$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json) Hash identifier: P5sz1Hrg2bHw/jKb9Ll5G1RdQsdN25okqm8XcDA4u+g= Subject key identifier: E4:B2:8A:AA:5C:06:1E:08:B0:D5:2B:FE:D2:12:09:AF:9A:62:9F:EB Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft Manifest number: 029B Signing time: Mon 03 Nov 2025 01:30:27 +0000 Manifest this update: Mon 03 Nov 2025 01:30:26 +0000 Manifest next update: Mon 10 Nov 2025 01:30:26 +0000 Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: lsgnNyaKiQ3eA0OuDniAp5ISJdIburOGf36h6/ozlpQ=) 2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: 27aLcYczZ5MYFXDnhdewNPk3kbRzrioX5es/1Wn4iNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Nov 3 01:30:26 2025 GMT Not After : Nov 10 01:30:26 2025 GMT Subject: CN=690805b2-2c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:80:a5:d1:fb:8b:f6:df:f5:c6:71:63:03: 2a:dd:c5:f4:92:68:02:15:65:db:42:ce:40:a6:6c: 21:c9:b9:5b:d6:3f:18:c6:5e:b8:8a:88:c9:39:18: 6a:c3:b5:8f:29:59:aa:aa:b4:13:2d:66:99:6e:0e: c1:e5:c7:23:30:f8:73:0c:8b:38:02:36:30:d1:7e: 9d:9d:c3:7e:fe:2c:ba:88:b2:9e:12:87:26:cf:07: 17:15:d3:01:b7:14:cd:a7:71:a8:de:ad:35:42:5d: 11:27:11:7e:98:5f:4a:3d:7c:5b:11:37:a6:0b:f2: f6:a5:76:be:07:fa:e9:26:b2:bb:54:b4:37:96:aa: 0d:69:a2:a0:c4:df:22:ae:3e:f0:8a:e9:af:11:03: f1:93:a4:41:b3:2d:12:35:e3:a9:27:62:ed:e4:87: 6a:f6:3f:4b:da:c3:9c:ae:d0:80:b4:cc:ea:46:82: cd:c5:ef:ab:bb:9a:14:89:b0:4c:f4:ee:f1:fa:3e: 27:dc:ad:4c:d8:ad:f8:3c:40:5b:bf:34:69:d9:49: b1:d0:7a:e2:9c:b4:3c:d9:72:29:12:29:b0:16:80: 9a:64:bf:c5:57:0a:49:82:49:4d:4a:9b:b9:94:b0: 94:be:73:1e:fc:23:a4:5a:4d:18:a4:9f:62:ec:49: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B2:8A:AA:5C:06:1E:08:B0:D5:2B:FE:D2:12:09:AF:9A:62:9F:EB X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f3:9e:fc:10:26:60:b9:29:e9:65:36:1b:a0:fd:1b:c2:c5: b9:f1:d3:20:90:9e:d4:2d:42:26:fe:57:32:2d:8d:b8:2d:8f: 2b:8c:c6:a2:59:5a:5a:05:49:4b:47:f2:e2:39:66:40:b9:a1: a1:96:32:cf:64:01:2b:c8:fd:31:a6:ba:f0:6c:ca:04:22:25: f7:a6:b5:5d:4e:e7:41:c4:5c:a3:a4:6d:1a:10:fe:df:ce:da: bf:98:53:f3:3e:50:83:3d:bc:f8:c5:d1:8c:3b:5e:c1:7e:b6: be:80:90:8f:9a:6a:b9:57:6f:a9:7f:71:5d:fe:af:cd:9d:8f: b2:4f:dd:12:0c:fe:b3:ea:f9:fd:01:a1:ff:56:cb:53:25:4a: 2c:7c:0f:b9:0b:54:12:ed:d2:c8:e7:bd:16:fa:da:3a:fb:cb: b8:e5:18:26:ee:60:d4:ad:b4:5a:a7:91:c5:48:a6:2c:25:f8: 13:1f:e1:f3:6a:1f:05:28:ab:15:8b:eb:61:40:d2:3e:a1:41: 3c:29:fc:9d:69:e2:f0:b8:6c:39:ac:fd:ee:b0:73:1d:ad:40: f7:13:40:68:6b:38:45:b1:46:dc:c0:ff:8c:5c:b9:c6:fd:c4: 5f:3d:2a:1d:f6:ce:ac:ee:1d:97:43:9b:36:10:70:72:b3:7a: a6:0f:b9:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjUxMTAzMDEzMDI2WhcNMjUxMTEwMDEzMDI2WjAYMRYwFAYD VQQDEw02OTA4MDViMi0yYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTeApdH7i/bf9cZxYwMq3cX0kmgCFWXbQs5Apmwhyblb1j8Yxl64iojJORhq w7WPKVmqqrQTLWaZbg7B5ccjMPhzDIs4AjYw0X6dncN+/iy6iLKeEocmzwcXFdMB txTNp3Go3q01Ql0RJxF+mF9KPXxbETemC/L2pXa+B/rpJrK7VLQ3lqoNaaKgxN8i rj7wiumvEQPxk6RBsy0SNeOpJ2Lt5Idq9j9L2sOcrtCAtMzqRoLNxe+ru5oUibBM 9O7x+j4n3K1M2K34PEBbvzRp2Umx0HrinLQ82XIpEimwFoCaZL/FVwpJgklNSpu5 lLCUvnMe/COkWk0YpJ9i7EkftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSyiqpc Bh4IsNUr/tISCa+aYp/rMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE8578ECZguSnpZTYboP0bwsW58dMgkJ7ULUIm/lcyLY24LY8rjMai WVpaBUlLR/LiOWZAuaGhljLPZAEryP0xprrwbMoEIiX3prVdTudBxFyjpG0aEP7f ztq/mFPzPlCDPbz4xdGMO17Bfra+gJCPmmq5V2+pf3Fd/q/NnY+yT90SDP6z6vn9 AaH/VstTJUosfA+5C1QS7dLI570W+to6+8u45Rgm7mDUrbRap5HFSKYsJfgTH+Hz ah8FKKsVi+thQNI+oUE8KfydaeLwuGw5rP3usHMdrUD3E0BoazhFsUbcwP+MXLnG /cRfPSod9s6s7h2XQ5s2EHBys3qmD7lf -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:14 2025 by rpki-client