$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: LlijO4r6TimkFDG8pN2WYbvBGGaXslw26AjPPE07VrY= Subject key identifier: 08:84:A9:1B:16:A4:EE:AA:80:CC:C7:7C:C3:84:AE:B1:40:12:CE:EE Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 06A4 Signing time: Tue 04 Nov 2025 14:54:45 +0000 Manifest this update: Tue 04 Nov 2025 14:54:44 +0000 Manifest next update: Tue 11 Nov 2025 14:54:44 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: 4sPJHqxZqvW6wQ/HL6KrvcMF/+D/mL+Z2bRsd5Gtn7U=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: Nov 4 14:54:44 2025 GMT Not After : Nov 11 14:54:44 2025 GMT Subject: CN=690a13b4-579a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:c0:cc:ae:0b:4d:23:55:96:03:de:98:db: db:2f:29:9f:30:1b:3e:9a:b3:a0:39:d3:61:c5:54: ea:2a:92:b1:0f:ea:64:e0:b5:64:39:7d:59:5b:38: 10:cb:e5:fd:34:35:68:dc:0a:23:48:a6:48:1a:2b: 5d:66:ed:b0:8d:f9:4e:62:66:e3:c4:31:19:27:23: 8a:0d:66:98:62:d1:ec:0e:4d:8a:2c:ca:c9:d7:fe: 90:03:d1:d1:7e:54:4c:44:78:5e:4b:29:98:f8:c7: 93:5f:ba:f2:3a:7a:7a:b3:76:cf:be:90:01:57:b8: 06:23:3a:ca:49:54:79:02:67:3e:f3:72:1c:96:1e: 0f:0b:58:7f:f3:50:4a:80:67:b7:d1:76:a0:5d:bc: 33:3b:f4:04:48:f6:8d:e5:ab:c6:75:58:32:ff:0b: d2:02:52:eb:70:ce:88:08:36:8f:a7:8a:60:9d:3b: ea:bf:cf:05:60:e3:f3:5b:f7:74:7b:64:15:f9:e2: e3:1b:a7:b5:04:96:d8:4e:24:b7:c3:d8:5d:21:ef: 2b:16:1a:2a:22:09:f6:d5:b3:f7:a0:66:a0:37:b9: 3c:3c:b2:37:ec:37:c8:7c:35:9e:d9:5d:3c:03:2b: 65:83:c3:19:f4:10:48:fe:6d:9d:91:5e:ef:f0:d2: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:84:A9:1B:16:A4:EE:AA:80:CC:C7:7C:C3:84:AE:B1:40:12:CE:EE X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:81:2b:c8:c3:73:1e:52:2f:9f:d7:68:a0:00:88:87:f6:ef: f6:93:72:f6:da:d1:34:72:d7:19:56:b7:2b:98:4e:84:c0:87: 2a:2b:98:d4:8b:63:61:fe:54:a5:2b:9f:2c:c1:1f:ae:43:ab: 62:63:0a:17:26:87:bf:92:08:5a:f3:82:3c:e7:9f:97:a7:16: f1:ab:42:36:72:ef:bd:9d:72:f3:fa:52:04:e0:1f:1c:b9:4e: 93:ec:0c:ad:14:ca:b4:92:31:6c:6d:bb:8f:b3:41:15:bd:0f: ee:5c:60:55:4d:a0:90:2f:6c:e5:9b:98:2c:d5:d6:ae:07:52: 6b:00:63:1e:62:94:a1:64:2d:7d:b4:fd:73:54:52:19:50:3a: 05:fd:c0:d7:94:bb:93:b8:ba:55:58:e7:bd:39:0d:56:a1:b8: 85:69:9c:8b:81:30:a4:d0:7f:1a:b0:33:77:59:3e:88:01:56: fa:e8:eb:07:e5:fd:51:38:eb:18:cf:ab:66:13:0f:ed:c8:0e: 92:da:28:7a:fb:07:15:54:c2:f3:ed:12:23:9d:35:c2:66:91: e3:a9:74:b3:c0:ae:3e:39:ca:ee:75:1e:64:3e:b5:69:09:74: 7f:c6:4b:82:a8:dd:22:f9:53:62:1c:53:64:03:c8:83:6c:27: 6a:a0:6e:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUxMTA0MTQ1NDQ0WhcNMjUxMTExMTQ1NDQ0WjAYMRYwFAYD VQQDEw02OTBhMTNiNC01NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0grAzK4LTSNVlgPemNvbLymfMBs+mrOgOdNhxVTqKpKxD+pk4LVkOX1ZWzgQ y+X9NDVo3AojSKZIGitdZu2wjflOYmbjxDEZJyOKDWaYYtHsDk2KLMrJ1/6QA9HR flRMRHheSymY+MeTX7ryOnp6s3bPvpABV7gGIzrKSVR5Amc+83Iclh4PC1h/81BK gGe30XagXbwzO/QESPaN5avGdVgy/wvSAlLrcM6ICDaPp4pgnTvqv88FYOPzW/d0 e2QV+eLjG6e1BJbYTiS3w9hdIe8rFhoqIgn21bP3oGagN7k8PLI37DfIfDWe2V08 Aytlg8MZ9BBI/m2dkV7v8NLr1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiEqRsW pO6qgMzHfMOErrFAEs7uMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugSvIw3MeUi+f12igAIiH9u/2k3L22tE0ctcZVrcrmE6EwIcqK5jU i2Nh/lSlK58swR+uQ6tiYwoXJoe/kgha84I855+Xpxbxq0I2cu+9nXLz+lIE4B8c uU6T7AytFMq0kjFsbbuPs0EVvQ/uXGBVTaCQL2zlm5gs1dauB1JrAGMeYpShZC19 tP1zVFIZUDoF/cDXlLuTuLpVWOe9OQ1WobiFaZyLgTCk0H8asDN3WT6IAVb66OsH 5f1ROOsYz6tmEw/tyA6S2ih6+wcVVMLz7RIjnTXCZpHjqXSzwK4+OcrudR5kPrVp CXR/xkuCqN0i+VNiHFNkA8iDbCdqoG5I -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:49 2025 by rpki-client