$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: wj/nWSysMEKJdxHjD+KhyCC7Sq+3oB9bqG+G7vHY57E= Subject key identifier: 48:04:ED:DE:59:38:FE:92:A8:96:18:5A:B1:26:B5:2F:C2:07:BE:E4 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01F9 Signing time: Wed 05 Nov 2025 02:33:29 +0000 Manifest this update: Wed 05 Nov 2025 02:33:29 +0000 Manifest next update: Wed 12 Nov 2025 02:33:29 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: XMYA1/UDufbPX7/HoMXJGuWtbUZHjoHb+Vv/i+DiWX0=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Nov 5 02:33:29 2025 GMT Not After : Nov 12 02:33:29 2025 GMT Subject: CN=690ab779-8e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:f6:c6:3f:61:6c:4c:ec:90:da:c9:1c:9d: 11:c2:e2:37:fb:3a:3e:fa:f3:9c:e6:7a:e5:ac:a5: 0c:a6:11:82:0c:2e:77:90:5b:44:1f:59:63:f5:b5: 75:82:d6:0c:9a:4a:2a:87:12:05:91:07:2d:e9:54: 94:2f:53:b0:04:6e:70:5f:7b:88:61:f7:6e:a0:84: d0:08:1b:53:44:3f:f8:c1:10:1e:a8:8d:23:af:23: 3c:38:8f:38:45:87:86:f1:1e:9f:98:31:95:f1:fb: 62:75:75:ef:89:5a:98:8a:67:cd:46:87:94:a7:b5: 45:b0:a6:60:ee:37:56:e6:58:53:8d:44:ab:c9:9d: 15:51:62:b5:5c:dc:eb:ed:63:b5:0c:8f:b2:27:8f: 65:29:e0:00:cf:08:7d:1d:3f:cd:1e:7c:8a:50:72: b5:60:96:f7:14:38:3d:7a:21:98:6b:63:e8:3c:bb: 44:fe:14:28:cd:4f:8e:78:1e:d0:75:a9:a3:b2:e3: 66:12:e4:d7:a3:76:3d:a3:8e:84:20:08:24:7d:52: c4:d6:3a:37:84:53:94:68:4a:1e:5f:40:04:33:cd: 34:ee:08:b8:dd:65:13:89:a6:2d:66:b3:0e:fd:e2: 33:db:f3:a3:81:4b:1c:f8:c2:4e:53:06:8f:a2:bf: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:04:ED:DE:59:38:FE:92:A8:96:18:5A:B1:26:B5:2F:C2:07:BE:E4 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d0:3e:57:92:e2:b3:6f:ae:29:b6:c8:83:3c:72:c0:c9:b6: 60:7e:97:06:19:cc:d3:7d:5b:92:a9:a9:1f:3e:f3:25:27:6b: 10:cc:0a:2d:a3:c0:63:c4:ed:0a:45:98:df:a1:45:9a:98:3f: 12:c0:c5:39:63:1f:65:60:84:91:50:1d:d0:e1:fc:1e:32:97: 7c:43:c5:31:ed:05:d1:c0:f1:3f:57:47:08:fb:72:f6:03:3d: 7e:c0:1b:d2:9c:83:94:d8:35:02:30:99:91:b2:2d:20:06:e1: 38:45:3c:f2:d3:70:f1:1a:bd:13:fe:99:16:f1:6c:42:e8:fd: 77:f6:ff:a8:96:49:f0:95:f2:fe:52:f3:0e:38:e2:40:42:30: 98:ca:90:3d:4a:c1:60:43:8e:73:f0:8e:bf:00:54:07:95:a8: e4:4f:06:f7:02:80:39:db:ed:fe:34:af:b6:2b:13:6a:87:84: 8d:25:34:ea:3d:da:cd:81:96:61:82:25:db:62:83:14:57:7b: 48:74:d5:b9:1c:e7:b1:2a:9c:eb:9a:07:fd:6d:27:12:60:b5: f1:cf:d1:c4:f9:98:1f:34:b3:02:78:79:70:6d:fa:9a:f8:91: 87:ee:d0:66:97:c2:b0:b5:91:1e:ba:79:4d:51:4e:8f:b1:d0: 58:86:51:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUxMTA1MDIzMzI5WhcNMjUxMTEyMDIzMzI5WjAYMRYwFAYD VQQDEw02OTBhYjc3OS04ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ72xj9hbEzskNrJHJ0RwuI3+zo++vOc5nrlrKUMphGCDC53kFtEH1lj9bV1 gtYMmkoqhxIFkQct6VSUL1OwBG5wX3uIYfduoITQCBtTRD/4wRAeqI0jryM8OI84 RYeG8R6fmDGV8ftidXXviVqYimfNRoeUp7VFsKZg7jdW5lhTjUSryZ0VUWK1XNzr 7WO1DI+yJ49lKeAAzwh9HT/NHnyKUHK1YJb3FDg9eiGYa2PoPLtE/hQozU+OeB7Q damjsuNmEuTXo3Y9o46EIAgkfVLE1jo3hFOUaEoeX0AEM8007gi43WUTiaYtZrMO /eIz2/OjgUsc+MJOUwaPor+/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgE7d5Z OP6SqJYYWrEmtS/CB77kMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/0D5XkuKzb64ptsiDPHLAybZgfpcGGczTfVuSqakfPvMlJ2sQzAot o8BjxO0KRZjfoUWamD8SwMU5Yx9lYISRUB3Q4fweMpd8Q8Ux7QXRwPE/V0cI+3L2 Az1+wBvSnIOU2DUCMJmRsi0gBuE4RTzy03DxGr0T/pkW8WxC6P139v+olknwlfL+ UvMOOOJAQjCYypA9SsFgQ45z8I6/AFQHlajkTwb3AoA52+3+NK+2KxNqh4SNJTTq PdrNgZZhgiXbYoMUV3tIdNW5HOexKpzrmgf9bScSYLXxz9HE+ZgfNLMCeHlwbfqa +JGH7tBml8KwtZEeunlNUU6PsdBYhlGC -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:03 2025 by rpki-client