$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft File: n5SsB4YdiAvjQDGyhnkD51wyPEg.mft (raw, json) Hash identifier: eUjooZttzJzC8EsWXgIOvKQSlfwN97XCqD5a8dE7QU0= Subject key identifier: A8:E7:47:3E:7D:14:76:45:3B:6C:8B:0D:DF:59:E2:CC:9F:FD:29:42 Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48 Certificate issuer: /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft Manifest number: 28 Signing time: Mon 03 Nov 2025 07:43:57 +0000 Manifest this update: Mon 03 Nov 2025 07:43:57 +0000 Manifest next update: Mon 10 Nov 2025 07:43:57 +0000 Files and hashes: 1: n5SsB4YdiAvjQDGyhnkD51wyPEg.crl (hash: Z2HzH93+P3hdYKYPGrRe2ID8AVmMBLtpeQjoeffArDA=) 2: F5E70A7083CD11F09D837187C4F9AE02.roa (hash: W7JUxDMH42jtJaJ07/erekB5mTVAnJ/Qka1pQNTUmm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48 Validity Not Before: Nov 3 07:43:57 2025 GMT Not After : Nov 10 07:43:57 2025 GMT Subject: CN=69085d3d-8114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:0a:6b:17:e7:da:d1:14:ac:a8:f7:5f:b4: e6:78:d6:46:e5:e8:57:01:2b:0b:d3:4e:34:e6:83: c9:f8:64:1c:79:c0:ef:9e:af:f8:ed:b7:7c:ab:18: 84:c1:63:60:45:8d:a3:e6:99:00:1d:f9:95:0a:e8: 89:73:98:bc:77:5c:7b:af:cd:e8:69:45:bd:07:8a: 9d:2b:4a:b3:35:8d:ba:30:8a:8a:6b:6f:ba:68:2e: dc:e3:bf:56:bd:7c:b9:3a:40:40:41:58:c2:43:b8: 59:4f:8b:6a:ee:67:86:3a:1f:d9:bc:92:48:ea:d1: 39:0c:49:90:77:2f:12:6d:d9:4e:1c:dd:68:0f:b9: d8:19:dc:a1:5b:b3:9d:5f:a3:64:ec:f2:78:a9:6f: 84:0d:1d:56:a6:3e:62:af:78:18:3c:ba:b8:72:84: be:e7:e6:4e:26:62:e1:c2:9c:00:d5:fd:8f:e8:b0: 76:36:da:b9:48:36:68:d2:09:94:49:8e:bd:39:38: 27:e3:33:8d:2d:74:e6:de:aa:b7:87:4e:0a:12:fc: 29:a3:c7:b2:c3:34:ea:f8:c8:87:a2:6d:9b:c2:0c: 06:d2:16:d7:93:be:fa:8c:38:e8:16:4b:bc:bd:61: 0b:bb:80:7c:68:5b:6d:35:b3:43:a1:18:16:14:4b: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E7:47:3E:7D:14:76:45:3B:6C:8B:0D:DF:59:E2:CC:9F:FD:29:42 X509v3 Authority Key Identifier: keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a1:ed:9b:41:9c:df:fe:51:f4:ee:57:9b:d0:60:7e:36:02: ae:9f:6a:0c:b9:f7:d8:b5:92:b4:5e:e2:63:d6:91:26:43:17: 29:2b:b8:72:f7:74:0e:e7:46:3c:a0:04:8b:68:33:37:a2:be: e8:40:51:b8:f0:29:b5:48:1c:23:e8:76:14:1a:a0:5b:cd:c8: dd:ef:0a:6b:87:56:10:8c:69:7e:3a:81:a3:89:92:ea:02:76: c9:f5:cc:1f:00:dd:15:de:3d:e7:94:28:47:07:f4:5e:36:7f: 94:c3:72:3e:40:77:c3:12:f9:7b:b8:5e:30:7d:96:c8:d9:db: a2:0c:f4:9a:7f:9c:32:10:75:5c:0b:d4:e4:b3:65:51:ad:4a: 54:00:a2:6a:e7:e5:d7:19:e2:fe:37:d0:77:77:51:b0:5a:a3: 14:b0:07:df:b5:73:fc:5f:e4:81:dd:6d:76:b5:d1:d7:37:a3: c6:71:94:38:4f:4c:dc:b8:85:39:1c:f5:50:9d:87:63:dd:75: 31:3f:c6:50:f8:55:20:19:54:ac:ec:b1:ac:81:aa:1f:14:f1: 8d:42:a9:27:60:ed:1b:32:0e:fb:a0:07:9c:f6:90:06:89:ad: 09:1e:15:2a:44:51:02:9c:ff:0b:f1:77:a9:eb:e0:c2:95:89: 35:c5:ed:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0E5RTExMC8GA1UEBRMoOUY5NEFDMDc4NjFEODgwQkUzNDAzMUIyODY3OTAzRTc1 QzMyM0M0ODAeFw0yNTExMDMwNzQzNTdaFw0yNTExMTAwNzQzNTdaMBgxFjAUBgNV BAMTDTY5MDg1ZDNkLTgxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvRwprF+fa0RSsqPdftOZ41kbl6FcBKwvTTjTmg8n4ZBx5wO+er/jtt3yrGITB Y2BFjaPmmQAd+ZUK6IlzmLx3XHuvzehpRb0Hip0rSrM1jbowioprb7poLtzjv1a9 fLk6QEBBWMJDuFlPi2ruZ4Y6H9m8kkjq0TkMSZB3LxJt2U4c3WgPudgZ3KFbs51f o2Ts8nipb4QNHVamPmKveBg8urhyhL7n5k4mYuHCnADV/Y/osHY22rlINmjSCZRJ jr05OCfjM40tdObeqreHTgoS/Cmjx7LDNOr4yIeibZvCDAbSFteTvvqMOOgWS7y9 YQu7gHxoW201s0OhGBYUS2c9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqOdHPn0U dkU7bIsN31nizJ/9KUIwHwYDVR0jBBgwFoAUn5SsB4YdiAvjQDGyhnkD51wyPEgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQTlFLzdCNkZGM0U0ODNC NzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2alFER3lobmtENTF3eVBF Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjVTc0I0WWRpQXZqUURHeWhua0Q1MXd5UEVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QTlFLzdCNkZGM0U0ODNCNzExRjA5MDA3N0I1RUM0RjlBRTAyL241U3NCNFlkaUF2 alFER3lobmtENTF3eVBFZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAuh7ZtBnN/+UfTuV5vQYH42Aq6fagy599i1krRe4mPWkSZDFykruHL3 dA7nRjygBItoMzeivuhAUbjwKbVIHCPodhQaoFvNyN3vCmuHVhCMaX46gaOJkuoC dsn1zB8A3RXePeeUKEcH9F42f5TDcj5Ad8MS+Xu4XjB9lsjZ26IM9Jp/nDIQdVwL 1OSzZVGtSlQAomrn5dcZ4v430Hd3UbBaoxSwB9+1c/xf5IHdbXa10dc3o8ZxlDhP TNy4hTkc9VCdh2PddTE/xlD4VSAZVKzssayBqh8U8Y1CqSdg7RsyDvugB5z2kAaJ rQkeFSpEUQKc/wvxd6nr4MKViTXF7fw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:08 2025 by rpki-client