$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json) Hash identifier: tzjEtz9v5jWOIKPCp+XEFHm/Air2Inm7Prrz6y792bw= Subject key identifier: E6:44:40:3E:30:9D:93:87:E0:24:5E:14:3D:94:8F:F8:45:58:05:C6 Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2 Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft Manifest number: 2A Signing time: Tue 04 Nov 2025 16:31:44 +0000 Manifest this update: Tue 04 Nov 2025 16:31:44 +0000 Manifest next update: Tue 11 Nov 2025 16:31:44 +0000 Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: 7K+h6vMkoVtBGW8flgInKqkU8Tlc8d/FEMv3Kh28eT8=) 2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: rHMVmuHlGcAJ9rF7Bi/K5y8f08f2S8PIfG+MCG+CXao=) 3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: nsvKh5OpF7zkyCTrJCJ8QZA4sK2TVgvtoo9ZmQ1ZusA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2 Validity Not Before: Nov 4 16:31:44 2025 GMT Not After : Nov 11 16:31:44 2025 GMT Subject: CN=690a2a70-4b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:68:56:5a:89:57:09:e9:c6:ed:5a:43:b8: 7b:95:9e:51:1c:b0:5b:8b:3d:f5:9a:c7:86:4e:a4: 8b:ca:71:2d:51:28:e4:ce:94:6a:ba:3a:f2:09:81: 5d:80:12:65:2d:77:82:7a:d3:f1:64:18:6b:e6:2f: 94:7f:c8:35:27:28:d9:a3:e4:92:d1:80:39:a3:63: cd:0b:9b:90:5d:c0:d8:b2:fa:f4:dc:ca:d7:54:3c: 88:20:aa:90:df:c7:a7:a1:cd:ad:a9:7d:e6:a8:0b: 3e:0e:2a:33:a3:e9:f8:18:3d:86:58:e7:70:ce:dc: bd:9e:9c:d8:2e:8b:31:58:1f:a7:2b:80:1f:65:66: 9b:ed:b4:5e:12:72:e5:4f:0b:db:fa:83:ce:71:d7: 2f:81:d5:e5:19:92:d0:7a:4c:bb:a7:f3:4a:bd:27: 78:2f:c1:f8:da:b6:9d:f8:43:1c:41:cd:54:16:88: 58:1d:64:25:8f:f9:13:1f:e4:56:7f:db:1a:76:7b: ae:d0:9d:f3:1d:39:eb:c3:d3:23:2f:da:ae:b5:67: 6f:8b:b7:a1:2d:e3:d8:5d:dc:76:da:bf:9c:57:c5: 7a:03:41:6f:75:1c:b0:7e:c2:56:67:38:63:a0:17: 31:ab:11:0c:15:e1:cd:da:49:73:7b:4c:03:df:68: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:44:40:3E:30:9D:93:87:E0:24:5E:14:3D:94:8F:F8:45:58:05:C6 X509v3 Authority Key Identifier: keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b5:de:b2:9c:84:8c:86:23:57:bf:3a:7b:49:7e:de:0e:f2: 75:cd:30:c0:d9:81:3a:57:47:ff:8f:01:7d:f8:48:a8:b0:f5: 6a:88:6f:84:17:1c:1b:93:58:f5:6a:3e:35:07:ad:c7:b5:9a: bb:a0:a0:b9:3b:51:81:22:92:78:f7:ea:3a:46:78:45:20:fe: 09:98:7a:53:9e:1a:3a:48:0d:f9:8b:db:b2:e8:bc:b5:7d:82: 4a:43:3a:e3:f9:d4:1a:9d:75:df:b3:c4:b2:a7:a2:5e:d2:f8: bd:5e:68:22:e3:a3:d6:ab:09:ae:e4:c5:dd:31:a7:a3:13:d0: 67:44:18:fc:03:5c:10:5b:4e:b9:ad:d4:0a:79:00:0a:96:e9: 5b:98:74:80:95:a8:4e:83:28:85:e0:d9:a0:e4:e3:c1:66:ed: 86:9c:20:ba:5b:54:47:43:f8:b2:3e:91:6c:93:1b:eb:6c:8d: 50:13:57:9c:96:25:f1:9b:ef:f2:56:eb:33:93:71:00:a3:a0: 2d:82:7b:2e:67:68:1d:11:f3:ce:99:a1:42:97:c7:cc:7d:1a: 24:f2:8b:d0:27:36:48:2c:f2:6b:f5:7e:a3:e6:b5:6d:51:ee: 44:e0:64:35:4f:af:cc:23:da:8e:80:6f:5e:82:b2:fa:d3:c5: 7f:ea:b7:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkFENzExMC8GA1UEBRMoMTdDMjA1MDAzRTJFQjkxRTNEQzQ2RUFBQzg5MEY2RDBC NTBERTZFMjAeFw0yNTExMDQxNjMxNDRaFw0yNTExMTExNjMxNDRaMBgxFjAUBgNV BAMTDTY5MGEyYTcwLTRiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu0WhWWolXCenG7VpDuHuVnlEcsFuLPfWax4ZOpIvKcS1RKOTOlGq6OvIJgV2A EmUtd4J60/FkGGvmL5R/yDUnKNmj5JLRgDmjY80Lm5BdwNiy+vTcytdUPIggqpDf x6ehza2pfeaoCz4OKjOj6fgYPYZY53DO3L2enNguizFYH6crgB9lZpvttF4ScuVP C9v6g85x1y+B1eUZktB6TLun80q9J3gvwfjatp34QxxBzVQWiFgdZCWP+RMf5FZ/ 2xp2e67QnfMdOevD0yMv2q61Z2+Lt6Et49hd3Hbav5xXxXoDQW91HLB+wlZnOGOg FzGrEQwV4c3aSXN7TAPfaE+JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5kRAPjCd k4fgJF4UPZSP+EVYBcYwHwYDVR0jBBgwFoAUF8IFAD4uuR49xG6qyJD20LUN5uIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QUQ3Lzk4Q0U4ODEwN0Y3 NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0OXhHNnF5SkQyMExVTjV1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjhJRkFENHV1UjQ5eEc2cXlKRDIwTFVONXVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QUQ3Lzk4Q0U4ODEwN0Y3NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0 OXhHNnF5SkQyMExVTjV1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKC13rKchIyGI1e/OntJft4O8nXNMMDZgTpXR/+PAX34SKiw9WqIb4QX HBuTWPVqPjUHrce1mrugoLk7UYEiknj36jpGeEUg/gmYelOeGjpIDfmL27LovLV9 gkpDOuP51Bqddd+zxLKnol7S+L1eaCLjo9arCa7kxd0xp6MT0GdEGPwDXBBbTrmt 1Ap5AAqW6VuYdICVqE6DKIXg2aDk48Fm7YacILpbVEdD+LI+kWyTG+tsjVATV5yW JfGb7/JW6zOTcQCjoC2Cey5naB0R886ZoUKXx8x9GiTyi9AnNkgs8mv1fqPmtW1R 7kTgZDVPr8wj2o6Ab16CsvrTxX/qtzo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:08:04 2025 by rpki-client