$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json) Hash identifier: EE+gTd+cZDOL1s7PARZwPke2ZW9rN8T2MSsg3uHqtck= Subject key identifier: DB:86:CF:6C:B9:60:5C:30:CB:F9:F7:28:E9:93:11:2A:0A:51:A4:AF Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft Manifest number: 0670 Signing time: Tue 04 Nov 2025 22:38:00 +0000 Manifest this update: Tue 04 Nov 2025 22:37:59 +0000 Manifest next update: Tue 11 Nov 2025 22:37:59 +0000 Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: L5yGwvOtv9k+PeWVRDu/tvM2m4KGkaV3Js5nEAvHaaY=) 2: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: XTSBtrIecRC5bRQ4gGFFZQkO+lSp1UBH8SdLLnw+dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: Nov 4 22:37:59 2025 GMT Not After : Nov 11 22:37:59 2025 GMT Subject: CN=690a8048-5fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:a4:9c:0f:89:06:ff:ff:21:73:0c:a2:11: f3:61:a5:be:cd:60:15:2a:db:08:b2:28:49:5a:f4: 7a:23:1a:47:3b:d4:55:dd:ab:8b:15:9a:24:b2:c4: 69:10:7c:9e:bc:e4:d3:96:1b:f6:da:eb:7e:0f:09: 86:1e:46:05:cf:b8:60:f3:05:e7:e7:fc:5a:63:2e: 87:a8:1b:2e:c2:82:89:7f:17:61:e3:48:37:82:bb: 62:c3:a8:14:0c:07:5c:fa:d0:38:27:7e:53:b4:6f: 1e:23:ce:91:1c:df:df:2e:48:0d:fe:11:68:79:de: cb:69:37:2f:d4:82:eb:cd:ae:81:de:57:2c:b9:8f: 74:8a:22:4f:c3:80:78:38:85:a2:e6:e7:6b:46:20: 8b:f6:9c:9c:03:ce:c0:1e:2d:45:b7:05:2a:1d:d8: 8f:83:a8:1c:8c:54:b0:7e:c7:1c:1d:e3:3d:ab:44: 00:e7:8f:8e:1e:ea:36:14:91:18:43:01:44:2a:0d: 71:7a:c9:0a:c6:95:84:31:ca:79:63:f8:e0:e5:fa: 48:c4:d3:f6:6b:8a:93:bf:f2:21:73:5a:c4:ca:7b: 08:32:a8:45:04:a7:1f:b0:13:1e:b0:5b:15:c1:14: 14:ae:a0:c6:ab:ce:c7:e5:76:e9:17:a9:b8:08:ab: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:CF:6C:B9:60:5C:30:CB:F9:F7:28:E9:93:11:2A:0A:51:A4:AF X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d4:8e:83:6a:89:04:36:70:f5:64:73:c7:16:a2:0d:85:af: c6:39:14:01:ee:77:de:71:ad:4e:64:bf:0c:e5:53:17:51:09: 22:b0:b8:7f:f7:19:1e:9d:a2:43:5e:80:bb:af:6b:a8:80:44: 72:a9:d0:51:b5:f3:2d:e2:f0:df:68:4a:de:2a:49:0c:ef:2d: a6:9e:53:13:4e:06:c4:f3:2d:5b:53:1a:51:96:66:db:a2:cb: e7:bf:f1:d3:df:c4:e8:60:4d:52:89:c4:60:08:aa:45:db:ca: c6:d5:58:92:a3:e6:70:82:bf:20:89:db:d3:b7:3e:6b:b8:83: 08:52:b0:98:5a:de:2a:cc:5a:18:54:0d:28:03:71:0a:e2:27: df:82:7d:55:ec:02:1c:5b:36:4e:b3:fd:f3:2b:f6:d6:81:7b: 09:eb:e7:47:e2:e6:d3:86:72:3a:b1:c0:23:91:81:9e:a3:b4: a5:72:c0:52:c7:cf:13:ea:af:00:7c:91:58:08:1f:73:83:3d: 2d:8d:24:17:d1:72:74:98:e0:19:bb:c7:21:74:f4:7c:71:5e: 47:8d:bc:6a:a6:e0:61:f2:0a:cd:d9:75:93:f6:7e:16:93:01: eb:07:75:46:c7:7e:e2:a2:ed:de:94:e5:f8:79:6c:07:43:9f: 46:11:a9:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjUxMTA0MjIzNzU5WhcNMjUxMTExMjIzNzU5WjAYMRYwFAYD VQQDEw02OTBhODA0OC01ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AKknA+JBv//IXMMohHzYaW+zWAVKtsIsihJWvR6IxpHO9RV3auLFZokssRp EHyevOTTlhv22ut+DwmGHkYFz7hg8wXn5/xaYy6HqBsuwoKJfxdh40g3grtiw6gU DAdc+tA4J35TtG8eI86RHN/fLkgN/hFoed7LaTcv1ILrza6B3lcsuY90iiJPw4B4 OIWi5udrRiCL9pycA87AHi1FtwUqHdiPg6gcjFSwfsccHeM9q0QA54+OHuo2FJEY QwFEKg1xeskKxpWEMcp5Y/jg5fpIxNP2a4qTv/Ihc1rEynsIMqhFBKcfsBMesFsV wRQUrqDGq87H5XbpF6m4CKsNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuGz2y5 YFwwy/n3KOmTESoKUaSvMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP OEEtTTZNYmI2dnNGSGhsTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC61I6DaokENnD1ZHPHFqINha/GORQB7nfeca1OZL8M5VMXUQkisLh/ 9xkenaJDXoC7r2uogERyqdBRtfMt4vDfaEreKkkM7y2mnlMTTgbE8y1bUxpRlmbb osvnv/HT38ToYE1SicRgCKpF28rG1ViSo+Zwgr8gidvTtz5ruIMIUrCYWt4qzFoY VA0oA3EK4iffgn1V7AIcWzZOs/3zK/bWgXsJ6+dH4ubThnI6scAjkYGeo7SlcsBS x88T6q8AfJFYCB9zgz0tjSQX0XJ0mOAZu8chdPR8cV5HjbxqpuBh8grN2XWT9n4W kwHrB3VGx37iou3elOX4eWwHQ59GEanP -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:24 2025 by rpki-client