$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json) Hash identifier: B2+8wZ2CUSFGl1wUVvHtTZm4dJcA43/dIesNN2a1enc= Subject key identifier: 82:BB:D4:96:8B:A6:BD:CD:EA:C2:3A:EC:27:04:EF:C3:DC:DC:6E:25 Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6 Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft Manifest number: 0221 Signing time: Wed 05 Nov 2025 02:12:22 +0000 Manifest this update: Wed 05 Nov 2025 02:12:21 +0000 Manifest next update: Wed 12 Nov 2025 02:12:21 +0000 Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: toF54yQSBeFXbGY5SLdMv9tjrOKrksfUelXyR8Q+4QM=) 2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: HvJRtP/1M+AejuhqdGaCDBK61eDiFrYobniM96LvHvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6 Validity Not Before: Nov 5 02:12:21 2025 GMT Not After : Nov 12 02:12:21 2025 GMT Subject: CN=690ab285-187e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:ff:90:74:8f:52:9e:00:4f:d8:b5:0a:7d: fe:92:09:b7:26:46:f9:ca:a4:ab:16:52:8d:a2:08: 83:6b:2a:e2:e0:cd:e7:ac:82:c5:45:29:28:ab:4b: 55:08:af:60:51:bd:32:a6:59:5a:46:11:20:26:6e: 55:ce:4f:9d:0b:a7:16:ba:5d:ec:6a:e9:78:1e:47: a3:26:36:b8:76:ed:73:f5:52:43:8e:a3:93:9c:49: 09:63:eb:b6:a8:79:5f:ba:41:d9:f8:e3:90:c8:e8: a9:d6:d1:d6:f1:be:28:09:4d:01:9c:27:ae:27:14: 15:72:b8:1e:46:f8:75:a1:56:e6:82:75:27:2c:29: 87:68:5b:3a:6d:0f:53:92:8d:b5:e8:da:6c:dc:d3: 6b:d0:b1:9a:27:c6:52:f2:c9:5f:8b:a2:80:5e:17: 91:3c:49:da:6c:02:65:03:51:03:5b:d2:ae:99:66: 3b:85:c2:a1:6f:30:d2:2a:e3:94:41:85:71:68:6b: c9:0a:5d:ed:56:1b:0e:e7:5b:68:40:29:c7:6d:eb: de:80:e2:b8:2a:c3:07:4a:63:51:30:6e:ce:93:ce: 14:81:2e:a7:20:9b:86:87:4d:4e:30:e3:2d:3a:ca: 60:07:e2:38:39:37:6b:15:5c:70:c4:a6:1e:98:05: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BB:D4:96:8B:A6:BD:CD:EA:C2:3A:EC:27:04:EF:C3:DC:DC:6E:25 X509v3 Authority Key Identifier: keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:13:d6:84:ff:33:95:85:91:9c:90:01:bd:a8:ab:3d:f5:2e: b3:bb:cf:34:b6:bc:62:18:4a:b6:94:71:d0:92:ef:34:1f:ef: c8:f1:53:b1:55:06:39:46:a0:77:cd:ea:e0:42:87:a8:c8:6a: c3:66:53:9e:51:1c:df:13:22:a0:c8:5f:9e:02:f2:27:0a:d1: 8a:44:29:3f:af:b6:3b:03:6c:cd:8d:07:05:28:4e:b7:bc:83: 76:e7:12:b6:85:07:9f:40:7d:d3:6f:e4:c5:b8:45:06:bf:6d: 1b:cb:4d:8f:13:87:0d:3d:b2:55:ee:d9:ac:05:77:ee:d1:46: 49:5c:93:34:b8:9e:e4:4b:8d:52:fd:e3:53:59:19:e7:28:02: 79:b5:15:c2:4e:c1:e8:63:71:da:fd:43:6f:cc:03:e6:ea:ff: 14:4b:d3:16:ad:d0:3c:84:1b:80:ac:65:3b:d3:ee:ed:4a:48: e9:aa:a0:7c:a1:35:cf:77:ef:3f:ab:26:36:58:31:70:c6:58: 0e:01:cf:5f:f1:eb:cb:62:ef:46:6d:c0:29:7e:d6:0f:61:b0: 17:c5:48:ba:6b:91:38:c8:5f:76:1d:9c:a5:43:19:f6:23:b9: 24:eb:1c:99:14:9b:56:b2:60:70:d8:0f:c1:2a:e2:e3:3b:98: 49:a3:7f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2 QkI5QTRFQTYwHhcNMjUxMTA1MDIxMjIxWhcNMjUxMTEyMDIxMjIxWjAYMRYwFAYD VQQDEw02OTBhYjI4NS0xODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHj/kHSPUp4AT9i1Cn3+kgm3Jkb5yqSrFlKNogiDayri4M3nrILFRSkoq0tV CK9gUb0ypllaRhEgJm5Vzk+dC6cWul3saul4HkejJja4du1z9VJDjqOTnEkJY+u2 qHlfukHZ+OOQyOip1tHW8b4oCU0BnCeuJxQVcrgeRvh1oVbmgnUnLCmHaFs6bQ9T ko216Nps3NNr0LGaJ8ZS8slfi6KAXheRPEnabAJlA1EDW9KumWY7hcKhbzDSKuOU QYVxaGvJCl3tVhsO51toQCnHbevegOK4KsMHSmNRMG7Ok84UgS6nIJuGh01OMOMt OspgB+I4OTdrFVxwxKYemAVDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK71JaL pr3N6sI67CcE78Pc3G4lMB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1 RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj aWdVWkpIVFAtb2xydWFUcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWE9aE/zOVhZGckAG9qKs99S6zu880trxiGEq2lHHQku80H+/I8VOx VQY5RqB3zergQoeoyGrDZlOeURzfEyKgyF+eAvInCtGKRCk/r7Y7A2zNjQcFKE63 vIN25xK2hQefQH3Tb+TFuEUGv20by02PE4cNPbJV7tmsBXfu0UZJXJM0uJ7kS41S /eNTWRnnKAJ5tRXCTsHoY3Ha/UNvzAPm6v8US9MWrdA8hBuArGU70+7tSkjpqqB8 oTXPd+8/qyY2WDFwxlgOAc9f8evLYu9GbcApftYPYbAXxUi6a5E4yF92HZylQxn2 I7kk6xyZFJtWsmBw2A/BKuLjO5hJo3+a -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:27 2025 by rpki-client