc1MzQ1WhcNMjUxMTA5MTc1MzQ1WjAYMRYwFAYD VQQDEw02OTA3OWFhOS1kNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Is/SsdLjsUnp/RVv9v2X4gm23kfV447pDZz7iQuLmxE08q1VPTrQwmjoPei 5TMglY2Y4axzWyuKzrsWoKHIYLmU/h2I1CLVYlIjR4QpU9LbpPLchbpzXhuvZRHa cQEVLgBRf6hoZzKH1TC+UxwEyrDe027XGCEp1OY+nvFMNq0c6eNtaETBYEYzE1xY Ymega2fqEdWmr3k9EhW3GpS0fZAGAx3aXHmW6L0qu3t2TXBj1GZbKhXgVJk9fxcg YKfWbPnTG/cut4zgO51l5hUqKPeTEKIzWvYXPCal+GQ48H5GRiW4lx/4pDWE9+ta LRo1i0UJfwG3yGZ9yj1RomO+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzcvjoC 8hIu3CUdi0ePYPdVG0AwMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARxvSne8g9fY2WdxvGQaSdQERlc4P7L3qFRNbu5Yn8iiTZRUk6J0rE wBR0ZP/v/IPj82ncIHesSrYzCLP2iSolcSOp6x33L18+ffIsBTnA1htkEuotuHxY Yfxyk5ohWf5G+uO4p3lgjUtALBuU1zpbO8R+/6VGhkIT1gEPqMsTrxwlkBr1ggbC MRsqVge+c+jHOOF+RYsSIOqFubqDZ56ngGVPsUYL+J+18JaQkh6UXDl9qHDGn89P c64oEwESgLZrJ0PsKi9hSAC17fc3oEYeFde7t/c4Tdp4bLO4Npo7of+dpElOm0/4 r9WV9mXacAnbxX20BgvcPK99WpBJzDrx -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:27 2025 by rpki-client