$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: R5yJqOGJblvuxoKCjTZ8ueVRriDtm6Jt7js755UfFWM= Subject key identifier: A4:AB:51:8C:68:D5:66:18:90:9E:F0:41:F2:A3:7C:7A:C4:8D:58:9E Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 065F Signing time: Tue 04 Nov 2025 22:42:52 +0000 Manifest this update: Tue 04 Nov 2025 22:42:52 +0000 Manifest next update: Tue 11 Nov 2025 22:42:52 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: bKPMZ1Vrmb0mdrIhMi1UXGFVY22tbXJsHT/cpKO2UTw=) 2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=) 3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Nov 4 22:42:52 2025 GMT Not After : Nov 11 22:42:52 2025 GMT Subject: CN=690a816c-fb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:40:07:93:f4:45:07:c6:b3:41:bd:c9:11: c0:99:f1:94:71:34:c5:a6:43:f1:dd:fc:c8:28:f3: 8d:eb:f2:f4:f1:cf:1e:5b:05:0b:a1:93:85:9c:48: 7b:e8:a4:f2:bc:51:e6:91:22:46:5e:0a:52:69:fe: 40:e3:0c:05:b0:f3:07:09:07:a9:af:b2:21:74:1d: 12:9f:5d:00:09:12:10:be:0f:a6:10:49:b0:ea:56: cf:36:a5:49:98:a0:5f:08:25:00:20:58:cb:64:eb: 61:8b:88:11:09:e7:cd:f0:26:7a:b7:bf:27:08:c9: 23:ea:48:cc:46:c7:59:a2:b6:05:fb:6e:6a:d9:18: 6f:e1:b5:a3:b1:29:e2:42:fa:3d:21:82:3d:89:9a: e6:11:4e:71:8f:99:5a:54:47:2c:9c:a9:03:e6:eb: 3b:97:0b:0a:f0:97:25:06:00:ca:c1:4a:f9:06:02: 3e:22:73:de:bb:ae:e0:57:70:56:0f:fc:b0:47:69: 46:30:a4:29:05:33:2f:99:af:46:3b:4a:9c:40:33: 53:0f:16:e5:bf:c5:74:06:11:b3:00:d4:75:95:17: de:b6:a2:27:94:ce:a8:69:d7:a6:a9:4b:b7:aa:0c: 63:bf:ac:81:46:ce:98:34:43:24:e1:ed:5c:3a:c4: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:51:8C:68:D5:66:18:90:9E:F0:41:F2:A3:7C:7A:C4:8D:58:9E X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e5:65:fe:85:7f:80:25:0e:f4:b2:7f:a5:f8:9b:bd:b4:06: d4:cd:a2:0a:33:df:44:c4:f1:3d:ec:a9:7b:95:00:fb:15:b0: ea:bb:5f:77:e8:95:f6:89:56:8b:99:bf:3b:21:f3:7a:42:33: ff:9c:91:02:f7:c4:e7:fc:94:50:ea:6c:37:81:03:35:bf:d0: 2b:94:b5:84:1b:e1:18:0e:d3:36:1f:65:fc:2d:2f:1f:f6:7d: 0d:35:60:a3:a8:d7:77:3d:d6:9a:af:b7:05:ad:89:23:2b:63: e9:8e:d0:3b:71:6c:d9:51:c2:90:91:0d:dd:53:12:37:8a:b8: 55:e9:e7:ba:83:87:e3:03:df:21:42:90:85:74:05:12:a5:00: 8c:8b:8a:fe:7f:eb:8d:fc:b5:32:85:78:f1:36:65:ad:8a:b8: d3:ab:c7:57:d3:0b:a1:97:16:09:46:dd:be:99:1e:7a:46:c6: 7a:8d:35:a8:63:5d:09:60:27:de:26:4c:dd:33:80:3b:89:3b: 46:53:8f:7d:a3:01:37:21:30:76:85:a5:cf:a9:1f:f7:73:bb: 50:16:19:7b:38:2a:37:9e:90:9b:f4:39:e7:de:ca:92:eb:c1: 4e:4b:d7:ce:ab:93:b0:b3:d8:65:ba:f7:47:a3:46:05:1e:cc: 60:fa:ed:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUxMTA0MjI0MjUyWhcNMjUxMTExMjI0MjUyWjAYMRYwFAYD VQQDEw02OTBhODE2Yy1mYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuxAB5P0RQfGs0G9yRHAmfGUcTTFpkPx3fzIKPON6/L08c8eWwULoZOFnEh7 6KTyvFHmkSJGXgpSaf5A4wwFsPMHCQepr7IhdB0Sn10ACRIQvg+mEEmw6lbPNqVJ mKBfCCUAIFjLZOthi4gRCefN8CZ6t78nCMkj6kjMRsdZorYF+25q2Rhv4bWjsSni Qvo9IYI9iZrmEU5xj5laVEcsnKkD5us7lwsK8JclBgDKwUr5BgI+InPeu67gV3BW D/ywR2lGMKQpBTMvma9GO0qcQDNTDxblv8V0BhGzANR1lRfetqInlM6oademqUu3 qgxjv6yBRs6YNEMk4e1cOsRH+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSrUYxo 1WYYkJ7wQfKjfHrEjVieMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm5WX+hX+AJQ70sn+l+Ju9tAbUzaIKM99ExPE97Kl7lQD7FbDqu193 6JX2iVaLmb87IfN6QjP/nJEC98Tn/JRQ6mw3gQM1v9ArlLWEG+EYDtM2H2X8LS8f 9n0NNWCjqNd3Pdaar7cFrYkjK2PpjtA7cWzZUcKQkQ3dUxI3irhV6ee6g4fjA98h QpCFdAUSpQCMi4r+f+uN/LUyhXjxNmWtirjTq8dX0wuhlxYJRt2+mR56RsZ6jTWo Y10JYCfeJkzdM4A7iTtGU499owE3ITB2haXPqR/3c7tQFhl7OCo3npCb9Dnn3sqS 68FOS9fOq5Ows9hluvdHo0YFHsxg+u3a -----END CERTIFICATE-----Generated at Wed Nov 5 21:40:25 2025 by rpki-client