$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: wM92c3y2bMEOkxY/5rCMZKvmd5mtcq3fr5ChtUHBiSU= Subject key identifier: 02:4F:3E:9B:0C:3A:B5:05:3E:07:76:70:92:1A:2A:21:43:DF:66:62 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 0207 Signing time: Wed 05 Nov 2025 02:28:57 +0000 Manifest this update: Wed 05 Nov 2025 02:28:57 +0000 Manifest next update: Wed 12 Nov 2025 02:28:57 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: G/q9EcTIfGKUkOnipQoCABz3j2jBYU3E2nPG3dyIzX4=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Nov 5 02:28:57 2025 GMT Not After : Nov 12 02:28:57 2025 GMT Subject: CN=690ab669-fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:60:e4:60:23:4e:22:00:53:82:af:c5:4b: 7e:94:0e:24:52:bb:03:bc:21:c1:b4:00:3b:b5:33: ae:b8:28:22:53:78:c9:18:c4:a5:25:f0:8a:7b:13: 59:6b:f4:cc:ee:c1:3e:8d:4e:82:60:85:bb:7c:31: ed:fe:cc:e5:81:ea:9b:b8:0f:4e:e9:da:e7:d5:18: c5:00:a9:9a:3b:71:54:d2:e2:fb:5e:2a:b3:11:1f: 2f:98:ad:0c:34:7f:06:44:13:64:11:e7:3b:c7:bc: 47:05:49:f8:97:d2:8f:c8:93:4c:90:54:f0:f8:a3: ce:01:12:9d:35:01:64:bd:8b:6a:ed:30:9e:16:ff: 83:84:8e:d3:25:f6:e4:8d:65:d5:23:fd:c7:d7:5a: 47:e2:28:8c:c0:d1:4c:d2:87:73:7b:9f:28:fb:b6: fe:b0:29:5c:5d:04:50:46:1f:85:9f:95:56:45:5c: 0b:e6:cd:65:c4:0f:c4:50:a6:e4:d7:dc:6c:77:1f: 41:1c:54:7e:ce:68:a2:fa:73:4b:d9:cc:ae:c9:4c: d2:f0:51:e5:7b:86:46:56:49:fa:7c:bb:35:ec:48: 9c:7e:c3:83:b1:2c:a0:95:c2:4f:36:7d:b8:0e:48: cf:d4:7e:32:23:bf:8f:0f:46:a4:53:2c:f6:b6:41: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:3E:9B:0C:3A:B5:05:3E:07:76:70:92:1A:2A:21:43:DF:66:62 X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c3:bf:e0:65:c4:ba:82:28:5a:45:9e:e7:75:ee:2a:8c:a7: 5d:b0:35:a8:4a:d7:a8:86:69:ad:34:32:8f:b8:e5:89:04:b5: 4b:c1:bb:97:c5:8f:6e:cd:54:e4:3d:1a:21:06:c7:3d:1d:e6: c8:fc:cf:eb:4f:09:bb:24:2e:41:5f:7c:03:53:4b:a5:0e:f3: 95:d0:10:0d:42:c1:cf:ac:7e:b8:91:95:e1:44:b8:65:4a:14: 3b:76:ca:3f:56:73:cb:95:ac:83:18:bf:fa:f0:d7:16:cc:35: 28:3e:8b:70:ca:69:f9:e7:94:61:ab:6d:0c:d3:b4:cf:9f:da: 4e:d4:fd:ca:69:ca:91:61:57:65:d5:25:3b:16:dd:1f:75:3d: 7e:00:f8:b1:42:76:d3:20:ee:23:e1:f5:73:27:d2:28:12:b4: 5c:1d:f5:3c:fd:69:cc:f2:fe:77:8c:68:02:f4:63:0a:32:1c: ce:67:8b:99:85:f4:3e:c2:69:01:6a:90:76:7a:2c:c5:6b:6e: ac:40:04:29:00:30:07:73:33:68:cd:98:37:93:f5:4c:5a:5e: 0c:ee:75:b2:c3:ce:67:24:a8:db:07:62:30:6d:da:dc:d8:7f: 8c:04:6b:a2:22:77:5f:9d:96:a1:fb:f1:12:54:06:44:9b:e3: e5:25:0b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUxMTA1MDIyODU3WhcNMjUxMTEyMDIyODU3WjAYMRYwFAYD VQQDEw02OTBhYjY2OS1mYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVdg5GAjTiIAU4KvxUt+lA4kUrsDvCHBtAA7tTOuuCgiU3jJGMSlJfCKexNZ a/TM7sE+jU6CYIW7fDHt/szlgeqbuA9O6drn1RjFAKmaO3FU0uL7XiqzER8vmK0M NH8GRBNkEec7x7xHBUn4l9KPyJNMkFTw+KPOARKdNQFkvYtq7TCeFv+DhI7TJfbk jWXVI/3H11pH4iiMwNFM0odze58o+7b+sClcXQRQRh+Fn5VWRVwL5s1lxA/EUKbk 19xsdx9BHFR+zmii+nNL2cyuyUzS8FHle4ZGVkn6fLs17EicfsODsSyglcJPNn24 DkjP1H4yI7+PD0akUyz2tkEoUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJPPpsM OrUFPgd2cJIaKiFD32ZiMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCew7/gZcS6gihaRZ7nde4qjKddsDWoSteohmmtNDKPuOWJBLVLwbuX xY9uzVTkPRohBsc9HebI/M/rTwm7JC5BX3wDU0ulDvOV0BANQsHPrH64kZXhRLhl ShQ7dso/VnPLlayDGL/68NcWzDUoPotwymn555Rhq20M07TPn9pO1P3KacqRYVdl 1SU7Ft0fdT1+APixQnbTIO4j4fVzJ9IoErRcHfU8/WnM8v53jGgC9GMKMhzOZ4uZ hfQ+wmkBapB2eizFa26sQAQpADAHczNozZg3k/VMWl4M7nWyw85nJKjbB2Iwbdrc 2H+MBGuiIndfnZah+/ESVAZEm+PlJQte -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:04 2025 by rpki-client