$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft File: 9buuhcb_s2DO1AgNETaiv9Opf9E.mft (raw, json) Hash identifier: WyozHnUi8yDnktKtj4qRCo8OxyzbnnCc+FQz6NQc5fI= Subject key identifier: ED:B6:D1:8B:08:0D:93:84:6F:E5:D1:DF:7A:87:AE:81:B7:48:66:BA Authority key identifier: F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 Certificate issuer: /CN=A91CA5F9/serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft Manifest number: 78 Signing time: Mon 03 Nov 2025 06:50:21 +0000 Manifest this update: Mon 03 Nov 2025 06:50:20 +0000 Manifest next update: Mon 10 Nov 2025 06:50:20 +0000 Files and hashes: 1: 9buuhcb_s2DO1AgNETaiv9Opf9E.crl (hash: obW3Yb27Juc7/sZpULg82+xoKZzndWhIibkL/W/U3no=) 2: 16B651C6048411F094895C27C4F9AE02.roa (hash: OgiLwS+wM43XPTUlA+FtXtKx1I6fbzOSjezQMzWQe7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5F9, serialNumber=F5BBAE85C6FFB360CED4080D1136A2BFD3A97FD1 Validity Not Before: Nov 3 06:50:20 2025 GMT Not After : Nov 10 06:50:20 2025 GMT Subject: CN=690850ad-93ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:41:ef:9b:38:c2:2f:6a:40:01:d0:4c:d3: e2:75:27:67:bd:70:97:34:c6:00:5e:0b:55:48:86: 80:82:ae:c8:df:50:e0:5a:98:a7:17:c9:93:15:36: 79:5d:4c:f5:92:98:f6:43:63:5b:49:da:ca:63:49: 29:a9:9c:e1:96:44:cf:92:39:ae:3c:0f:0a:b9:1e: 54:b8:f2:b9:d4:bb:d6:89:c8:74:74:bb:71:77:67: f0:eb:d1:3d:a0:47:79:4b:f8:d9:f1:ff:11:15:e2: fd:f0:65:a9:0e:4e:55:e0:44:98:32:1f:64:af:02: b3:f1:ad:ed:06:31:1c:0e:02:2d:89:8b:0c:df:a0: 76:9c:25:f4:6f:d8:95:30:f5:81:ed:2f:ab:25:93: 7c:46:e0:ea:71:74:57:28:83:24:4e:d5:7f:a3:d0: 0a:09:e9:96:89:ce:74:fd:b0:44:0d:31:e8:ce:d2: 09:5e:d1:2d:a5:dd:17:5d:7a:d4:74:87:bb:4c:34: 96:63:eb:39:93:c8:b7:10:c4:22:04:f6:2b:54:33: 63:46:f7:96:f8:ee:a3:63:31:5d:e4:b6:fe:fe:cf: 0e:f8:02:00:87:a2:eb:89:da:45:f6:9e:a7:e6:b6: 83:72:8b:b1:f1:98:73:9c:aa:47:be:fa:85:4b:5b: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B6:D1:8B:08:0D:93:84:6F:E5:D1:DF:7A:87:AE:81:B7:48:66:BA X509v3 Authority Key Identifier: keyid:F5:BB:AE:85:C6:FF:B3:60:CE:D4:08:0D:11:36:A2:BF:D3:A9:7F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9buuhcb_s2DO1AgNETaiv9Opf9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5F9/6920C74A048211F08F5A5280C4F9AE02/9buuhcb_s2DO1AgNETaiv9Opf9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:42:ca:23:d4:a3:80:34:65:91:69:67:7a:6a:9d:da:8a:1c: 0e:bf:94:be:7c:eb:c9:0b:f6:f2:99:e6:91:45:7e:04:d3:d6: f5:87:f6:04:44:39:6f:58:e1:1b:cc:95:d6:cc:20:3a:4e:0d: f5:c2:39:e1:b5:0f:a0:cc:26:f3:7b:23:90:3b:40:fb:b1:06: 28:89:ec:6e:45:22:8e:a4:4e:f3:f3:45:44:68:ae:99:a0:db: 04:98:f0:63:49:65:ec:77:f6:94:84:6a:88:0a:50:88:79:7d: 1e:35:48:23:c4:01:a3:5b:3b:b1:29:2d:44:d8:78:2b:df:6e: 27:4c:f5:cf:59:8b:5e:b7:f1:a2:e0:81:ba:d0:c2:0d:91:c3: ff:ed:e0:9e:7f:4e:30:7a:5a:b6:75:70:de:c5:0f:84:82:dd: 91:ba:f5:60:f9:2d:7e:46:c8:7a:db:97:6e:a4:50:a0:a9:df: 56:0c:79:1b:eb:3f:a4:dd:8a:f1:b0:2a:8b:d6:7c:93:78:c4: e3:a6:f9:bc:20:cd:a0:3e:1a:93:94:ae:d0:bc:bc:b3:dd:67: 6d:39:1b:7d:dc:aa:d1:24:2a:f7:1c:15:73:17:84:36:f4:db: 51:e9:a8:cb:3c:a3:29:b1:22:a0:c1:6e:f2:8f:84:1b:34:55: eb:f8:fb:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTVGOTExMC8GA1UEBRMoRjVCQkFFODVDNkZGQjM2MENFRDQwODBEMTEzNkEyQkZE M0E5N0ZEMTAeFw0yNTExMDMwNjUwMjBaFw0yNTExMTAwNjUwMjBaMBgxFjAUBgNV BAMTDTY5MDg1MGFkLTkzYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4SkHvmzjCL2pAAdBM0+J1J2e9cJc0xgBeC1VIhoCCrsjfUOBamKcXyZMVNnld TPWSmPZDY1tJ2spjSSmpnOGWRM+SOa48Dwq5HlS48rnUu9aJyHR0u3F3Z/Dr0T2g R3lL+Nnx/xEV4v3wZakOTlXgRJgyH2SvArPxre0GMRwOAi2JiwzfoHacJfRv2JUw 9YHtL6slk3xG4OpxdFcogyRO1X+j0AoJ6ZaJznT9sEQNMejO0gle0S2l3RddetR0 h7tMNJZj6zmTyLcQxCIE9itUM2NG95b47qNjMV3ktv7+zw74AgCHouuJ2kX2nqfm toNyi7HxmHOcqke++oVLW9qzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7bbRiwgN k4Rv5dHfeoeugbdIZrowHwYDVR0jBBgwFoAU9buuhcb/s2DO1AgNETaiv9Opf9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNUY5LzY5MjBDNzRBMDQ4 MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJETzFBZ05FVGFpdjlPcGY5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJ1dWhjYl9zMkRPMUFnTkVUYWl2OU9wZjlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NUY5LzY5MjBDNzRBMDQ4MjExRjA4RjVBNTI4MEM0RjlBRTAyLzlidXVoY2JfczJE TzFBZ05FVGFpdjlPcGY5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD5CyiPUo4A0ZZFpZ3pqndqKHA6/lL5868kL9vKZ5pFFfgTT1vWH9gRE OW9Y4RvMldbMIDpODfXCOeG1D6DMJvN7I5A7QPuxBiiJ7G5FIo6kTvPzRURorpmg 2wSY8GNJZex39pSEaogKUIh5fR41SCPEAaNbO7EpLUTYeCvfbidM9c9Zi1638aLg gbrQwg2Rw//t4J5/TjB6WrZ1cN7FD4SC3ZG69WD5LX5GyHrbl26kUKCp31YMeRvr P6TdivGwKovWfJN4xOOm+bwgzaA+GpOUrtC8vLPdZ205G33cqtEkKvccFXMXhDb0 21HpqMs8oymxIqDBbvKPhBs0Vev4+w8= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:15 2025 by rpki-client