$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: I8Bmh4FTLsosSERY7sZA+H/7DctadUGKSf9fgYEMBXw= Subject key identifier: 99:DC:C6:BC:05:5C:BC:6E:D9:BD:01:FB:8A:56:F7:6F:8F:35:65:EA Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1AAD Signing time: Sun 02 Nov 2025 17:09:46 +0000 Manifest this update: Sun 02 Nov 2025 17:09:45 +0000 Manifest next update: Sun 09 Nov 2025 17:09:45 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: 6+iPu6yzqHrZ4xcJSTOJijBbIHRCfKfOk5R3gosZCwk=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Nov 2 17:09:45 2025 GMT Not After : Nov 9 17:09:45 2025 GMT Subject: CN=69079059-8f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:6c:df:5e:54:67:9e:ae:d1:9c:b0:fe:ec: d0:73:7a:42:a4:4e:bd:72:7e:90:88:e6:d1:f6:7f: e4:ea:81:ea:96:7a:f4:4f:0f:60:1f:b1:15:a5:02: d7:e3:da:7e:ea:bf:4f:d5:31:d9:ea:50:49:bc:ba: 4e:76:39:c5:e7:72:af:2c:a0:a9:30:b1:18:1a:c4: b9:07:ff:6d:40:65:92:da:8f:db:59:c7:bc:8a:6c: 8d:0d:83:e5:61:be:79:57:b5:9f:20:18:6f:e1:ac: f5:d6:63:70:12:7e:2d:29:64:1a:b4:d0:55:f3:98: 08:7c:ec:fb:2e:44:d1:28:60:51:ff:22:61:95:aa: b1:16:7c:21:2c:48:04:c4:6f:74:dc:6e:1d:57:e0: e5:28:18:7b:74:d3:8f:da:65:01:ae:a2:a9:b3:e4: be:37:35:47:a7:48:6c:39:d8:e6:05:1e:e8:48:e8: 3e:1e:0f:ed:db:f0:eb:d8:4a:b0:96:04:bf:ab:db: 12:b5:ff:7e:d7:84:41:d5:d2:a4:d5:7c:1a:70:50: 92:ca:d2:22:fe:42:2d:eb:73:d3:dd:8d:4b:5d:ee: 47:3c:79:8e:d1:21:5f:5c:db:71:ae:61:73:01:e0: bd:f3:17:2d:b3:b2:1f:4d:20:ca:0a:15:28:26:0a: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DC:C6:BC:05:5C:BC:6E:D9:BD:01:FB:8A:56:F7:6F:8F:35:65:EA X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:56:a4:ea:89:b9:83:17:19:c4:98:d4:42:8e:b6:66:85:ae: c0:54:a3:ed:fb:df:b1:50:22:1a:58:d6:58:f4:af:61:04:6c: 6a:8a:6d:b5:ff:83:98:9d:d2:6d:a0:2c:f2:36:f2:b3:8b:8d: b1:01:2d:b0:0c:83:f6:39:5c:ba:42:74:f8:87:0d:1b:aa:ee: e2:c9:bb:8d:a3:3e:42:1a:84:69:a6:ed:af:55:f6:9f:ef:58: 37:60:f0:bb:40:bb:99:43:d5:7b:b8:23:95:7e:7c:21:c8:a1: 46:c8:2c:78:b8:54:0e:36:1c:32:53:e3:f7:e2:95:70:f1:ef: be:ac:26:84:5c:bb:e6:6a:4d:37:56:40:fe:67:0f:d7:59:4a: cd:09:98:e1:c4:eb:b5:88:10:73:49:13:48:42:31:c4:55:e0: 45:b8:60:d0:2a:55:1d:97:91:2a:d0:66:3d:dc:e8:a7:da:6a: e8:2a:76:ed:ee:2b:af:4a:f8:4b:9a:b7:f0:f5:3d:37:00:84: 37:89:86:12:18:dd:11:54:ee:ed:29:93:76:8d:fb:c7:9a:f1: 58:31:59:dc:24:cd:66:d0:2c:5c:00:2e:76:6f:2d:3a:67:70: a9:70:3c:4b:9e:ec:eb:7b:ef:9d:90:76:04:e0:63:ca:70:b7: 15:92:f6:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUxMTAyMTcwOTQ1WhcNMjUxMTA5MTcwOTQ1WjAYMRYwFAYD VQQDEw02OTA3OTA1OS04ZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuZs315UZ56u0Zyw/uzQc3pCpE69cn6QiObR9n/k6oHqlnr0Tw9gH7EVpQLX 49p+6r9P1THZ6lBJvLpOdjnF53KvLKCpMLEYGsS5B/9tQGWS2o/bWce8imyNDYPl Yb55V7WfIBhv4az11mNwEn4tKWQatNBV85gIfOz7LkTRKGBR/yJhlaqxFnwhLEgE xG903G4dV+DlKBh7dNOP2mUBrqKps+S+NzVHp0hsOdjmBR7oSOg+Hg/t2/Dr2Eqw lgS/q9sStf9+14RB1dKk1XwacFCSytIi/kIt63PT3Y1LXe5HPHmO0SFfXNtxrmFz AeC98xcts7IfTSDKChUoJgpAVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJncxrwF XLxu2b0B+4pW92+PNWXqMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkVqTqibmDFxnEmNRCjrZmha7AVKPt+9+xUCIaWNZY9K9hBGxqim21 /4OYndJtoCzyNvKzi42xAS2wDIP2OVy6QnT4hw0bqu7iybuNoz5CGoRppu2vVfaf 71g3YPC7QLuZQ9V7uCOVfnwhyKFGyCx4uFQONhwyU+P34pVw8e++rCaEXLvmak03 VkD+Zw/XWUrNCZjhxOu1iBBzSRNIQjHEVeBFuGDQKlUdl5Eq0GY93Oin2mroKnbt 7iuvSvhLmrfw9T03AIQ3iYYSGN0RVO7tKZN2jfvHmvFYMVncJM1m0CxcAC52by06 Z3CpcDxLnuzre++dkHYE4GPKcLcVkvYg -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:35 2025 by rpki-client