$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: 66MobBkTd7zerkTGpVHoMj4cX9+ZBaHBiiaPKCPVEkA= Subject key identifier: 24:8D:65:B2:81:7F:A8:A0:D9:5B:FD:15:BE:EE:20:9E:4D:65:E5:58 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 23AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 238F Signing time: Tue 04 Nov 2025 15:54:10 +0000 Manifest this update: Tue 04 Nov 2025 15:54:09 +0000 Manifest next update: Tue 11 Nov 2025 15:54:09 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: FgwgCpOxaaRFnOrTB0qitkig7DEsd8NAiMtG+EQsQGI=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: yQ+XYCupRjpKC1z+KmqRpy0/MHYgLpl3GjcGFImbs1s=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: c0fUfF2O4q3/3ooNrYKlqBAmFHkp10eQdlPnj3yP614=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9131 (0x23ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Nov 4 15:54:09 2025 GMT Not After : Nov 11 15:54:09 2025 GMT Subject: CN=690a21a1-fbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:7e:be:d4:b8:d2:63:96:b7:6c:99:28:8a: f5:ae:c6:08:85:98:df:74:fc:e1:f5:d3:ce:d1:b5: ca:f4:e9:26:21:0e:59:78:cd:13:21:f9:a9:a1:28: 2f:4a:5f:a7:c1:c4:4c:1a:5f:44:11:c1:c5:18:34: 0c:0b:4a:27:b8:76:80:98:fe:2f:6b:64:c5:f1:7a: d9:0a:7a:b0:81:c1:62:cb:2b:21:3c:ec:19:74:12: e3:de:11:3b:c8:26:d9:05:4d:2c:91:11:84:9c:7a: f4:31:bd:62:58:9c:9d:89:09:90:dc:57:52:ad:88: 5f:e6:c4:54:87:18:bf:fd:bf:7f:4f:f9:0e:4d:f0: 1f:f1:c4:35:21:c7:2d:ce:35:c4:ca:75:fd:70:97: 49:9e:ea:bf:23:9d:cf:47:04:d2:f2:35:8d:29:9c: 3e:96:5d:b0:c6:65:b0:1d:14:8b:dd:84:d3:c2:6d: f6:93:55:b3:a3:58:59:d2:cd:a2:cf:19:d2:a2:40: 65:3f:19:78:14:0f:bb:a9:ae:a6:a9:9d:47:52:a4: 12:92:64:eb:d2:42:66:37:3e:0a:20:93:c9:0e:6a: 34:50:43:df:ae:dc:14:2d:23:cd:b2:7d:6a:04:98: 14:7c:d1:63:71:cc:6d:4e:1f:df:a7:43:1b:d4:89: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8D:65:B2:81:7F:A8:A0:D9:5B:FD:15:BE:EE:20:9E:4D:65:E5:58 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:82:e6:2f:23:2b:aa:81:0a:88:e0:4f:b2:49:90:7f:15:38: 1a:c1:b9:31:6b:41:23:8c:d3:04:40:95:da:40:87:a6:ba:35: 91:41:d0:85:ab:1f:98:a5:9f:78:e5:ee:f5:fd:58:d5:13:7b: d6:2e:35:d7:da:78:fd:9a:ba:ed:40:86:b9:27:95:0e:17:2e: ef:2e:34:3c:d7:dd:ba:1f:81:07:c1:3f:51:41:e8:80:a4:20: 5a:6f:b6:d9:c0:b0:2b:f7:83:9a:bf:ad:67:7e:d3:c7:13:bf: b7:c2:a9:c5:c5:c1:38:f1:be:02:3d:8d:ed:c3:fe:77:81:75: a5:54:da:01:7e:2c:83:de:cb:c7:6e:27:08:a6:74:b4:c2:41: f6:b5:e5:20:38:dd:49:05:2f:0b:8a:6a:72:c7:40:7f:22:4d: c1:2d:0b:db:f4:b1:fd:40:81:06:35:77:35:2b:9d:ad:1d:dd: ed:56:92:68:6e:ef:86:7f:80:07:e0:97:34:0a:3b:79:06:0e: 66:51:8e:9f:bc:1d:d6:e5:91:f1:1a:dd:54:6c:bf:6f:07:67: cf:84:12:c4:11:7c:b3:6a:6c:3b:0a:61:a6:3b:f9:09:48:b6: 6f:a8:11:b2:a1:35:98:d8:c6:66:04:47:f2:93:d0:58:bb:b2: de:b6:40:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUxMTA0MTU1NDA5WhcNMjUxMTExMTU1NDA5WjAYMRYwFAYD VQQDEw02OTBhMjFhMS1mYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1N+vtS40mOWt2yZKIr1rsYIhZjfdPzh9dPO0bXK9OkmIQ5ZeM0TIfmpoSgv Sl+nwcRMGl9EEcHFGDQMC0onuHaAmP4va2TF8XrZCnqwgcFiyyshPOwZdBLj3hE7 yCbZBU0skRGEnHr0Mb1iWJydiQmQ3FdSrYhf5sRUhxi//b9/T/kOTfAf8cQ1Icct zjXEynX9cJdJnuq/I53PRwTS8jWNKZw+ll2wxmWwHRSL3YTTwm32k1Wzo1hZ0s2i zxnSokBlPxl4FA+7qa6mqZ1HUqQSkmTr0kJmNz4KIJPJDmo0UEPfrtwULSPNsn1q BJgUfNFjccxtTh/fp0Mb1InenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSNZbKB f6ig2Vv9Fb7uIJ5NZeVYMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWguYvIyuqgQqI4E+ySZB/FTgawbkxa0EjjNMEQJXaQIemujWRQdCF qx+YpZ945e71/VjVE3vWLjXX2nj9mrrtQIa5J5UOFy7vLjQ81926H4EHwT9RQeiA pCBab7bZwLAr94Oav61nftPHE7+3wqnFxcE48b4CPY3tw/53gXWlVNoBfiyD3svH bicIpnS0wkH2teUgON1JBS8Limpyx0B/Ik3BLQvb9LH9QIEGNXc1K52tHd3tVpJo bu+Gf4AH4Jc0Cjt5Bg5mUY6fvB3W5ZHxGt1UbL9vB2fPhBLEEXyzamw7CmGmO/kJ SLZvqBGyoTWY2MZmBEfyk9BYu7LetkBr -----END CERTIFICATE-----Generated at Wed Nov 5 00:26:11 2025 by rpki-client