$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: 1SgKEsOpQV35I8Cjq8m3iM6CDgKf8nLrtLR+PXGkXnw= Subject key identifier: D5:B8:C8:6D:B6:B6:43:73:E7:C9:B1:6E:8F:D1:24:87:DB:1C:C6:45 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: FC Signing time: Wed 05 Nov 2025 05:18:05 +0000 Manifest this update: Wed 05 Nov 2025 05:18:04 +0000 Manifest next update: Wed 12 Nov 2025 05:18:04 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: pglZI3N8sgjAdTYFgxtVKa61e7TIiLBpbpmedXezAOc=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: N6wnq+SiTT7KZAm9ihuMhFBquoYx3YiKfww2FuMhesA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Nov 5 05:18:04 2025 GMT Not After : Nov 12 05:18:04 2025 GMT Subject: CN=690ade0c-2147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:b7:b1:4b:37:cd:c1:de:c8:4b:b6:db:62: 55:5b:00:ab:05:88:57:9e:9c:aa:1e:51:b7:74:97: f1:51:af:ee:c5:1e:36:4a:3c:b0:92:46:51:76:06: 83:6f:67:2b:02:5c:9d:23:d4:a1:a5:c9:1a:be:45: 09:fa:c7:81:e1:37:d3:3b:3e:72:b3:7b:81:a6:a3: 08:35:4b:8d:21:89:ac:6c:4f:35:30:40:82:54:a4: 5b:c0:5a:e9:96:7b:2c:95:45:06:00:99:e0:26:8a: 43:cd:d6:da:e2:01:cf:49:dc:73:67:7f:31:55:9b: 02:a2:75:e9:23:6f:97:21:c2:23:3f:1f:82:e7:0f: 0b:81:15:01:64:80:b6:a3:fe:b3:4d:3b:fd:15:d2: 47:57:f8:b7:26:ef:50:bd:6b:6e:1a:62:dd:a4:ad: e4:23:5e:1d:73:d5:c3:7a:cc:86:7b:d2:fe:70:b2: 0f:d2:68:ee:67:e6:1f:d6:05:c0:00:bd:17:f6:51: 33:4b:9c:7a:13:25:b6:7c:ff:af:0d:eb:0c:17:2c: 1c:3d:8d:9d:b4:e6:5e:3c:88:3b:7a:6a:8b:84:d5: 5b:51:54:c1:fe:8d:8d:99:80:0d:9b:2d:2c:ee:32: 5a:e2:48:f5:e6:c0:99:bf:51:77:c7:e3:6b:26:5a: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:C8:6D:B6:B6:43:73:E7:C9:B1:6E:8F:D1:24:87:DB:1C:C6:45 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d3:eb:c4:b8:8f:40:98:e2:80:5e:8c:00:d1:4e:a1:9a:ee: 08:23:72:82:59:db:c3:2d:d6:38:0e:a1:2e:bf:12:a1:28:49: ba:83:cc:5c:ea:0f:00:f5:94:f9:76:c2:30:27:62:e1:42:97: e8:6a:1c:ff:67:5c:cd:90:e6:6b:d3:53:13:5b:6c:06:84:20: 07:0f:5a:83:34:92:3a:4a:8d:f5:39:5b:bf:f5:51:be:b8:55: b6:06:34:8f:a8:9a:7b:65:19:92:80:44:c4:bd:00:3a:6d:56: d2:fc:8c:bf:4f:f9:9e:2b:45:cf:61:fa:d7:16:94:00:7d:48: ee:b1:15:1f:8c:96:c7:77:10:6b:d9:db:bf:96:81:7b:18:b9: 29:a5:0a:76:6b:23:21:d9:37:17:52:72:e6:7c:23:12:7d:a9: aa:51:c1:91:d9:42:ca:ba:da:9e:11:54:f8:d0:40:8c:0d:07: a6:1a:c7:ca:cb:1c:0d:a4:35:09:c0:de:72:36:78:c5:7b:34: 7d:b9:69:3a:12:5c:e0:d9:28:0c:ee:74:ce:f5:8b:3d:e4:fe: 38:7a:e8:21:f7:67:5a:85:5a:17:8d:b1:ba:14:cb:43:ab:21: cd:cd:ff:5d:bc:88:c9:ab:cc:71:64:7d:a7:4f:ff:5b:c7:54: 83:96:a1:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUxMTA1MDUxODA0WhcNMjUxMTEyMDUxODA0WjAYMRYwFAYD VQQDEw02OTBhZGUwYy0yMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLm3sUs3zcHeyEu222JVWwCrBYhXnpyqHlG3dJfxUa/uxR42SjywkkZRdgaD b2crAlydI9ShpckavkUJ+seB4TfTOz5ys3uBpqMINUuNIYmsbE81MECCVKRbwFrp lnsslUUGAJngJopDzdba4gHPSdxzZ38xVZsConXpI2+XIcIjPx+C5w8LgRUBZIC2 o/6zTTv9FdJHV/i3Ju9QvWtuGmLdpK3kI14dc9XDesyGe9L+cLIP0mjuZ+Yf1gXA AL0X9lEzS5x6EyW2fP+vDesMFywcPY2dtOZePIg7emqLhNVbUVTB/o2NmYANmy0s 7jJa4kj15sCZv1F3x+NrJlospwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNW4yG22 tkNz58mxbo/RJIfbHMZFMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK0+vEuI9AmOKAXowA0U6hmu4II3KCWdvDLdY4DqEuvxKhKEm6g8xc 6g8A9ZT5dsIwJ2LhQpfoahz/Z1zNkOZr01MTW2wGhCAHD1qDNJI6So31OVu/9VG+ uFW2BjSPqJp7ZRmSgETEvQA6bVbS/Iy/T/meK0XPYfrXFpQAfUjusRUfjJbHdxBr 2du/loF7GLkppQp2ayMh2TcXUnLmfCMSfamqUcGR2ULKutqeEVT40ECMDQemGsfK yxwNpDUJwN5yNnjFezR9uWk6Elzg2SgM7nTO9Ys95P44eugh92dahVoXjbG6FMtD qyHNzf9dvIjJq8xxZH2nT/9bx1SDlqEe -----END CERTIFICATE-----Generated at Wed Nov 5 20:08:42 2025 by rpki-client