$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: Y+HbYxz8cPvvl2CLj+/gQ4uaH9wOme/+PLndOcf8Fks= Subject key identifier: 8A:BD:33:3D:88:B0:46:05:C4:52:55:9F:85:E4:FE:E2:52:DD:7E:49 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 042C Signing time: Mon 03 Nov 2025 00:21:46 +0000 Manifest this update: Mon 03 Nov 2025 00:21:46 +0000 Manifest next update: Mon 10 Nov 2025 00:21:46 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: Pgc7/XRn1wIzGlnTbV52SYsM4rSnWGJqyfVeU9IyYFc=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: IBTL0V7J1tBYqG7NDXusQxEwJubmZUah6ZmQZ+9P3Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Nov 3 00:21:46 2025 GMT Not After : Nov 10 00:21:46 2025 GMT Subject: CN=6907f59a-0622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:ad:f4:43:e5:a3:93:c4:03:f3:e9:66:2b: ea:8f:28:78:e1:13:ef:d9:97:e8:90:a5:01:51:66: 7d:81:9f:e5:fc:d7:42:f2:73:7c:66:b6:d1:6a:79: 3d:58:10:7f:dd:f7:ce:64:9d:88:8d:5b:88:be:1b: a2:a0:f8:ba:06:dc:a8:c3:d1:b4:67:22:4e:bf:b9: 9a:ad:2f:7d:21:d1:50:c8:f5:9f:12:31:fb:d4:01: 1f:81:fb:b0:25:36:de:49:db:0d:f4:bb:f0:fb:2d: 15:09:93:60:a5:4f:ad:ec:09:bc:ae:7d:ac:78:bc: 45:9c:1f:bb:c9:01:ff:d8:d6:e2:f7:d6:b2:41:91: 4d:f2:5d:cf:6d:50:d5:1f:1e:ba:0b:ef:8d:34:9e: 47:a5:c1:9b:75:7c:b1:39:93:46:27:a9:a9:e1:9c: bc:1b:02:bc:75:3a:5a:82:6d:5f:43:da:28:7f:be: ac:c7:0f:ff:65:6d:2b:03:de:29:c0:3e:9c:ee:25: 73:e6:4d:ae:79:53:67:57:4e:02:63:41:c2:43:ae: 83:38:ce:19:23:e5:23:88:d8:23:16:a5:41:b9:b6: aa:7f:84:63:45:cf:2f:1b:1a:bc:0c:2a:84:93:23: 7b:4a:d3:8a:25:8f:4c:d7:60:a5:ae:e7:56:da:66: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BD:33:3D:88:B0:46:05:C4:52:55:9F:85:E4:FE:E2:52:DD:7E:49 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:32:2f:98:07:68:a0:a3:56:ae:8b:17:91:94:26:65:5e:01: 4f:d4:ca:e7:1f:75:74:40:be:08:91:cb:6b:73:c2:bb:4e:3c: 7f:88:b2:bd:72:84:62:7a:fe:8c:78:9c:33:ca:c7:ec:be:77: b1:0e:bb:6b:09:76:e1:7c:cf:ef:21:2e:74:a8:fc:59:32:f4: 7d:8e:9f:8e:d5:63:a8:ff:34:2b:69:b2:e6:bb:e3:dd:ec:dd: cc:40:cc:2d:56:a3:8d:a7:7b:aa:cc:99:b6:df:1e:ea:86:83: 57:1a:5a:55:59:f5:df:35:42:c6:d5:79:97:e7:ff:57:29:17: f2:85:05:e7:4f:77:71:75:f3:f9:32:17:df:2e:6c:50:fe:f0: c6:24:05:6a:5c:6a:6b:43:48:fb:51:51:3c:f6:06:a1:b9:fd: 43:2e:52:e2:ae:9f:7e:e0:1f:72:11:ca:84:7f:e6:11:a3:d8: 21:4c:17:16:a7:7b:d4:3b:2d:c2:86:49:28:c7:75:50:86:f5: a5:e4:ae:fb:25:7b:25:0f:32:88:4e:77:1f:51:0a:51:41:37: 1c:57:24:e7:45:b4:f0:35:8c:fa:52:a2:18:7c:92:f2:43:2d: 19:da:71:80:7a:c2:9c:69:8c:3d:34:6d:27:05:8f:a5:1a:b1: e9:24:b7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUxMTAzMDAyMTQ2WhcNMjUxMTEwMDAyMTQ2WjAYMRYwFAYD VQQDEw02OTA3ZjU5YS0wNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApg2t9EPlo5PEA/PpZivqjyh44RPv2ZfokKUBUWZ9gZ/l/NdC8nN8ZrbRank9 WBB/3ffOZJ2IjVuIvhuioPi6Btyow9G0ZyJOv7marS99IdFQyPWfEjH71AEfgfuw JTbeSdsN9Lvw+y0VCZNgpU+t7Am8rn2seLxFnB+7yQH/2Nbi99ayQZFN8l3PbVDV Hx66C++NNJ5HpcGbdXyxOZNGJ6mp4Zy8GwK8dTpagm1fQ9oof76sxw//ZW0rA94p wD6c7iVz5k2ueVNnV04CY0HCQ66DOM4ZI+UjiNgjFqVBubaqf4RjRc8vGxq8DCqE kyN7StOKJY9M12ClrudW2mYMCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq9Mz2I sEYFxFJVn4Xk/uJS3X5JMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNMi+YB2igo1auixeRlCZlXgFP1MrnH3V0QL4Ikctrc8K7Tjx/iLK9 coRiev6MeJwzysfsvnexDrtrCXbhfM/vIS50qPxZMvR9jp+O1WOo/zQrabLmu+Pd 7N3MQMwtVqONp3uqzJm23x7qhoNXGlpVWfXfNULG1XmX5/9XKRfyhQXnT3dxdfP5 MhffLmxQ/vDGJAVqXGprQ0j7UVE89gahuf1DLlLirp9+4B9yEcqEf+YRo9ghTBcW p3vUOy3Chkkox3VQhvWl5K77JXslDzKITncfUQpRQTccVyTnRbTwNYz6UqIYfJLy Qy0Z2nGAesKcaYw9NG0nBY+lGrHpJLeZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:11 2025 by rpki-client