$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: 82ydSvA89ulD3KHYF/YiyVvns4d7Bu9cEcSiw6GoOLg= Subject key identifier: BE:64:F0:76:2D:CF:63:DE:01:BF:85:82:D5:33:FF:D6:84:EF:13:F3 Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: C2 Signing time: Mon 03 Nov 2025 05:54:46 +0000 Manifest this update: Mon 03 Nov 2025 05:54:46 +0000 Manifest next update: Mon 10 Nov 2025 05:54:46 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: fOLJAAQVuh+0KS/O+3LnnFG1O4Fr9FupRNbUvIEgvGo=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Nov 3 05:54:46 2025 GMT Not After : Nov 10 05:54:46 2025 GMT Subject: CN=690843a6-fe4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:0a:62:f9:4b:4b:11:e2:dd:e2:5b:7d:1c: ab:0e:3f:c9:6a:30:37:e9:f6:78:0d:e3:df:3a:90: c0:f9:0f:b2:03:0a:cd:ba:8f:6c:ca:7f:2a:47:c7: cb:c0:d9:35:38:1c:01:25:e4:c0:31:f1:76:b2:e3: b3:9f:b2:8f:a4:75:02:ad:db:60:05:94:ef:38:03: 57:86:40:8d:c8:6a:7c:16:c8:9b:3b:01:e0:54:13: b1:bd:ae:f8:11:ca:0b:1a:1f:5c:ad:47:a2:c8:fa: 6e:75:90:80:1f:63:ac:8f:fd:b1:8f:3f:01:7c:27: 8e:06:b6:a3:2c:be:a3:13:07:4b:ec:17:54:6f:87: 9c:f2:bc:7c:a8:23:33:a9:9b:59:49:48:f7:c4:47: e1:de:a7:21:99:1f:73:e0:2c:00:e3:8e:03:be:4f: 6e:9b:0a:62:30:77:3f:bb:dc:84:c8:67:e2:46:68: 65:8f:d6:96:72:5a:18:90:c3:0b:a2:69:7e:fc:05: 10:d3:7b:54:9e:f8:f9:7d:43:29:56:4b:53:b1:4f: 29:f3:b9:c8:11:b8:11:c8:43:b4:c6:00:d3:66:42: b7:5b:cd:cc:00:a1:cd:32:e9:1d:f4:80:39:2d:b9: 8e:59:29:e2:cc:f7:78:32:58:d8:2a:f4:0f:76:2d: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:64:F0:76:2D:CF:63:DE:01:BF:85:82:D5:33:FF:D6:84:EF:13:F3 X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fb:1d:d9:ca:8a:b0:7e:8d:0a:40:02:1a:9b:77:a0:ab:40: e7:a0:65:bd:72:d3:10:16:9d:c3:5f:db:d2:80:88:87:5c:65: 1a:d9:cb:58:58:38:93:af:79:ff:43:df:b7:ad:32:66:2d:cb: 07:f8:56:c4:c3:3d:32:46:b9:d7:36:70:fb:db:89:28:59:74: 30:1b:2b:20:68:25:e0:12:9b:78:45:9e:08:ee:c4:13:05:fa: b0:e0:83:51:6d:91:2c:c9:58:98:08:b9:61:08:32:4f:4a:c1: da:7a:05:d2:71:1a:c4:32:f4:98:cc:60:d5:2e:3d:a0:7a:cf: f8:cc:cd:92:b7:f3:04:da:32:aa:8f:8c:86:33:80:98:98:b8: be:3d:ff:4e:e2:cf:82:8a:7f:0a:00:6f:bd:b8:8b:61:7b:86: fe:51:ea:82:18:3f:44:ce:3e:28:13:7f:f7:1a:1a:a5:e0:fa: 15:22:71:1e:4b:f8:d0:98:ae:dc:bd:95:a7:2c:fc:7a:cd:46: f9:16:ab:3b:f5:99:b2:dd:11:24:57:22:e5:31:01:9f:6f:b4: 80:c8:ca:1f:56:28:a3:84:0f:d4:9f:49:1d:49:25:2a:44:56: ea:88:c9:cd:6e:b0:ee:75:3a:60:67:1f:bf:b5:13:9e:b6:46: 4f:ae:d3:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjUxMTAzMDU1NDQ2WhcNMjUxMTEwMDU1NDQ2WjAYMRYwFAYD VQQDEw02OTA4NDNhNi1mZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc4KYvlLSxHi3eJbfRyrDj/JajA36fZ4DePfOpDA+Q+yAwrNuo9syn8qR8fL wNk1OBwBJeTAMfF2suOzn7KPpHUCrdtgBZTvOANXhkCNyGp8FsibOwHgVBOxva74 EcoLGh9crUeiyPpudZCAH2Osj/2xjz8BfCeOBrajLL6jEwdL7BdUb4ec8rx8qCMz qZtZSUj3xEfh3qchmR9z4CwA444Dvk9umwpiMHc/u9yEyGfiRmhlj9aWcloYkMML oml+/AUQ03tUnvj5fUMpVktTsU8p87nIEbgRyEO0xgDTZkK3W83MAKHNMukd9IA5 LbmOWSnizPd4MljYKvQPdi0vQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5k8HYt z2PeAb+FgtUz/9aE7xPzMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV+x3Zyoqwfo0KQAIam3egq0DnoGW9ctMQFp3DX9vSgIiHXGUa2ctY WDiTr3n/Q9+3rTJmLcsH+FbEwz0yRrnXNnD724koWXQwGysgaCXgEpt4RZ4I7sQT Bfqw4INRbZEsyViYCLlhCDJPSsHaegXScRrEMvSYzGDVLj2ges/4zM2St/ME2jKq j4yGM4CYmLi+Pf9O4s+Cin8KAG+9uIthe4b+UeqCGD9Ezj4oE3/3Ghql4PoVInEe S/jQmK7cvZWnLPx6zUb5Fqs79Zmy3REkVyLlMQGfb7SAyMofViijhA/Un0kdSSUq RFbqiMnNbrDudTpgZx+/tROetkZPrtNT -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:36 2025 by rpki-client