$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json) Hash identifier: Zj2KXqWl9irtpjZqd9Nt7H+Y9OgYLjokMuT8CPnG4/c= Subject key identifier: A0:1F:C1:11:93:81:26:EE:E8:B1:7F:3A:0C:AC:76:CE:EF:95:F4:1C Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft Manifest number: 05 Signing time: Mon 03 Nov 2025 08:04:39 +0000 Manifest this update: Mon 03 Nov 2025 08:04:38 +0000 Manifest next update: Mon 10 Nov 2025 08:04:38 +0000 Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: wkmzwvMQluX2GZex4mQ2mm3gipxVBiUcT2MJHiSvcU0=) 2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: 932+p/N8opzxpPITepf2FdyN7nkZI69DULFumgScCQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Validity Not Before: Nov 3 08:04:38 2025 GMT Not After : Nov 10 08:04:38 2025 GMT Subject: CN=69086216-cc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:3e:4e:d4:8d:b0:30:78:be:96:09:56:f3: 34:c1:1f:09:dd:fd:91:9b:6a:89:63:39:ec:14:10: 10:f1:8f:8e:5f:7d:35:47:b1:65:2d:4a:dd:bf:50: 5e:20:c7:e9:24:53:71:5b:f5:4e:f5:9c:2b:e5:db: 7c:6b:48:92:cc:ff:08:18:27:5a:d3:01:ea:52:93: 14:d6:27:49:c1:83:82:83:24:e8:ff:24:0e:d7:a1: b3:e2:95:48:54:72:aa:0f:95:34:fb:b0:e3:6b:2c: 06:18:4f:d4:10:be:73:4e:f9:95:aa:ff:4a:4b:30: 56:f7:c7:be:59:c2:23:82:8b:82:5d:9f:9b:b3:2f: d6:ef:ba:c0:6b:de:f2:79:00:f8:e1:45:c5:53:60: c5:be:7b:8c:d9:92:1b:34:95:f0:b7:ad:1d:6d:1a: 28:4b:b0:0b:c1:13:78:00:df:b1:85:16:fa:32:d2: dc:96:d2:d9:6a:a4:65:b3:d5:11:5b:d2:e2:a7:e3: 33:b3:af:9c:17:ad:e0:0e:25:67:8d:8a:bd:22:a4: 40:63:40:7d:57:82:97:01:4f:b1:f5:2b:2d:28:c4: 24:20:56:e5:0a:8c:6f:dc:43:7f:90:4e:e7:b3:24: 3f:e9:be:c3:92:28:4b:e2:32:9c:65:5d:0a:66:1e: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1F:C1:11:93:81:26:EE:E8:B1:7F:3A:0C:AC:76:CE:EF:95:F4:1C X509v3 Authority Key Identifier: keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7b:3c:1f:99:d4:92:e9:89:62:12:d0:46:db:a3:d5:40:13: ef:a8:2a:71:f7:a5:64:7e:95:13:7e:7a:f2:d2:9e:a0:c9:46: 29:78:04:2e:a5:24:bb:97:a9:55:1a:fe:2d:bb:c5:78:21:3b: a0:4e:f7:79:53:ad:40:20:cb:09:32:e2:18:13:e1:5f:dc:d5: 0f:b5:2b:de:50:b8:19:38:80:6a:d1:21:b5:13:cb:14:e8:90: a2:42:db:e3:a8:71:bb:f6:df:85:34:36:6d:50:5f:92:49:06: 08:66:b1:b4:70:79:3d:8e:71:82:22:e8:8a:a3:70:bf:8f:b1: 0c:3d:83:02:80:ac:7b:80:2d:82:d3:0b:85:58:b6:03:7e:fb: 47:34:fb:a9:73:cf:ad:85:93:cc:b7:3a:09:2e:f5:a8:fa:f8: ec:b1:34:93:e0:45:79:3a:0c:21:27:b6:c5:17:71:53:4c:5d: 89:4a:09:9e:b2:13:f4:99:7b:f5:89:87:e1:8a:5d:5e:b1:ec: 2a:aa:6c:e1:97:47:c4:05:6f:29:a3:ce:59:8a:a3:41:dd:a3: 16:24:2a:cf:6a:fd:ee:35:5c:55:28:25:f1:dc:24:63:d4:5b: e2:fe:e6:86:7b:c9:65:79:01:ec:8e:0f:70:43:f1:65:67:d9: bb:aa:c3:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIxODExMC8GA1UEBRMoRjdFRjNDODc0Mjk1QjgxRkExMEYxNDBGRUI1NUJDOUM1 Q0VERjlEOTAeFw0yNTExMDMwODA0MzhaFw0yNTExMTAwODA0MzhaMBgxFjAUBgNV BAMTDTY5MDg2MjE2LWNjNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3IT5O1I2wMHi+lglW8zTBHwnd/ZGbaoljOewUEBDxj45ffTVHsWUtSt2/UF4g x+kkU3Fb9U71nCvl23xrSJLM/wgYJ1rTAepSkxTWJ0nBg4KDJOj/JA7XobPilUhU cqoPlTT7sONrLAYYT9QQvnNO+ZWq/0pLMFb3x75ZwiOCi4Jdn5uzL9bvusBr3vJ5 APjhRcVTYMW+e4zZkhs0lfC3rR1tGihLsAvBE3gA37GFFvoy0tyW0tlqpGWz1RFb 0uKn4zOzr5wXreAOJWeNir0ipEBjQH1XgpcBT7H1Ky0oxCQgVuUKjG/cQ3+QTuez JD/pvsOSKEviMpxlXQpmHiMRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoB/BEZOB Ju7osX86DKx2zu+V9BwwHwYDVR0jBBgwFoAU9+88h0KVuB+hDxQP61W8nFzt+dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjE4LzRFMjQwRjIyQjRB NjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1k ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOS04OGgwS1Z1Qi1oRHhRUDYxVzhuRnp0LWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjE4LzRFMjQwRjIyQjRBNjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUIt aER4UVA2MVc4bkZ6dC1kay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIx7PB+Z1JLpiWIS0Ebbo9VAE++oKnH3pWR+lRN+evLSnqDJRil4BC6l JLuXqVUa/i27xXghO6BO93lTrUAgywky4hgT4V/c1Q+1K95QuBk4gGrRIbUTyxTo kKJC2+Oocbv234U0Nm1QX5JJBghmsbRweT2OcYIi6IqjcL+PsQw9gwKArHuALYLT C4VYtgN++0c0+6lzz62Fk8y3Ogku9aj6+OyxNJPgRXk6DCEntsUXcVNMXYlKCZ6y E/SZe/WJh+GKXV6x7CqqbOGXR8QFbymjzlmKo0HdoxYkKs9q/e41XFUoJfHcJGPU W+L+5oZ7yWV5AeyOD3BD8WVn2buqwxk= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:49 2025 by rpki-client