$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: Ti0i8DKA2YQ7L8bfBr97Ziaa/nZ70sTJ+8YA7aLEfDY= Subject key identifier: 53:89:95:76:06:7F:09:B3:4D:F6:4C:20:C8:23:1D:01:E7:51:20:E5 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 103F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 1027 Signing time: Sun 02 Nov 2025 17:27:42 +0000 Manifest this update: Sun 02 Nov 2025 17:27:41 +0000 Manifest next update: Sun 09 Nov 2025 17:27:41 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: jrLaBiua+d+0AmgyEW4+bXwllXc43qxKLUjWpIxdpcE=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Nov 2 17:27:41 2025 GMT Not After : Nov 9 17:27:41 2025 GMT Subject: CN=6907948d-9324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:4b:bb:9e:42:19:4e:39:76:67:7d:40:18: 97:9c:cc:30:e5:be:40:bc:90:59:0e:eb:f9:d4:b3: 64:3b:cf:32:10:11:1a:2e:96:c9:fa:87:23:1b:3c: df:b3:60:7a:d7:52:e9:d3:c5:53:4f:91:ad:6b:3a: 5a:48:4e:27:67:c7:0c:5f:90:1b:66:67:2e:d0:68: 94:70:0e:b5:4f:7f:b7:7b:fd:58:52:1e:3b:e7:d7: a6:00:16:d5:41:0a:b2:cd:7e:e2:c0:a1:73:92:c2: 62:d2:fc:79:18:c4:3c:a7:59:70:68:25:41:29:81: f1:a5:e3:d4:f0:68:6a:44:4a:0f:20:9d:55:c7:f1: 12:b7:88:8c:d3:f8:41:da:d8:49:7f:32:86:b1:b9: c4:3d:fd:b7:0d:cf:95:a5:ad:1b:a7:8b:c6:b2:51: cf:c7:40:0c:f8:b7:d8:db:39:0d:c0:1d:25:db:55: ab:a5:17:87:74:1e:1c:e4:49:a6:d7:ba:5b:4a:98: 73:4c:0d:ce:fc:66:2d:30:de:34:df:d1:92:c2:04: 65:5c:b9:d1:05:3d:56:9f:4f:31:b2:00:0f:50:4c: ac:4b:e9:56:18:4d:2c:cc:c2:da:3b:6b:e8:af:ce: 58:09:62:07:49:c9:9d:ef:87:f5:ac:6c:3c:84:2f: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:89:95:76:06:7F:09:B3:4D:F6:4C:20:C8:23:1D:01:E7:51:20:E5 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:b0:2b:09:b2:70:21:55:ad:0c:97:63:8e:be:ef:ba:75: 10:bb:a5:b7:b2:fe:16:48:9f:4d:9c:64:34:e2:ef:36:f8:0f: 39:ea:88:74:41:6e:6a:01:54:50:56:58:26:a0:4d:9f:e2:b7: 9f:2c:55:1d:f5:8a:13:46:29:7e:91:e3:0b:4f:58:1b:2a:26: 65:22:5d:01:da:9e:ef:cc:81:02:9e:b4:da:e6:74:bf:e9:12: 2e:8b:d2:bd:c6:27:6e:53:07:52:69:86:da:76:5e:e6:a6:6e: c2:43:59:d2:30:dd:a2:7a:11:60:31:db:1e:c2:c6:73:bd:33: 59:d7:51:7f:85:54:e6:f1:9d:bf:75:37:48:87:a1:94:60:43: 21:70:06:65:56:15:9a:85:06:00:08:2b:6a:ab:89:6c:1a:ba: 58:48:1d:1e:68:33:88:ae:18:32:f2:85:5b:ea:28:1a:79:f7: 40:5f:1d:ad:c8:ac:6f:ec:df:09:c9:b2:28:ee:41:dc:a4:a5: 7f:95:29:93:cf:50:21:38:f5:30:fc:bc:06:af:e0:66:6c:41: 38:39:24:87:59:d0:ad:fe:95:68:33:c4:83:25:c9:f8:6e:e1: 1a:f6:ab:dd:f7:7a:2b:7b:70:15:4f:14:60:94:06:43:df:15: 54:9e:8a:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUxMTAyMTcyNzQxWhcNMjUxMTA5MTcyNzQxWjAYMRYwFAYD VQQDEw02OTA3OTQ4ZC05MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3FLu55CGU45dmd9QBiXnMww5b5AvJBZDuv51LNkO88yEBEaLpbJ+ocjGzzf s2B611Lp08VTT5GtazpaSE4nZ8cMX5AbZmcu0GiUcA61T3+3e/1YUh4759emABbV QQqyzX7iwKFzksJi0vx5GMQ8p1lwaCVBKYHxpePU8GhqREoPIJ1Vx/ESt4iM0/hB 2thJfzKGsbnEPf23Dc+Vpa0bp4vGslHPx0AM+LfY2zkNwB0l21WrpReHdB4c5Emm 17pbSphzTA3O/GYtMN4039GSwgRlXLnRBT1Wn08xsgAPUEysS+lWGE0szMLaO2vo r85YCWIHScmd74f1rGw8hC8SIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOJlXYG fwmzTfZMIMgjHQHnUSDlMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMLArCbJwIVWtDJdjjr7vunUQu6W3sv4WSJ9NnGQ04u82+A856oh0 QW5qAVRQVlgmoE2f4refLFUd9YoTRil+keMLT1gbKiZlIl0B2p7vzIECnrTa5nS/ 6RIui9K9xiduUwdSaYbadl7mpm7CQ1nSMN2iehFgMdsewsZzvTNZ11F/hVTm8Z2/ dTdIh6GUYEMhcAZlVhWahQYACCtqq4lsGrpYSB0eaDOIrhgy8oVb6igaefdAXx2t yKxv7N8JybIo7kHcpKV/lSmTz1AhOPUw/LwGr+BmbEE4OSSHWdCt/pVoM8SDJcn4 buEa9qvd93ore3AVTxRglAZD3xVUnoom -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:48 2025 by rpki-client