$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: /Bp7o8BHGQOKIl/l3MHRLuMo3Q63DH7hnL5/0uOVVS8= Subject key identifier: C8:FA:15:66:0D:2B:BD:FA:17:B7:16:70:36:75:F9:4F:E9:E0:C8:4F Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08F2 Signing time: Fri 24 Oct 2025 21:11:41 +0000 Manifest this update: Fri 24 Oct 2025 21:11:40 +0000 Manifest next update: Fri 31 Oct 2025 21:11:40 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: BsFwlzsT2d2sLpByroaiIAodPpVT/ihmzADtyqcPnUM=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 21:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Oct 24 21:11:40 2025 GMT Not After : Oct 31 21:11:40 2025 GMT Subject: CN=68fbeb8d-3daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:7b:b3:7d:2c:e7:67:d5:43:c8:09:3c:14: 27:83:b3:0c:52:ab:dd:c9:ff:0c:0d:a9:6c:1e:37: 8a:51:da:92:c0:ac:f3:b1:4c:f9:4d:38:d6:4f:db: 49:ec:b6:0c:78:b7:0e:aa:e2:7c:d8:ec:39:1f:9f: 66:57:c2:08:f9:4a:3f:31:fe:e0:90:b8:c3:93:10: 0d:8a:e5:ba:a7:13:44:fd:92:75:94:19:b0:cc:af: 1f:f8:ca:9e:75:84:af:d9:23:13:f5:a8:b4:57:0f: 2c:5a:31:63:69:4c:4c:99:e8:2e:2c:0c:11:e3:ef: 27:13:2d:62:51:ac:6f:3e:a2:32:8f:8d:a0:fa:d5: e6:e8:06:9a:c8:08:d1:0e:63:0a:5d:cd:15:fc:e5: 2b:25:b8:36:71:c4:c7:40:18:5a:69:1a:4b:2a:18: a0:db:3f:d2:ee:19:f1:63:ba:96:2b:6c:b5:21:4b: a7:e9:70:fb:92:4b:79:df:07:88:07:a9:19:6f:fa: e7:0e:15:f0:c2:b9:87:59:3d:f3:61:a6:3b:30:52: 01:98:6a:c1:a7:d8:6c:7e:d3:b3:83:9d:cc:6e:10: c0:5c:1d:a0:e5:cb:e5:8e:5a:ba:76:7d:ce:e9:49: 19:2f:55:9b:c1:b1:f4:e6:98:95:0f:68:9a:b3:a7: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FA:15:66:0D:2B:BD:FA:17:B7:16:70:36:75:F9:4F:E9:E0:C8:4F X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:34:8f:38:d8:76:c7:c2:57:b0:a7:84:9e:a7:ef:67:9b:3e: b2:de:6c:60:e5:55:78:17:75:37:78:c9:8b:19:50:c6:92:0f: 2a:2a:d6:b1:b5:0f:b9:95:b4:f9:98:5c:a0:90:5e:5a:9a:89: c8:7f:ff:d4:61:95:ba:c8:b4:1b:a2:58:fd:5e:10:89:c5:86: 83:c6:bb:0c:03:85:3c:28:a0:a3:10:6c:ed:60:9e:d8:1b:c5: 6a:b0:fe:c9:f3:71:de:e3:9d:1b:28:18:09:2a:75:49:24:58: 8f:97:f6:66:f6:1f:ce:f0:54:00:18:17:5d:e3:9d:ce:00:9e: d0:fc:69:7d:f1:1a:21:05:a7:e2:d3:2d:18:94:3f:7f:6b:3a: d3:ee:d2:5a:b2:2a:f4:31:75:af:4b:4d:1f:af:0a:d7:40:b5: 45:62:80:cc:13:67:2b:1c:72:8f:cf:ca:f3:10:c8:e2:06:bf: 83:62:05:f8:2a:62:3d:52:e9:7e:b8:09:fd:8f:53:22:49:5d: 52:ad:d0:57:80:c4:e6:a4:90:d7:16:17:7d:fa:6b:2e:63:62: c0:b8:36:f1:45:14:4e:63:77:bf:c1:3c:ef:b3:f7:74:59:00: 18:20:56:1b:f9:8b:2e:9c:bf:cd:00:c6:5e:96:3c:e8:cd:bf: 65:f7:30:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUxMDI0MjExMTQwWhcNMjUxMDMxMjExMTQwWjAYMRYwFAYD VQQDEw02OGZiZWI4ZC0zZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS57s30s52fVQ8gJPBQng7MMUqvdyf8MDalsHjeKUdqSwKzzsUz5TTjWT9tJ 7LYMeLcOquJ82Ow5H59mV8II+Uo/Mf7gkLjDkxANiuW6pxNE/ZJ1lBmwzK8f+Mqe dYSv2SMT9ai0Vw8sWjFjaUxMmeguLAwR4+8nEy1iUaxvPqIyj42g+tXm6AaayAjR DmMKXc0V/OUrJbg2ccTHQBhaaRpLKhig2z/S7hnxY7qWK2y1IUun6XD7kkt53weI B6kZb/rnDhXwwrmHWT3zYaY7MFIBmGrBp9hsftOzg53MbhDAXB2g5cvljlq6dn3O 6UkZL1WbwbH05piVD2ias6fvowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj6FWYN K736F7cWcDZ1+U/p4MhPMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3NI842HbHwlewp4Sep+9nmz6y3mxg5VV4F3U3eMmLGVDGkg8qKtax tQ+5lbT5mFygkF5amonIf//UYZW6yLQbolj9XhCJxYaDxrsMA4U8KKCjEGztYJ7Y G8VqsP7J83He450bKBgJKnVJJFiPl/Zm9h/O8FQAGBdd453OAJ7Q/Gl98RohBafi 0y0YlD9/azrT7tJasir0MXWvS00frwrXQLVFYoDME2crHHKPz8rzEMjiBr+DYgX4 KmI9Uul+uAn9j1MiSV1SrdBXgMTmpJDXFhd9+msuY2LAuDbxRRROY3e/wTzvs/d0 WQAYIFYb+YsunL/NAMZeljzozb9l9zBI -----END CERTIFICATE-----Generated at Sat Oct 25 13:06:07 2025 by rpki-client