$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: XsHbOaWLqNd4ISp4/D6gB6a+FukfTf2sdO4EDsziBIg= Subject key identifier: 44:64:66:10:AC:86:D9:82:A6:58:8A:20:81:DE:3B:65:4D:7B:45:A0 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 080C Signing time: Sun 02 Nov 2025 20:55:40 +0000 Manifest this update: Sun 02 Nov 2025 20:55:40 +0000 Manifest next update: Sun 09 Nov 2025 20:55:40 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: 7NGM6uih+LPSg/BTDHB5uyGAmO90Jszo886wQRObnBw=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: qFL74VsWk0alCoqYasNXx5dBtFR40fQNiPpQ09RmOwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Nov 2 20:55:40 2025 GMT Not After : Nov 9 20:55:40 2025 GMT Subject: CN=6907c54c-5aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:a8:15:14:6f:fc:a3:d7:34:ef:39:ff:8f: b1:79:a9:97:6b:a7:cd:fb:ae:22:35:75:b3:8c:73: b3:4f:ea:3f:51:17:dc:3f:9e:4b:83:3f:48:bc:f0: 4e:8c:e1:76:d4:27:eb:b5:8d:5e:65:6d:fa:e5:55: 23:6d:ab:ec:4f:df:32:0c:48:31:3e:60:8b:42:17: f6:9b:7a:9a:17:11:e3:5c:a9:d5:1a:5c:34:9d:cf: da:e5:f6:a5:7b:52:fe:01:f7:0e:55:9c:00:36:81: 36:58:b1:52:c4:f5:59:01:fe:70:0b:58:8d:53:3a: a2:05:5d:6f:ec:0a:89:8c:47:e5:ca:32:18:53:fc: 65:0b:d2:3f:1e:86:ea:68:69:6d:56:80:58:55:52: 7a:e1:a2:70:c0:54:d3:6b:2f:01:a7:4d:46:9b:86: db:7a:3b:80:c4:d1:c3:15:24:d9:ad:bd:0f:b0:09: 98:56:9e:d9:68:e3:38:36:9c:ee:c1:35:1a:90:a4: f2:18:e0:b5:f3:5b:80:5b:99:48:20:b5:c1:51:0b: e4:61:44:af:d8:21:2b:39:b6:2e:69:02:dd:e2:c7: 3f:80:c1:37:ca:4a:91:b1:8a:0b:28:cb:29:1b:a2: d2:9e:e2:ce:bd:49:b5:00:96:09:91:ba:18:1b:1e: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:64:66:10:AC:86:D9:82:A6:58:8A:20:81:DE:3B:65:4D:7B:45:A0 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2e:18:24:bd:39:da:d3:5d:c4:99:14:81:72:25:60:77:2d: 11:f2:96:e1:b3:db:9d:77:e1:d0:bf:ab:a6:c7:33:66:92:1a: be:76:ad:d8:93:6f:6f:69:23:09:5e:85:2d:30:f5:53:aa:6f: ee:4a:50:85:d6:da:b7:06:db:15:35:37:39:4b:d2:9f:56:e4: 88:a6:12:86:66:33:ab:f2:d6:79:4d:2d:91:29:43:63:7f:f0: 8e:16:e9:69:67:31:08:c8:cd:06:c1:c8:06:ec:c2:21:36:b2: 5f:de:f5:6b:89:34:d2:c3:b7:18:96:70:f8:87:29:fd:fc:60: f0:7e:43:a1:2e:7b:68:78:76:c1:b3:c3:c4:e4:88:4b:df:f8: 94:62:b3:5c:ba:d5:35:c4:ac:11:08:17:e5:85:33:ad:25:be: 7a:08:ae:ee:6c:1e:9f:dd:96:11:4f:4a:22:e4:ca:8d:bb:ec: 3d:54:4b:f5:ff:01:7d:cf:35:7c:bc:fe:c0:b3:e0:47:2f:a6: 42:bd:c3:f3:78:b4:31:02:0b:1d:b2:95:f2:2d:76:fc:d2:e3: 71:2e:6e:66:54:40:b5:44:c4:69:ee:d7:3f:ca:8e:7d:44:eb: 19:c6:28:a3:d9:1c:58:44:90:f1:cd:b6:22:aa:11:3a:9b:dd: 60:fd:a7:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUxMTAyMjA1NTQwWhcNMjUxMTA5MjA1NTQwWjAYMRYwFAYD VQQDEw02OTA3YzU0Yy01YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwqoFRRv/KPXNO85/4+xeamXa6fN+64iNXWzjHOzT+o/URfcP55Lgz9IvPBO jOF21CfrtY1eZW365VUjbavsT98yDEgxPmCLQhf2m3qaFxHjXKnVGlw0nc/a5fal e1L+AfcOVZwANoE2WLFSxPVZAf5wC1iNUzqiBV1v7AqJjEflyjIYU/xlC9I/Hobq aGltVoBYVVJ64aJwwFTTay8Bp01Gm4bbejuAxNHDFSTZrb0PsAmYVp7ZaOM4Npzu wTUakKTyGOC181uAW5lIILXBUQvkYUSv2CErObYuaQLd4sc/gME3ykqRsYoLKMsp G6LSnuLOvUm1AJYJkboYGx5A9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERkZhCs htmCpliKIIHeO2VNe0WgMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOLhgkvTna013EmRSBciVgdy0R8pbhs9udd+HQv6umxzNmkhq+dq3Y k29vaSMJXoUtMPVTqm/uSlCF1tq3BtsVNTc5S9KfVuSIphKGZjOr8tZ5TS2RKUNj f/COFulpZzEIyM0GwcgG7MIhNrJf3vVriTTSw7cYlnD4hyn9/GDwfkOhLntoeHbB s8PE5IhL3/iUYrNcutU1xKwRCBflhTOtJb56CK7ubB6f3ZYRT0oi5MqNu+w9VEv1 /wF9zzV8vP7As+BHL6ZCvcPzeLQxAgsdspXyLXb80uNxLm5mVEC1RMRp7tc/yo59 ROsZxiij2RxYRJDxzbYiqhE6m91g/aep -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:03 2025 by rpki-client