$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft File: p93zVatoEjcBpb3RX2W6lktd4DU.mft (raw, json) Hash identifier: 68PQXCJ6H1D1Rz3vXCWs4DX3RJ11AVIaqK6fVRdYC+Q= Subject key identifier: E7:77:C7:BE:7F:A3:37:AD:14:D2:48:D9:57:A5:D9:62:35:56:CA:93 Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35 Certificate issuer: /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft Manifest number: D7 Signing time: Wed 05 Nov 2025 05:47:54 +0000 Manifest this update: Wed 05 Nov 2025 05:47:53 +0000 Manifest next update: Wed 12 Nov 2025 05:47:53 +0000 Files and hashes: 1: p93zVatoEjcBpb3RX2W6lktd4DU.crl (hash: kUsKUuub5kNtctytFeI3TVmXJJwmh3+bO1dIOY9NUoo=) 2: 77BC7D3A74F411EF8B9E1067C4F9AE02.roa (hash: mESHoDDD272jt3z7nTPlBgSVIzPmv3+ih+n+sctk5Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035 Validity Not Before: Nov 5 05:47:53 2025 GMT Not After : Nov 12 05:47:53 2025 GMT Subject: CN=690ae50a-ba6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:54:93:ca:99:15:9f:5c:8b:2d:56:d8:6e: bc:7f:f1:18:70:40:db:4e:32:41:41:38:fd:45:f9: 45:33:61:ed:c0:76:25:b5:04:38:9d:e3:35:0d:23: fc:64:2e:88:c2:c7:af:df:f9:d1:a7:69:87:3e:4f: e3:e6:eb:3a:4b:95:30:e9:18:6a:fc:7b:b1:a9:77: 33:95:91:a4:10:42:a7:6d:80:02:e3:78:bc:43:97: ad:5b:56:9a:4f:e0:55:7c:55:0f:ee:9c:d5:7f:c2: ea:06:40:9a:6a:a0:74:9f:0b:17:41:02:0b:51:cf: 94:31:46:a4:8d:f2:ee:e3:79:08:06:16:5e:cd:e8: 6c:34:96:cf:97:4a:41:26:a6:8c:0a:11:a9:b2:5c: 4e:af:01:33:ff:8b:30:1c:df:c2:67:20:28:fb:52: 96:52:ca:22:e6:4f:a6:20:bb:bc:62:38:fa:c3:3e: 7f:0e:20:83:ff:26:cd:a7:f8:17:ac:dd:1d:a2:e7: 0a:72:ff:bc:11:f6:0c:8c:fb:5f:60:4b:e6:5e:01: 4f:24:e4:c0:8d:a5:a4:44:dd:f8:90:60:7f:39:31: 4b:a1:e1:5a:0a:36:52:87:3f:ed:04:b8:ca:08:f9: 6b:be:a3:70:d0:87:c8:11:8b:25:fd:8f:ba:03:dc: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:C7:BE:7F:A3:37:AD:14:D2:48:D9:57:A5:D9:62:35:56:CA:93 X509v3 Authority Key Identifier: keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:8d:85:40:a9:21:46:a8:4b:a2:fd:a5:bf:62:12:ec:33:6c: 19:4d:98:f2:e2:1a:e9:02:ed:96:bd:c5:2d:ad:8a:ed:68:56: 0c:51:0b:72:1d:ad:5e:09:22:43:b4:08:0f:45:ca:04:2e:93: c3:5f:9a:e2:b4:9e:de:1b:e6:84:c2:83:ae:dd:24:f7:bb:6f: 9c:4d:29:7c:b2:27:83:66:25:0c:38:4b:5c:e0:5b:4f:ca:78: 83:5d:4f:fc:f9:c4:cc:3e:19:7e:6f:60:09:db:8a:e6:b8:9e: bf:2a:1b:d6:11:8d:ad:04:91:5b:2b:09:9e:44:a2:0a:84:cc: 52:a3:87:21:87:b0:af:9a:80:12:b2:fd:93:ec:4e:b4:c3:d1: 8e:87:83:51:67:04:8d:2d:db:0f:6e:b3:c5:1d:02:aa:f4:38: 1c:c2:08:a1:fa:89:d1:87:80:12:5c:14:b9:fc:8d:84:b6:a2: 2b:e1:80:b3:b1:a8:12:bb:32:84:49:24:a9:5f:14:3b:d5:54: 83:10:0f:31:b4:a5:fc:21:72:dc:df:d0:ca:f5:d9:77:99:fb: 0e:45:8c:71:45:dc:34:fc:f8:1d:3e:53:72:c0:82:f9:19:d3: 8f:cd:d9:1d:a6:69:a0:a0:33:ae:b9:2f:2b:24:ef:e4:7d:c0: a2:51:86:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBMUExMTAvBgNVBAUTKEE3RERGMzU1QUI2ODEyMzcwMUE1QkREMTVGNjVCQTk2 NEI1REUwMzUwHhcNMjUxMTA1MDU0NzUzWhcNMjUxMTEyMDU0NzUzWjAYMRYwFAYD VQQDEw02OTBhZTUwYS1iYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDtUk8qZFZ9ciy1W2G68f/EYcEDbTjJBQTj9RflFM2HtwHYltQQ4neM1DSP8 ZC6Iwsev3/nRp2mHPk/j5us6S5Uw6Rhq/HuxqXczlZGkEEKnbYAC43i8Q5etW1aa T+BVfFUP7pzVf8LqBkCaaqB0nwsXQQILUc+UMUakjfLu43kIBhZezehsNJbPl0pB JqaMChGpslxOrwEz/4swHN/CZyAo+1KWUsoi5k+mILu8Yjj6wz5/DiCD/ybNp/gX rN0doucKcv+8EfYMjPtfYEvmXgFPJOTAjaWkRN34kGB/OTFLoeFaCjZShz/tBLjK CPlrvqNw0IfIEYsl/Y+6A9wm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd3x75/ ozetFNJI2Vel2WI1VsqTMB8GA1UdIwQYMBaAFKfd81WraBI3AaW90V9lupZLXeA1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUExQS9DMkY0RUUyMDc0 QTYxMUVGQUU1NDc4M0NDNEY5QUUwMi9wOTN6VmF0b0VqY0JwYjNSWDJXNmxrdGQ0 RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5M3pWYXRvRWpjQnBiM1JYMlc2bGt0ZDREVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUExQS9DMkY0RUUyMDc0QTYxMUVGQUU1NDc4M0NDNEY5QUUwMi9wOTN6VmF0b0Vq Y0JwYjNSWDJXNmxrdGQ0RFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvjYVAqSFGqEui/aW/YhLsM2wZTZjy4hrpAu2WvcUtrYrtaFYMUQty Ha1eCSJDtAgPRcoELpPDX5ritJ7eG+aEwoOu3ST3u2+cTSl8sieDZiUMOEtc4FtP yniDXU/8+cTMPhl+b2AJ24rmuJ6/KhvWEY2tBJFbKwmeRKIKhMxSo4chh7CvmoAS sv2T7E60w9GOh4NRZwSNLdsPbrPFHQKq9Dgcwgih+onRh4ASXBS5/I2EtqIr4YCz sagSuzKESSSpXxQ71VSDEA8xtKX8IXLc39DK9dl3mfsORYxxRdw0/PgdPlNywIL5 GdOPzdkdpmmgoDOuuS8rJO/kfcCiUYaN -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:17 2025 by rpki-client