$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: 0gq5kFMrBX9jgmGYVZSii1UHHvMOom3ebkpVGLsVC/c= Subject key identifier: 93:3E:83:D6:CC:CB:E8:D5:6D:4A:0A:A4:06:14:4A:DE:00:57:CB:7F Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 23BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 239D Signing time: Sun 02 Nov 2025 15:50:04 +0000 Manifest this update: Sun 02 Nov 2025 15:50:03 +0000 Manifest next update: Sun 09 Nov 2025 15:50:03 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: L1eD1uHUeh3JLgDC8T+B9TW4cnHGLibQJU/qD3lYI/8=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9150 (0x23be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Nov 2 15:50:03 2025 GMT Not After : Nov 9 15:50:03 2025 GMT Subject: CN=69077dab-611e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:d2:68:8f:b8:a4:1b:12:21:8f:87:05:0e: 0a:23:cf:f8:06:15:7e:8a:81:8c:28:aa:2f:0c:2d: 3c:59:97:a8:99:08:fe:22:bf:12:a1:d8:d4:be:68: 5b:bc:96:fb:c2:4d:48:e8:62:83:cf:ee:f2:0a:cb: 73:74:03:fe:2b:23:90:7f:7c:14:97:19:39:2b:7a: bd:67:46:39:a9:7e:89:c3:6d:69:61:73:ce:f7:b1: 0c:8d:15:30:67:73:3d:29:f1:80:ea:ea:fb:cf:9f: b2:98:de:62:b2:2a:30:a6:64:1a:96:45:aa:91:bd: 3c:4b:a6:2e:e9:3a:04:92:f7:77:d4:c5:b8:71:5d: 03:69:4b:7b:5e:cc:2a:d6:07:7c:0a:e5:d4:a4:c4: 47:ed:c7:f8:26:63:28:2c:62:ab:ef:03:62:2a:be: 44:05:64:15:48:4f:04:dd:d9:cf:d6:eb:7c:a3:5b: ac:f5:4a:e3:63:13:e1:66:24:45:87:82:e3:1d:00: fd:43:ee:25:39:b7:25:c7:0c:c6:d1:bb:7b:8d:7f: 5f:1d:f1:a9:e5:6e:2a:ae:90:c5:10:33:1d:63:20: db:94:66:9b:11:05:78:70:fc:55:a3:84:91:95:49: 9a:a3:1d:9a:7f:aa:3a:0a:60:1e:88:ca:38:c6:26: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:83:D6:CC:CB:E8:D5:6D:4A:0A:A4:06:14:4A:DE:00:57:CB:7F X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0c:ed:91:12:20:6f:e8:5d:19:63:ef:7a:01:2a:25:b9:41: b0:c9:1d:53:5c:03:08:a7:46:09:4c:2e:28:f1:68:d6:b8:b8: 9a:9a:c3:07:36:96:8c:88:12:dc:12:fa:ae:90:1f:2d:bd:68: d1:79:50:90:43:bf:09:25:be:61:71:be:15:27:4e:79:69:96: 5d:10:51:40:bf:f8:49:cc:f1:ec:e1:fd:a6:0b:2d:e2:37:c2: cf:82:eb:88:69:9e:3a:94:f6:df:47:7c:12:46:0d:82:41:f3: b5:08:4e:35:d2:51:bf:74:14:21:d5:e5:3c:6c:67:e8:29:fa: e4:e0:64:8a:db:2e:02:a2:44:35:7c:39:cd:97:e3:1f:92:44: 32:62:0d:74:92:62:63:b1:73:e0:be:76:a9:ad:ee:ad:82:d7: f7:6d:d1:2c:a7:e4:74:a3:83:ce:f7:fc:54:34:0a:f9:f1:96: 27:46:13:99:43:53:22:3d:b7:dc:c8:1f:fe:52:d3:2f:63:aa: a7:cf:85:38:2d:e9:5e:b4:94:8b:a4:69:9b:e6:18:5c:fd:e9: 8c:3b:7a:d0:98:2b:b9:61:c6:98:64:b2:20:2d:8d:e3:c4:53: 9a:f3:ac:6c:77:84:8e:01:b1:c6:f7:72:0e:06:c0:e5:86:21: a5:88:f1:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUxMTAyMTU1MDAzWhcNMjUxMTA5MTU1MDAzWjAYMRYwFAYD VQQDEw02OTA3N2RhYi02MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+RDSaI+4pBsSIY+HBQ4KI8/4BhV+ioGMKKovDC08WZeomQj+Ir8SodjUvmhb vJb7wk1I6GKDz+7yCstzdAP+KyOQf3wUlxk5K3q9Z0Y5qX6Jw21pYXPO97EMjRUw Z3M9KfGA6ur7z5+ymN5isiowpmQalkWqkb08S6Yu6ToEkvd31MW4cV0DaUt7Xswq 1gd8CuXUpMRH7cf4JmMoLGKr7wNiKr5EBWQVSE8E3dnP1ut8o1us9UrjYxPhZiRF h4LjHQD9Q+4lObclxwzG0bt7jX9fHfGp5W4qrpDFEDMdYyDblGabEQV4cPxVo4SR lUmaox2af6o6CmAeiMo4xiYJ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM+g9bM y+jVbUoKpAYUSt4AV8t/MB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0DO2REiBv6F0ZY+96ASoluUGwyR1TXAMIp0YJTC4o8WjWuLiamsMH NpaMiBLcEvqukB8tvWjReVCQQ78JJb5hcb4VJ055aZZdEFFAv/hJzPHs4f2mCy3i N8LPguuIaZ46lPbfR3wSRg2CQfO1CE410lG/dBQh1eU8bGfoKfrk4GSK2y4CokQ1 fDnNl+MfkkQyYg10kmJjsXPgvnapre6tgtf3bdEsp+R0o4PO9/xUNAr58ZYnRhOZ Q1MiPbfcyB/+UtMvY6qnz4U4LeletJSLpGmb5hhc/emMO3rQmCu5YcaYZLIgLY3j xFOa86xsd4SOAbHG93IOBsDlhiGliPFm -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:35 2025 by rpki-client