$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json) Hash identifier: YLXvJkiu/sMe2QMHE9YbWdvNoY64R6sxgyB+iJGeIMc= Subject key identifier: 0D:F3:71:20:71:86:E9:6C:EA:7D:B4:00:12:5A:12:FF:F4:01:7C:70 Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Certificate serial: 0A30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft Manifest number: 0A02 Signing time: Tue 04 Nov 2025 20:00:49 +0000 Manifest this update: Tue 04 Nov 2025 20:00:48 +0000 Manifest next update: Tue 11 Nov 2025 20:00:48 +0000 Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: Pv5DDrokYLRbctQ+I2R7c3yaTAx0J4eo/zkiQOYts3c=) 2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: Fn/SXrKcwrvikRaZqbM9UmvxwM1m/am9+sz8PJUtJeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Validity Not Before: Nov 4 20:00:48 2025 GMT Not After : Nov 11 20:00:48 2025 GMT Subject: CN=690a5b71-0bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:3d:1d:b8:91:bc:12:57:ef:3c:b6:cf:73: f4:eb:c6:0c:40:d3:1f:14:45:53:23:68:23:f8:40: dd:cf:44:1c:c5:da:1d:81:ca:42:c2:0b:7d:24:30: 97:40:55:ab:2c:ec:94:32:c4:be:dc:18:9d:f8:b6: 57:59:3e:74:ec:cb:fd:31:12:2b:ad:8c:2a:29:39: 58:48:3b:9a:37:d5:df:06:71:fc:72:21:b0:a3:13: 11:6c:18:7a:4b:35:98:3d:6a:49:36:df:8b:e2:e1: dc:c7:88:0d:31:a7:72:80:66:b0:44:da:b8:dd:cd: 7c:e2:f2:47:7f:ff:af:9f:74:27:05:2b:af:e7:8d: 84:8b:ca:0b:9c:0d:00:4a:e2:54:5f:08:66:cd:a8: b3:f1:e4:20:28:e4:54:fa:21:51:40:e8:35:f9:3b: c7:82:ec:e5:ea:84:9b:70:93:2b:bd:9c:6c:ee:06: 91:7a:80:1e:99:0c:49:19:7b:1f:59:c3:f1:5a:b8: 5e:e5:60:64:78:a4:4c:ae:66:98:e5:95:fe:5a:59: bf:69:27:cf:09:ad:63:c4:e6:7e:8d:84:a3:4e:70: 3c:0d:bc:1b:6d:c9:55:f8:a3:d7:45:7e:8d:ae:9d: 5b:c8:fd:dd:f1:6d:ae:df:07:4a:20:94:0f:74:e5: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F3:71:20:71:86:E9:6C:EA:7D:B4:00:12:5A:12:FF:F4:01:7C:70 X509v3 Authority Key Identifier: keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:37:48:13:26:2c:04:87:64:80:09:f8:96:a2:d2:1b:e8:87: 7d:36:73:d3:52:0d:de:9e:69:a9:44:a8:37:ce:d0:c5:bf:7b: 7a:31:20:65:1f:23:17:6c:53:15:93:34:f3:02:b6:09:f2:97: 8a:a7:51:a5:00:65:18:d2:78:13:29:8a:43:02:6d:bb:c8:c0: 5f:c4:c2:fc:b6:c2:27:69:b0:93:90:20:c8:1c:6c:0d:99:07: cb:50:cd:ab:f2:96:06:22:ea:f8:50:8c:63:58:dc:d8:04:3c: 9d:f9:24:47:74:4d:81:32:47:98:34:88:cf:1b:00:58:79:a6: 83:25:94:39:84:7d:01:b9:00:94:2b:81:c4:9a:76:42:29:9a: 60:f6:e2:00:0f:32:e5:5b:b4:e0:9c:e2:c6:c2:d5:cc:70:e5: f1:9a:a5:2a:02:eb:81:20:fa:db:c5:ae:10:51:97:77:f5:6c: 91:68:55:f9:43:e5:4b:c8:93:d6:1a:af:4d:55:ed:ab:9d:c0: 2a:d9:82:b0:28:6c:de:1a:25:0d:af:da:dd:e1:3e:1e:3d:c8: 0a:34:6f:aa:0e:a3:51:97:f2:f3:a8:72:86:52:f3:93:60:17: c8:a2:d5:0a:99:a5:7d:7a:ef:b9:32:96:84:99:36:e2:b2:8c: fb:47:a2:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3 MEE2NkEwNTUwHhcNMjUxMTA0MjAwMDQ4WhcNMjUxMTExMjAwMDQ4WjAYMRYwFAYD VQQDEw02OTBhNWI3MS0wYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMU9HbiRvBJX7zy2z3P068YMQNMfFEVTI2gj+EDdz0QcxdodgcpCwgt9JDCX QFWrLOyUMsS+3Bid+LZXWT507Mv9MRIrrYwqKTlYSDuaN9XfBnH8ciGwoxMRbBh6 SzWYPWpJNt+L4uHcx4gNMadygGawRNq43c184vJHf/+vn3QnBSuv542Ei8oLnA0A SuJUXwhmzaiz8eQgKORU+iFRQOg1+TvHguzl6oSbcJMrvZxs7gaReoAemQxJGXsf WcPxWrhe5WBkeKRMrmaY5ZX+Wlm/aSfPCa1jxOZ+jYSjTnA8DbwbbclV+KPXRX6N rp1byP3d8W2u3wdKIJQPdOWJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3zcSBx huls6n20ABJaEv/0AXxwMB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REU3QS9CQzcxRUNDNjhENDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cx T3NUTkw0UFJHd1J3cG1vRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtN0gTJiwEh2SACfiWotIb6Id9NnPTUg3enmmpRKg3ztDFv3t6MSBl HyMXbFMVkzTzArYJ8peKp1GlAGUY0ngTKYpDAm27yMBfxML8tsInabCTkCDIHGwN mQfLUM2r8pYGIur4UIxjWNzYBDyd+SRHdE2BMkeYNIjPGwBYeaaDJZQ5hH0BuQCU K4HEmnZCKZpg9uIADzLlW7TgnOLGwtXMcOXxmqUqAuuBIPrbxa4QUZd39WyRaFX5 Q+VLyJPWGq9NVe2rncAq2YKwKGzeGiUNr9rd4T4ePcgKNG+qDqNRl/LzqHKGUvOT YBfIotUKmaV9eu+5MpaEmTbisoz7R6L4 -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:06 2025 by rpki-client