$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: D9Gdhmybw40dkhWJBqpqmVcLC06thToePWxCUIIIPWs= Subject key identifier: 7E:46:29:92:88:6F:39:0A:3E:EC:CF:8F:3D:0A:C8:1B:6C:66:A2:D0 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 1584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1577 Signing time: Sun 02 Nov 2025 16:46:37 +0000 Manifest this update: Sun 02 Nov 2025 16:46:36 +0000 Manifest next update: Sun 09 Nov 2025 16:46:36 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: fZeWVufUsvnbPkQ6yQXbCtJrFdC49cz3XE95NBuu/l4=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5508 (0x1584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Nov 2 16:46:36 2025 GMT Not After : Nov 9 16:46:36 2025 GMT Subject: CN=69078aec-f9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:d9:8d:68:98:3d:4b:78:65:5c:c8:e6:27: 9b:98:4c:0b:cd:7e:33:1f:4b:b9:33:4c:a4:13:29: e8:6c:95:bd:c7:4e:a5:a0:41:ef:e2:10:60:1c:66: c9:ff:e8:9b:a5:e9:3a:b1:1d:9b:a3:26:e4:2f:61: fa:bd:56:26:d5:e1:bb:7e:8e:87:f6:d5:c0:cc:c8: 77:00:bd:5a:bb:49:ba:68:d6:29:47:60:77:b6:4b: 63:6a:43:d6:2f:80:7b:af:36:82:ac:44:28:ff:bc: 8f:f6:31:aa:42:c7:68:24:2e:3f:41:18:fe:84:1c: fd:56:95:d4:9c:d7:a7:7a:4f:dc:07:0f:6a:1d:46: f8:93:53:08:e3:a4:e0:5c:ee:cb:39:a7:fd:52:d1: d6:32:fa:e7:e2:8d:b4:ad:b4:ca:46:1a:87:c2:3c: b8:b4:6e:03:63:2e:4d:7a:d9:2f:e9:1b:22:a5:77: 38:09:b9:fe:92:2c:14:82:1d:05:55:c1:43:5d:41: 2a:e8:fc:51:31:f2:0e:db:44:7a:cb:46:ce:1e:6d: 9b:b2:83:75:7c:c6:b0:b6:0d:b8:30:dd:cc:f2:8c: b6:32:ae:3d:2b:1e:60:f9:1e:e8:74:8f:dc:04:87: 5f:f0:a0:c1:42:2d:cc:e3:b2:47:52:2c:2f:6a:04: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:46:29:92:88:6F:39:0A:3E:EC:CF:8F:3D:0A:C8:1B:6C:66:A2:D0 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2f:41:bd:32:69:4e:26:2d:71:09:52:77:54:3c:2d:65:8d: 80:44:92:4b:54:09:7e:4f:50:a1:05:bd:18:0b:8c:4f:b0:99: 42:24:3b:d3:aa:56:20:06:ef:9e:81:3c:62:de:a8:50:f1:47: dd:76:ee:e5:bc:fc:e8:0b:95:1f:90:60:d4:b5:36:c5:de:e8: 4c:38:08:37:81:76:fb:13:e8:c5:30:2d:e9:59:09:eb:13:bd: 53:0b:47:23:a7:73:35:83:b6:fa:aa:89:aa:41:57:52:34:b2: 0d:11:9f:bc:46:34:28:46:cd:63:24:65:90:ab:a2:0a:fa:99: cb:8f:72:92:91:78:b5:f6:3b:d2:bc:e8:d1:d3:7d:2c:3e:e9: 41:83:81:b9:f5:99:f6:51:43:50:55:29:56:14:98:e4:2e:fe: 54:39:60:15:f9:ca:15:79:eb:7e:e3:b5:74:f4:70:d7:dc:fa: 54:fe:84:5b:e9:9c:d7:7e:90:74:73:7e:8d:b7:3b:dd:ba:69: eb:b2:49:76:99:8a:70:0d:fb:f2:3c:bc:b7:4b:7d:9a:af:2d: 69:22:33:46:3e:2a:25:7e:33:5a:cd:98:c0:50:35:36:c1:17: 3d:99:5f:54:61:82:d2:92:87:ff:57:6e:9a:bf:57:db:24:3d: a7:7c:92:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUxMTAyMTY0NjM2WhcNMjUxMTA5MTY0NjM2WjAYMRYwFAYD VQQDEw02OTA3OGFlYy1mOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cXZjWiYPUt4ZVzI5iebmEwLzX4zH0u5M0ykEynobJW9x06loEHv4hBgHGbJ /+ibpek6sR2boybkL2H6vVYm1eG7fo6H9tXAzMh3AL1au0m6aNYpR2B3tktjakPW L4B7rzaCrEQo/7yP9jGqQsdoJC4/QRj+hBz9VpXUnNenek/cBw9qHUb4k1MI46Tg XO7LOaf9UtHWMvrn4o20rbTKRhqHwjy4tG4DYy5Netkv6RsipXc4Cbn+kiwUgh0F VcFDXUEq6PxRMfIO20R6y0bOHm2bsoN1fMawtg24MN3M8oy2Mq49Kx5g+R7odI/c BIdf8KDBQi3M47JHUiwvagT3FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5GKZKI bzkKPuzPjz0KyBtsZqLQMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCML0G9MmlOJi1xCVJ3VDwtZY2ARJJLVAl+T1ChBb0YC4xPsJlCJDvT qlYgBu+egTxi3qhQ8Ufddu7lvPzoC5UfkGDUtTbF3uhMOAg3gXb7E+jFMC3pWQnr E71TC0cjp3M1g7b6qomqQVdSNLINEZ+8RjQoRs1jJGWQq6IK+pnLj3KSkXi19jvS vOjR030sPulBg4G59Zn2UUNQVSlWFJjkLv5UOWAV+coVeet+47V09HDX3PpU/oRb 6ZzXfpB0c36Ntzvdumnrskl2mYpwDfvyPLy3S32ary1pIjNGPiolfjNazZjAUDU2 wRc9mV9UYYLSkof/V26av1fbJD2nfJJF -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:44 2025 by rpki-client