$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: zo2TPl5WqUopMXMHPaLyxbMZdyQGzE12F5SrhJLhPCs= Subject key identifier: B3:3B:F5:BE:EB:5C:EC:3D:7A:75:6D:94:1E:50:11:0A:8C:B3:56:AB Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 1078 Signing time: Tue 04 Nov 2025 17:43:46 +0000 Manifest this update: Tue 04 Nov 2025 17:43:46 +0000 Manifest next update: Tue 11 Nov 2025 17:43:46 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: p86lSuhpuiH1GZSmNLJMFv+6UHVISzSriKlix50Z8lM=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: MZyOtnzSYRn5H5siK78kl2QRZxsNV35INBP6UfbHk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Nov 4 17:43:46 2025 GMT Not After : Nov 11 17:43:46 2025 GMT Subject: CN=690a3b52-6c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:9e:d1:28:e1:9c:08:42:fb:7c:94:43:25: 26:8b:1e:37:2c:28:81:b5:55:4a:f0:8d:50:e0:7e: ca:25:1f:4a:2a:fb:a6:66:83:6f:8b:7f:9f:a3:ce: 19:08:c7:1a:1e:e5:42:16:51:32:5c:77:22:04:79: f9:53:6c:dc:4d:3a:da:49:5e:50:7d:22:db:76:16: 0a:ce:39:40:c2:d6:f7:48:3e:d5:5c:4a:d2:e7:ce: 35:7a:27:d5:51:f6:1d:92:35:de:03:9d:8b:d2:b6: 4d:e2:f8:c1:a5:ed:53:30:2b:6c:7e:88:dd:5c:13: 92:2a:a9:18:b8:c2:a7:cd:76:9e:37:80:a8:86:48: 2b:63:e6:c6:6b:91:75:70:ca:0c:85:11:86:3d:dd: ba:4c:49:23:3a:2c:ea:91:fb:cd:26:69:65:99:94: 6e:d5:91:aa:a5:88:9d:a1:61:77:fb:13:73:26:d5: a0:a9:d9:32:ae:48:3d:9e:14:c9:d1:ed:51:20:0d: 90:01:d5:5c:33:f2:46:04:19:23:9d:01:8c:42:b6: e7:ab:ad:94:8f:8a:f1:99:eb:31:ad:cd:56:18:f9: f3:9b:27:1a:ad:59:9e:05:4f:91:62:04:a8:c2:30: b1:7a:2e:cd:79:12:6b:44:2a:c2:54:67:26:e4:52: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:F5:BE:EB:5C:EC:3D:7A:75:6D:94:1E:50:11:0A:8C:B3:56:AB X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7c:06:a6:77:8b:ad:2e:f0:97:7a:30:3d:bb:fc:39:35:82: 5e:dc:9d:33:c6:fc:83:8a:7f:6b:90:82:59:d2:8f:f3:45:34: 1f:eb:e5:34:63:64:eb:68:65:df:a3:b7:18:c8:40:33:41:72: 43:8d:ea:6c:5a:c9:e0:a8:9b:38:bd:0f:27:ff:09:d5:ac:60: 97:b2:4b:84:be:10:a3:74:b1:37:92:9e:09:4e:20:cb:8b:05: d8:09:d9:19:1c:31:5f:6e:5c:79:cb:61:ce:a1:1d:55:95:97: 82:bb:45:57:bd:c4:f6:30:15:c3:a7:b5:c9:a0:54:ad:38:fd: 46:88:26:db:e9:e3:64:f0:4f:1b:3e:13:fa:8b:89:25:81:ed: 0b:44:6a:9b:da:fa:11:13:2b:2e:b7:97:22:b4:92:d6:44:fc: 60:f5:43:c3:81:08:57:ed:28:f5:b0:12:87:df:1a:4e:72:34: e6:60:dd:4a:ba:20:ed:9d:1d:79:c1:a1:97:8e:cb:b6:f5:dc: 57:5b:56:10:7b:4f:29:db:e4:69:25:ca:2a:9b:bd:c6:e7:a8: a4:32:98:18:32:8d:5e:84:59:44:7d:b0:de:e5:b9:b2:da:db: 97:61:43:52:87:ad:8d:40:bd:cd:f7:14:70:19:80:e1:83:55: 53:fa:7e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUxMTA0MTc0MzQ2WhcNMjUxMTExMTc0MzQ2WjAYMRYwFAYD VQQDEw02OTBhM2I1Mi02YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtqe0SjhnAhC+3yUQyUmix43LCiBtVVK8I1Q4H7KJR9KKvumZoNvi3+fo84Z CMcaHuVCFlEyXHciBHn5U2zcTTraSV5QfSLbdhYKzjlAwtb3SD7VXErS5841eifV UfYdkjXeA52L0rZN4vjBpe1TMCtsfojdXBOSKqkYuMKnzXaeN4CohkgrY+bGa5F1 cMoMhRGGPd26TEkjOizqkfvNJmllmZRu1ZGqpYidoWF3+xNzJtWgqdkyrkg9nhTJ 0e1RIA2QAdVcM/JGBBkjnQGMQrbnq62Uj4rxmesxrc1WGPnzmycarVmeBU+RYgSo wjCxei7NeRJrRCrCVGcm5FIKVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM79b7r XOw9enVtlB5QEQqMs1arMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+fAamd4utLvCXejA9u/w5NYJe3J0zxvyDin9rkIJZ0o/zRTQf6+U0 Y2TraGXfo7cYyEAzQXJDjepsWsngqJs4vQ8n/wnVrGCXskuEvhCjdLE3kp4JTiDL iwXYCdkZHDFfblx5y2HOoR1VlZeCu0VXvcT2MBXDp7XJoFStOP1GiCbb6eNk8E8b PhP6i4klge0LRGqb2voREysut5citJLWRPxg9UPDgQhX7Sj1sBKH3xpOcjTmYN1K uiDtnR15waGXjsu29dxXW1YQe08p2+RpJcoqm73G56ikMpgYMo1ehFlEfbDe5bmy 2tuXYUNSh62NQL3N9xRwGYDhg1VT+n6p -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:22 2025 by rpki-client