$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: ooJsXQJtoUZX+1Myj4oALpPOq5EBFHdNwnOdm1CNx9w= Subject key identifier: D3:1D:3F:52:30:BF:EC:F6:E5:80:46:35:96:C0:F8:1E:C2:45:DF:A3 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 0283 Signing time: Mon 03 Nov 2025 01:34:52 +0000 Manifest this update: Mon 03 Nov 2025 01:34:52 +0000 Manifest next update: Mon 10 Nov 2025 01:34:52 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: lGQ3YjUjFkbTOxSvHChHHzmkrVWxtXUWwjNzYgq5Vn0=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: Hlir8kdh5R9yAKCOaYnCPJ/+dfwSE3UvINdXqQSP2fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Nov 3 01:34:52 2025 GMT Not After : Nov 10 01:34:52 2025 GMT Subject: CN=690806bc-658d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:b9:9f:31:96:d2:48:73:b5:c9:8b:eb:62: 39:f6:91:7c:30:f7:7f:35:2c:74:5e:e5:8a:64:44: c9:be:5c:26:60:2e:3a:1e:7f:4b:3e:21:cc:97:2d: 06:cf:45:15:2e:09:74:47:5f:73:eb:f6:17:ee:b3: 68:8d:19:cb:9a:d9:4f:8c:e1:e1:88:45:40:40:35: 98:af:77:3a:7c:4e:d1:0e:a5:43:0b:13:97:34:31: f8:25:c6:65:34:a1:94:d6:ab:90:7d:a6:02:c4:0f: c0:47:e9:dc:7c:bb:df:fd:e4:03:b8:0d:51:c9:a3: 6e:26:4c:ab:0a:71:41:d4:03:ff:6b:75:c3:a9:fe: c9:55:91:16:c4:59:2b:32:16:69:e6:54:2f:32:d5: c6:f1:d3:0e:97:a2:db:9a:b3:ba:cb:50:04:85:44: f7:1c:3d:a3:bf:2d:97:76:05:1f:78:37:f3:19:08: cf:36:1d:7b:c8:f7:d3:91:6f:e4:56:35:b2:7c:af: 75:e5:18:d5:0a:f1:10:b5:4d:72:a6:94:cc:66:1a: 79:34:88:cc:4b:6c:e5:2f:e0:0f:76:36:52:35:2a: dc:42:22:d8:df:4c:1d:53:b1:c2:74:d0:5d:c7:3b: a0:f6:cf:5f:8c:b4:60:2e:18:a6:55:2c:3b:12:83: 99:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1D:3F:52:30:BF:EC:F6:E5:80:46:35:96:C0:F8:1E:C2:45:DF:A3 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:60:d5:0d:68:65:9b:6b:9b:15:16:01:fc:22:45:2a:d3:05: 11:e3:86:cd:11:bc:8b:55:32:48:97:66:38:07:08:52:de:c8: 28:d7:e4:90:44:d0:81:2e:db:8a:bd:d4:8c:de:e7:82:e7:82: d2:76:f8:4e:79:de:c4:6c:19:c3:21:8f:b6:37:63:6f:db:4e: 62:ed:fb:78:ba:69:b3:63:56:11:3e:b3:4c:af:89:42:67:ae: b5:2b:2f:98:12:54:2d:94:5a:07:34:b6:ff:e5:bd:a3:3d:58: b6:52:a3:63:08:84:ea:dc:09:1d:3e:61:e6:0f:10:35:58:f1: 69:b3:80:78:b9:1b:b5:c0:72:4e:70:0f:16:e7:03:3f:d0:01: 03:09:ca:70:21:6a:46:b4:c4:b4:92:ca:d1:75:a6:36:25:4c: bd:0f:45:f9:6c:9c:78:83:5d:38:ad:c5:d0:7e:e6:fb:fe:fe: 6a:9e:72:a3:5d:66:52:32:a2:7d:43:7d:9d:a5:d4:af:80:61: 13:e6:aa:3d:2a:b9:93:0e:99:58:b7:32:b8:97:69:2f:42:69: 4b:96:a4:c2:00:f6:f7:3d:ca:c5:3e:3c:64:ed:6f:ff:11:bd: 4c:08:2d:cc:0a:a1:77:ea:d9:89:72:bc:58:52:68:a0:90:09: e2:88:8d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUxMTAzMDEzNDUyWhcNMjUxMTEwMDEzNDUyWjAYMRYwFAYD VQQDEw02OTA4MDZiYy02NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz425nzGW0khztcmL62I59pF8MPd/NSx0XuWKZETJvlwmYC46Hn9LPiHMly0G z0UVLgl0R19z6/YX7rNojRnLmtlPjOHhiEVAQDWYr3c6fE7RDqVDCxOXNDH4JcZl NKGU1quQfaYCxA/AR+ncfLvf/eQDuA1RyaNuJkyrCnFB1AP/a3XDqf7JVZEWxFkr MhZp5lQvMtXG8dMOl6LbmrO6y1AEhUT3HD2jvy2XdgUfeDfzGQjPNh17yPfTkW/k VjWyfK915RjVCvEQtU1yppTMZhp5NIjMS2zlL+APdjZSNSrcQiLY30wdU7HCdNBd xzug9s9fjLRgLhimVSw7EoOZmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMdP1Iw v+z25YBGNZbA+B7CRd+jMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuYNUNaGWba5sVFgH8IkUq0wUR44bNEbyLVTJIl2Y4BwhS3sgo1+SQ RNCBLtuKvdSM3ueC54LSdvhOed7EbBnDIY+2N2Nv205i7ft4ummzY1YRPrNMr4lC Z661Ky+YElQtlFoHNLb/5b2jPVi2UqNjCITq3AkdPmHmDxA1WPFps4B4uRu1wHJO cA8W5wM/0AEDCcpwIWpGtMS0ksrRdaY2JUy9D0X5bJx4g104rcXQfub7/v5qnnKj XWZSMqJ9Q32dpdSvgGET5qo9KrmTDplYtzK4l2kvQmlLlqTCAPb3PcrFPjxk7W// Eb1MCC3MCqF36tmJcrxYUmigkAniiI0a -----END CERTIFICATE-----Generated at Tue Nov 4 16:02:09 2025 by rpki-client