$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: wEF1HdnxLMZ1qi2ymCmVKsfNnUHuzErvw35+h+MtalA= Subject key identifier: 8A:E2:C3:CD:67:2A:70:10:2C:B0:50:50:D4:1C:23:2E:F5:CE:D1:13 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 0158 Signing time: Mon 03 Nov 2025 04:06:44 +0000 Manifest this update: Mon 03 Nov 2025 04:06:43 +0000 Manifest next update: Mon 10 Nov 2025 04:06:43 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: 8dJia8TNn1ieSMkJoZ9FEhhy2KuGeFxgasLHPt2JSzg=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: sWbEBie3r4Rs9tqZdxaTO4p/g0MLaIAVIR769Fluhr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Nov 3 04:06:43 2025 GMT Not After : Nov 10 04:06:43 2025 GMT Subject: CN=69082a53-5b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:ba:86:c8:e9:53:7b:4c:54:10:2c:e0:a2: f6:ea:b1:29:2c:ff:73:ca:ef:78:23:86:ca:24:98: 7f:c2:42:04:2b:5d:40:91:30:65:9d:35:12:a3:60: e3:13:09:8c:b6:c8:5d:38:cc:9f:24:37:81:bb:24: 54:8e:c1:cc:f0:26:8b:e5:e8:3c:af:0a:ee:1c:b8: e6:63:cc:02:d3:96:af:ba:f5:2f:85:5e:16:8c:6b: 21:15:b2:c6:0b:c2:2d:a9:07:ea:5e:d3:5b:3a:e6: df:26:a3:88:c3:d5:40:ba:71:58:66:5b:5d:17:0b: cd:9e:7b:6e:23:96:27:2a:37:53:9f:6b:6b:71:cf: bb:3c:1d:21:d9:1a:44:f7:4c:4e:72:ed:b0:c0:fe: 8b:a9:53:c5:be:6a:1a:68:f4:90:f1:a4:8e:5f:f7: 0e:f1:13:09:ff:91:d7:7b:7e:49:f3:3b:6d:ac:81: e8:bf:18:90:1c:0e:fb:b6:ae:b9:8e:ce:c4:06:a1: 1b:f0:7f:fe:d1:e0:2a:9f:db:b2:a4:b3:53:fa:c5: 73:8c:0f:5f:eb:ec:ab:d3:09:a5:a8:9b:18:b6:20: 16:85:f4:2d:36:f4:2c:22:0a:94:aa:74:85:56:a2: 49:74:7a:1e:88:6e:70:84:b8:06:05:5e:08:01:81: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:C3:CD:67:2A:70:10:2C:B0:50:50:D4:1C:23:2E:F5:CE:D1:13 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e1:27:16:36:72:b9:e9:2d:39:a0:11:47:b5:f8:ac:33:cd: d4:44:38:bc:96:f8:d5:50:f5:2a:c9:f5:65:fd:32:46:53:b8: 87:c1:f1:7d:29:ed:76:b8:09:31:9c:fa:70:1b:16:7b:66:36: 3b:a2:6c:89:cf:8e:c3:bb:61:2e:e9:39:54:5d:00:d3:0c:a3: 6b:13:50:f0:92:01:9e:52:98:20:1b:d1:dd:46:e7:36:2d:e9: 3b:6a:06:f3:5b:e2:e1:d1:98:25:45:4a:19:06:c9:ed:e6:7c: 20:a2:06:e4:67:7b:4b:aa:37:5b:6a:75:2a:d8:c1:9a:86:45: 89:a4:3f:ca:fa:b2:e5:3b:5f:f0:12:c2:e3:06:59:de:84:de: a3:13:18:f0:7c:34:2f:32:97:1e:b7:14:28:fd:b7:c8:e7:95: 64:b5:74:06:87:5d:f7:00:b8:f2:d6:63:ee:2c:8f:c2:8d:d9: 5a:88:52:46:69:5a:ba:1e:57:d2:d0:8b:aa:f5:19:ce:6b:25: 69:7a:cb:33:03:69:80:7f:db:23:99:44:68:76:17:14:ab:94: a3:3b:b9:cc:00:87:ac:aa:85:ed:5f:68:b5:e8:2d:de:16:0c: d1:51:48:e1:4e:93:e9:f3:e3:43:d5:8d:5f:fa:5f:78:9d:ab: 17:81:cd:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUxMTAzMDQwNjQzWhcNMjUxMTEwMDQwNjQzWjAYMRYwFAYD VQQDEw02OTA4MmE1My01YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujC6hsjpU3tMVBAs4KL26rEpLP9zyu94I4bKJJh/wkIEK11AkTBlnTUSo2Dj EwmMtshdOMyfJDeBuyRUjsHM8CaL5eg8rwruHLjmY8wC05avuvUvhV4WjGshFbLG C8ItqQfqXtNbOubfJqOIw9VAunFYZltdFwvNnntuI5YnKjdTn2trcc+7PB0h2RpE 90xOcu2wwP6LqVPFvmoaaPSQ8aSOX/cO8RMJ/5HXe35J8zttrIHovxiQHA77tq65 js7EBqEb8H/+0eAqn9uypLNT+sVzjA9f6+yr0wmlqJsYtiAWhfQtNvQsIgqUqnSF VqJJdHoeiG5whLgGBV4IAYH7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIriw81n KnAQLLBQUNQcIy71ztETMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm4ScWNnK56S05oBFHtfisM83URDi8lvjVUPUqyfVl/TJGU7iHwfF9 Ke12uAkxnPpwGxZ7ZjY7omyJz47Du2Eu6TlUXQDTDKNrE1DwkgGeUpggG9HdRuc2 Lek7agbzW+Lh0ZglRUoZBsnt5nwgogbkZ3tLqjdbanUq2MGahkWJpD/K+rLlO1/w EsLjBlnehN6jExjwfDQvMpcetxQo/bfI55VktXQGh133ALjy1mPuLI/CjdlaiFJG aVq6HlfS0Iuq9RnOayVpesszA2mAf9sjmURodhcUq5SjO7nMAIesqoXtX2i16C3e FgzRUUjhTpPp8+ND1Y1f+l94nasXgc1D -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:59 2025 by rpki-client