$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: zhFj/Gbl5RmgxTnbx/9a1AU5efo05uIizHyRFqKeBPw= Subject key identifier: FC:7A:DB:AD:8A:41:41:12:8B:8E:9E:1A:B1:AD:6E:50:D2:22:C7:A9 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 022E Signing time: Wed 05 Nov 2025 02:03:31 +0000 Manifest this update: Wed 05 Nov 2025 02:03:31 +0000 Manifest next update: Wed 12 Nov 2025 02:03:31 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: 6cFu1upT09ukaR0frJzG9twjoNysCRHH3HEotvtZGFg=) 2: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (hash: 06OWDIqMBpACeuE4oEOzcbVBDwiweM8yZ9MBzLlKdEk=) 3: 38C8C2E6B3FF11F0B056312DC4F9AE02.roa (hash: eGvi9ehXeYJN73mQ/IC0/2k5dRBhN6mtIFIP3LLFsyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Nov 5 02:03:31 2025 GMT Not After : Nov 12 02:03:31 2025 GMT Subject: CN=690ab073-5c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:97:93:c0:c6:9d:ff:d5:c6:62:28:c2:d8: 67:06:64:b9:e2:2f:e7:25:bc:e0:60:e4:73:14:1f: 75:70:16:6d:64:23:66:05:37:55:04:5d:3c:d7:2f: 52:84:6a:a3:b7:75:c4:ca:77:f9:03:94:a0:94:ab: 84:eb:e0:45:24:6c:93:12:ed:69:fc:71:f5:f8:1d: 80:28:03:be:77:36:e3:99:32:19:fc:9e:4c:0d:97: 9f:c6:11:de:78:8a:a6:4e:ed:aa:55:b4:51:71:3f: ae:2c:5d:7e:d0:a5:08:53:b1:0f:0d:44:e1:bb:33: 70:09:65:42:e1:6e:5d:c1:eb:e8:f6:fb:65:96:a0: fc:01:d6:1d:6e:ee:02:1b:3d:b7:78:71:c9:f9:9f: 2c:b4:a5:9a:ee:df:1d:7b:01:e6:b9:ad:8a:3f:84: cf:73:d2:28:f2:c0:ef:3d:5c:73:9f:bb:7a:da:b8: 97:5d:d4:2a:7b:4d:e3:12:92:a9:af:2e:6f:73:23: d6:5b:e9:ae:bc:93:fa:03:ad:58:67:56:83:a5:e8: 77:18:7f:21:e4:51:06:0c:8f:b5:d0:1a:04:b6:92: db:7b:3a:0e:ef:5a:b4:aa:4c:38:c1:5a:77:29:42: 00:9a:b0:20:1e:af:fb:27:a6:29:7e:50:af:c9:6a: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7A:DB:AD:8A:41:41:12:8B:8E:9E:1A:B1:AD:6E:50:D2:22:C7:A9 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a8:de:bd:88:7d:08:f6:85:1a:68:df:52:0c:9c:c1:a9:47: 37:a3:34:82:a7:d9:d0:51:a2:39:cc:8f:93:d4:07:ca:ec:d2: 3b:e5:5b:26:4c:43:5b:6f:f8:6f:68:73:f4:13:17:39:ce:ff: 7e:c3:de:59:1f:c7:82:a2:4f:6e:20:46:1e:ec:09:db:96:3c: df:2a:00:af:de:79:aa:0f:20:b3:ff:ab:6e:f2:47:28:4e:9b: 81:ea:f1:b1:43:fc:bb:2d:14:05:8d:32:53:70:98:71:82:8b: 4b:ee:c4:78:c8:e6:1e:60:29:8f:f1:0c:37:86:27:54:df:07: 3b:b6:93:33:9d:da:50:73:33:e7:3e:5e:cc:64:07:64:91:f9: 16:a7:d0:5e:f1:56:f8:1a:45:80:0d:57:bd:8f:ad:1a:73:b5: 87:eb:2c:66:01:6e:9d:de:86:8f:e7:09:e8:c7:1a:e6:fe:ef: 90:64:40:e6:2f:e5:f6:90:d8:a7:2e:54:00:ee:44:f7:ad:6c: 94:4b:f3:f2:2d:48:40:cf:40:71:f7:3c:5c:c9:c9:07:bc:56: 06:ad:5d:c8:59:f2:08:a3:6d:3c:5c:af:3c:e8:40:ed:b8:1d: 4c:4e:ab:fb:29:4c:5e:d5:c0:90:f2:7c:c5:29:2a:6e:c4:9c: 8b:db:05:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUxMTA1MDIwMzMxWhcNMjUxMTEyMDIwMzMxWjAYMRYwFAYD VQQDEw02OTBhYjA3My01YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZiXk8DGnf/VxmIowthnBmS54i/nJbzgYORzFB91cBZtZCNmBTdVBF081y9S hGqjt3XEynf5A5SglKuE6+BFJGyTEu1p/HH1+B2AKAO+dzbjmTIZ/J5MDZefxhHe eIqmTu2qVbRRcT+uLF1+0KUIU7EPDUThuzNwCWVC4W5dwevo9vtllqD8AdYdbu4C Gz23eHHJ+Z8stKWa7t8dewHmua2KP4TPc9Io8sDvPVxzn7t62riXXdQqe03jEpKp ry5vcyPWW+muvJP6A61YZ1aDpeh3GH8h5FEGDI+10BoEtpLbezoO71q0qkw4wVp3 KUIAmrAgHq/7J6YpflCvyWpwqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx6262K QUESi46eGrGtblDSIsepMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYqN69iH0I9oUaaN9SDJzBqUc3ozSCp9nQUaI5zI+T1AfK7NI75Vsm TENbb/hvaHP0Exc5zv9+w95ZH8eCok9uIEYe7AnbljzfKgCv3nmqDyCz/6tu8kco TpuB6vGxQ/y7LRQFjTJTcJhxgotL7sR4yOYeYCmP8Qw3hidU3wc7tpMzndpQczPn Pl7MZAdkkfkWp9Be8Vb4GkWADVe9j60ac7WH6yxmAW6d3oaP5wnoxxrm/u+QZEDm L+X2kNinLlQA7kT3rWyUS/PyLUhAz0Bx9zxcyckHvFYGrV3IWfIIo208XK886EDt uB1MTqv7KUxe1cCQ8nzFKSpuxJyL2wWL -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:12 2025 by rpki-client