$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: y42N1J5/Kn0/0KmN62g4zjzyC6lUe7xuNOw3SsWorcU= Subject key identifier: 9A:3D:DF:5C:90:7A:38:0F:FC:0C:48:46:6E:7C:F7:00:29:80:03:DD Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 01C9 Signing time: Wed 05 Nov 2025 03:00:58 +0000 Manifest this update: Wed 05 Nov 2025 03:00:57 +0000 Manifest next update: Wed 12 Nov 2025 03:00:57 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: VnA02Ddd+zJR3vN8GfiLsFWf9SsF0dPxb5IIEIPDzzQ=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Nov 5 03:00:57 2025 GMT Not After : Nov 12 03:00:57 2025 GMT Subject: CN=690abdea-8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:22:a1:cc:cc:8b:3a:2d:80:94:1a:61:ff: f9:17:9f:8b:cb:4b:0c:49:98:b8:13:3f:68:87:d8: e6:9e:e6:7a:ca:0e:3e:84:c1:a6:22:60:b9:07:ca: 0e:ba:f1:9f:47:36:13:5c:51:ac:50:53:4e:df:04: 35:7b:96:06:04:d2:77:5b:fb:c2:d3:7f:c4:be:e3: ab:4f:32:7b:71:57:b1:75:ad:fb:6e:00:f0:00:08: 75:9b:58:60:cf:17:bc:d4:3d:f3:2b:b4:43:c0:28: 74:e2:a5:13:2a:cd:a4:30:d9:06:93:65:df:2c:c5: 90:1c:df:ae:4d:5d:0c:a9:e7:2f:8f:2f:37:73:77: e5:b7:80:19:df:4c:0e:bb:03:37:aa:e2:15:c9:3e: cf:da:99:af:59:40:16:be:da:e5:98:08:06:f5:be: 1b:80:91:0b:5a:be:1b:c4:11:0e:ee:68:bb:4b:9e: c6:5f:60:f4:ac:8d:c7:18:fa:1f:fa:7d:02:3d:50: c4:3d:46:21:4b:74:89:df:d8:54:13:2a:1c:80:98: 0e:db:b1:30:e3:52:90:45:41:f8:0b:84:c5:7d:db: 38:20:40:8b:95:30:46:fc:d5:bc:0a:39:55:c0:6a: c0:4c:45:93:e0:3d:72:ba:e5:3e:7e:7b:05:bd:9f: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:DF:5C:90:7A:38:0F:FC:0C:48:46:6E:7C:F7:00:29:80:03:DD X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c2:b9:16:b0:61:b1:b6:6a:44:7d:1c:5a:b3:0c:0b:97:01: 8e:5e:e0:24:d4:5c:18:6f:4c:f3:93:99:34:f8:fa:9a:d4:b0: 74:62:65:24:39:3c:34:b3:92:35:98:c2:87:a5:82:d3:19:8e: 12:d0:da:f1:c4:df:07:9f:0e:55:bc:29:13:fe:54:27:61:09: c9:b6:eb:31:21:f6:86:b7:49:4b:97:92:f2:92:c4:e7:c0:f5: 5b:f4:5d:7a:e0:60:4f:34:88:d1:f3:65:36:00:32:a3:78:1c: 99:fb:0f:e3:b4:fc:67:ce:85:dd:61:2f:ab:a4:3c:fd:57:46: 9d:4d:3f:88:d7:e7:1b:11:bb:d8:64:08:ff:10:04:dc:e0:bc: f2:f1:77:9b:c2:f2:aa:63:8a:f2:d6:8d:9a:ef:95:dc:65:47: 3d:30:4b:11:97:f4:b3:e7:2d:d3:b1:bf:8f:62:1a:bd:a8:51: 8c:09:e0:2b:26:8e:1f:54:87:0c:01:33:10:d9:02:c5:f9:30: 2f:f3:26:9d:b5:bf:1e:fd:c5:2a:46:e6:37:bb:01:30:90:37: 26:d3:c4:d6:2e:f8:36:dd:7b:2f:3e:11:0e:b7:fc:19:c1:08: 6d:4c:fe:86:bc:4d:45:bc:78:bb:cf:93:f4:f6:cd:2d:3a:b2: c0:3a:09:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUxMTA1MDMwMDU3WhcNMjUxMTEyMDMwMDU3WjAYMRYwFAYD VQQDEw02OTBhYmRlYS04ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1QioczMizotgJQaYf/5F5+Ly0sMSZi4Ez9oh9jmnuZ6yg4+hMGmImC5B8oO uvGfRzYTXFGsUFNO3wQ1e5YGBNJ3W/vC03/EvuOrTzJ7cVexda37bgDwAAh1m1hg zxe81D3zK7RDwCh04qUTKs2kMNkGk2XfLMWQHN+uTV0Mqecvjy83c3flt4AZ30wO uwM3quIVyT7P2pmvWUAWvtrlmAgG9b4bgJELWr4bxBEO7mi7S57GX2D0rI3HGPof +n0CPVDEPUYhS3SJ39hUEyocgJgO27Ew41KQRUH4C4TFfds4IECLlTBG/NW8CjlV wGrATEWT4D1yuuU+fnsFvZ/oawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo931yQ ejgP/AxIRm589wApgAPdMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTwrkWsGGxtmpEfRxaswwLlwGOXuAk1FwYb0zzk5k0+Pqa1LB0YmUk OTw0s5I1mMKHpYLTGY4S0NrxxN8Hnw5VvCkT/lQnYQnJtusxIfaGt0lLl5LyksTn wPVb9F164GBPNIjR82U2ADKjeByZ+w/jtPxnzoXdYS+rpDz9V0adTT+I1+cbEbvY ZAj/EATc4Lzy8XebwvKqY4ry1o2a75XcZUc9MEsRl/Sz5y3Tsb+PYhq9qFGMCeAr Jo4fVIcMATMQ2QLF+TAv8yadtb8e/cUqRuY3uwEwkDcm08TWLvg23XsvPhEOt/wZ wQhtTP6GvE1FvHi7z5P09s0tOrLAOgmW -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:10 2025 by rpki-client