$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: TIouzrKzxUW6KqCjTlpz0frSuvZWAMFRgkuujpqsNes= Subject key identifier: 8B:64:9B:F5:84:C3:F0:FF:D8:55:21:DA:F0:2C:22:B0:9F:70:10:39 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 0173 Signing time: Mon 03 Nov 2025 04:01:38 +0000 Manifest this update: Mon 03 Nov 2025 04:01:37 +0000 Manifest next update: Mon 10 Nov 2025 04:01:37 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: B3pZNgWpMRGJue3iSKhQmYXUYZOaUkrzyrKlPCEG6/U=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Nov 3 04:01:37 2025 GMT Not After : Nov 10 04:01:37 2025 GMT Subject: CN=69082921-a7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:83:20:ed:ff:03:3e:83:5a:86:0f:45:41: 74:fe:2b:37:1a:bd:24:b0:0b:94:e0:5d:da:4f:16: 9c:c6:d2:36:4c:03:5f:6b:b4:2c:a5:77:34:e2:9a: d7:a4:87:53:35:f7:08:ec:05:f3:f4:c7:14:b4:ba: 1f:b3:bd:f5:50:64:41:61:89:ce:e3:f9:86:e0:b5: 0b:7c:28:51:63:c1:9f:42:a9:40:3e:4b:03:6f:4f: 3e:6b:1f:f5:7f:86:d9:a3:a1:c7:15:a4:35:55:a8: ca:19:20:bb:7e:ea:0f:99:f9:84:cb:9c:dd:dc:e0: 20:32:dc:26:88:24:50:a1:b5:8c:dc:e8:ac:67:da: 43:dd:56:40:ef:84:eb:82:7e:18:4e:27:df:47:f7: c0:52:8f:2a:35:4c:8c:2b:93:e6:37:91:25:45:c4: f0:8f:ca:76:60:5c:3d:71:9a:b1:32:77:28:e9:5a: 0e:68:d1:85:97:26:ce:33:34:23:aa:5e:2e:c5:09: 83:78:9e:4e:3b:d1:fa:f7:68:c0:43:5f:33:43:02: 21:d2:3d:2a:f3:aa:0b:cd:06:85:a3:7c:e2:ae:b9: 98:2a:c6:39:67:3c:59:d3:0f:97:7d:a2:50:24:b2: 03:8a:f6:11:bc:ce:1f:dd:c3:7d:24:1b:8e:b2:10: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:9B:F5:84:C3:F0:FF:D8:55:21:DA:F0:2C:22:B0:9F:70:10:39 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b0:0c:db:f8:d4:70:eb:59:21:41:59:45:3f:94:12:ff:f5: 71:2d:7a:a4:01:ac:3a:e6:19:66:f6:8f:76:28:32:0b:8a:72: f1:58:77:50:18:50:95:d2:3b:d3:b2:1c:32:c3:87:b1:b4:ed: 79:9c:71:20:70:88:b2:c8:f9:67:17:99:42:36:01:c2:11:c6: 3b:cd:61:d3:e9:7b:43:c1:df:e5:34:ef:40:35:72:1c:66:22: 90:fe:3a:aa:f5:04:61:2a:1d:53:a8:6a:ab:ba:53:0c:96:59: 8f:82:af:64:77:93:57:e6:ad:cb:d4:27:8b:b1:a4:f4:db:0f: 73:1f:27:3a:4c:4f:73:29:40:0f:af:1a:ab:9a:8e:5c:7b:ad: 05:cb:78:79:64:f9:6d:3a:9c:2f:89:89:b3:5b:c7:15:42:ce: bd:12:b4:15:9d:00:67:a9:c1:5b:a8:2e:bc:4f:4f:73:20:7e: 36:cf:43:99:ae:98:95:45:dd:c7:c4:1f:b3:a9:7f:08:77:b5: ee:0c:0b:a6:94:9c:90:34:de:fb:81:07:37:4e:df:cd:2a:f5: b3:04:f8:61:9d:4f:1c:7f:4c:9a:12:5d:62:9e:26:6b:7c:60: d9:b3:c8:a8:18:3b:c9:de:51:76:c9:34:f5:fb:a8:57:21:c1: 07:37:ce:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUxMTAzMDQwMTM3WhcNMjUxMTEwMDQwMTM3WjAYMRYwFAYD VQQDEw02OTA4MjkyMS1hN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn2DIO3/Az6DWoYPRUF0/is3Gr0ksAuU4F3aTxacxtI2TANfa7QspXc04prX pIdTNfcI7AXz9McUtLofs731UGRBYYnO4/mG4LULfChRY8GfQqlAPksDb08+ax/1 f4bZo6HHFaQ1VajKGSC7fuoPmfmEy5zd3OAgMtwmiCRQobWM3OisZ9pD3VZA74Tr gn4YTiffR/fAUo8qNUyMK5PmN5ElRcTwj8p2YFw9cZqxMnco6VoOaNGFlybOMzQj ql4uxQmDeJ5OO9H692jAQ18zQwIh0j0q86oLzQaFo3zirrmYKsY5ZzxZ0w+XfaJQ JLIDivYRvM4f3cN9JBuOshD97wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItkm/WE w/D/2FUh2vAsIrCfcBA5MB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMsAzb+NRw61khQVlFP5QS//VxLXqkAaw65hlm9o92KDILinLxWHdQ GFCV0jvTshwyw4extO15nHEgcIiyyPlnF5lCNgHCEcY7zWHT6XtDwd/lNO9ANXIc ZiKQ/jqq9QRhKh1TqGqrulMMllmPgq9kd5NX5q3L1CeLsaT02w9zHyc6TE9zKUAP rxqrmo5ce60Fy3h5ZPltOpwviYmzW8cVQs69ErQVnQBnqcFbqC68T09zIH42z0OZ rpiVRd3HxB+zqX8Id7XuDAumlJyQNN77gQc3Tt/NKvWzBPhhnU8cf0yaEl1iniZr fGDZs8ioGDvJ3lF2yTT1+6hXIcEHN84M -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:54 2025 by rpki-client