$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: XI1ycW0NF2e83BrPOpbpgZ+g1ynZDRaBLkFXTWyUog4= Subject key identifier: 10:18:45:64:68:F8:A7:6B:9D:A4:5D:89:5E:CC:DE:F5:32:2A:2C:FF Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 01A7 Signing time: Sun 02 Nov 2025 19:47:18 +0000 Manifest this update: Sun 02 Nov 2025 19:47:17 +0000 Manifest next update: Sun 09 Nov 2025 19:47:17 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: wC08iYRpYTTvCiLv6AeNrf/LZ9Sa5r8sujumIr0geY0=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: iTrEAAlkJw9OclXVQcOsLhF2OGcA/o+GNahTLZ1PRQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Nov 2 19:47:17 2025 GMT Not After : Nov 9 19:47:17 2025 GMT Subject: CN=6907b545-68c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:f7:8f:3f:f2:fd:06:f1:fc:05:88:b3:6f: f6:4d:31:54:ee:ea:74:15:e6:09:b1:fb:35:de:03: 29:4c:eb:fa:8d:7c:6a:38:e8:37:db:af:5e:06:c9: 86:01:f2:d9:d9:45:26:71:36:8b:00:42:51:59:1c: ca:6c:79:29:c0:e7:e5:e0:a8:3e:1f:0b:e0:e2:1d: d5:77:1d:11:8f:82:5b:41:0d:2d:1a:00:e0:a5:58: 3d:dd:4e:9f:f9:07:59:a1:af:47:71:44:d8:2b:f3: b0:21:3b:8a:4d:27:75:d8:9e:fb:4d:83:a4:7f:40: 91:e9:e8:7a:fa:94:cb:3a:4b:4c:df:eb:44:0d:01: fc:94:b4:e5:e0:c7:a1:25:4d:7a:16:71:8a:47:0b: f2:21:bb:0b:59:7c:8b:51:1a:99:06:ea:a0:87:02: 95:8c:3d:02:e6:19:e8:40:a7:c4:79:f6:4a:33:5f: fb:04:fc:a1:11:ab:fd:73:b2:f4:81:b2:a7:9e:f0: 7f:d1:bc:57:c7:ce:96:1a:bd:c2:86:dc:2a:0a:28: 1c:03:cb:81:37:44:82:3e:8f:63:88:8c:ff:a5:81: 7a:14:fc:e3:55:e7:7b:42:78:c3:cf:86:2f:0e:08: e8:d4:87:88:9a:9e:de:98:f5:f3:36:de:76:2a:01: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:18:45:64:68:F8:A7:6B:9D:A4:5D:89:5E:CC:DE:F5:32:2A:2C:FF X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:b7:aa:9c:99:49:d5:ab:88:7e:4b:27:b3:81:d2:40:89: 97:e6:1c:71:79:13:cf:ab:a2:3a:41:91:10:4b:57:c3:ae:d4: 9c:11:f0:8d:51:f5:22:01:98:b3:7f:65:91:f6:30:a5:6f:5c: 8b:84:f3:f7:e8:e5:c6:c7:71:93:d6:a3:ed:19:a8:16:6f:c3: ea:06:56:7d:7d:64:8f:22:f5:5b:1c:34:6f:bf:32:01:8d:f0: ff:f8:71:78:ee:94:d5:52:39:88:00:77:ae:1a:a8:ac:c8:05: 3e:f1:c4:37:62:04:a7:62:2a:f3:4f:80:01:42:ea:40:23:4d: 49:30:50:c4:69:c4:79:31:03:d8:d4:25:06:04:84:7b:75:95: d6:01:6e:40:6c:d3:c3:5c:66:81:37:c9:21:ac:74:7c:0f:65: f1:d4:13:1a:e6:33:48:1e:f8:91:52:32:21:64:b9:21:f9:45: d0:61:fd:49:8b:f1:37:bb:89:93:b1:f3:fd:fe:31:25:62:b1: 51:84:02:db:9a:fe:b4:b7:18:97:b2:5b:c4:dd:88:40:31:ef: f8:44:fc:95:bd:dc:63:24:11:03:85:12:0b:2a:bb:6a:13:34: b3:5d:3c:fa:16:6e:49:36:43:35:ab:38:0a:dc:93:fc:5a:7d: 1f:a7:95:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjUxMTAyMTk0NzE3WhcNMjUxMTA5MTk0NzE3WjAYMRYwFAYD VQQDEw02OTA3YjU0NS02OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6f3jz/y/Qbx/AWIs2/2TTFU7up0FeYJsfs13gMpTOv6jXxqOOg3269eBsmG AfLZ2UUmcTaLAEJRWRzKbHkpwOfl4Kg+Hwvg4h3Vdx0Rj4JbQQ0tGgDgpVg93U6f +QdZoa9HcUTYK/OwITuKTSd12J77TYOkf0CR6eh6+pTLOktM3+tEDQH8lLTl4Meh JU16FnGKRwvyIbsLWXyLURqZBuqghwKVjD0C5hnoQKfEefZKM1/7BPyhEav9c7L0 gbKnnvB/0bxXx86WGr3ChtwqCigcA8uBN0SCPo9jiIz/pYF6FPzjVed7QnjDz4Yv Dgjo1IeImp7emPXzNt52KgGkdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAYRWRo +KdrnaRdiV7M3vUyKiz/MB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7j7eqnJlJ1auIfksns4HSQImX5hxxeRPPq6I6QZEQS1fDrtScEfCN UfUiAZizf2WR9jClb1yLhPP36OXGx3GT1qPtGagWb8PqBlZ9fWSPIvVbHDRvvzIB jfD/+HF47pTVUjmIAHeuGqisyAU+8cQ3YgSnYirzT4ABQupAI01JMFDEacR5MQPY 1CUGBIR7dZXWAW5AbNPDXGaBN8khrHR8D2Xx1BMa5jNIHviRUjIhZLkh+UXQYf1J i/E3u4mTsfP9/jElYrFRhALbmv60txiXslvE3YhAMe/4RPyVvdxjJBEDhRILKrtq EzSzXTz6Fm5JNkM1qzgK3JP8Wn0fp5WM -----END CERTIFICATE-----Generated at Tue Nov 4 14:05:04 2025 by rpki-client