$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: BRjChbUvtR4GpVw/EYytvht3UHDgygU1w+pflhPjgNI= Subject key identifier: 90:AE:22:7C:0E:F6:B9:A6:3C:26:78:3B:CB:C6:98:97:31:06:5E:8F Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0A1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0A16 Signing time: Tue 04 Nov 2025 19:52:52 +0000 Manifest this update: Tue 04 Nov 2025 19:52:52 +0000 Manifest next update: Tue 11 Nov 2025 19:52:52 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: +9CwZ2NrKR8KB0zCn4NOFcnuA+Y30ZhjFFx6DzY1BIY=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: ClQj70D4QsMeSPs5XhoDWoqTMjGb5jdaAiwIUHB/7eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2589 (0xa1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Nov 4 19:52:52 2025 GMT Not After : Nov 11 19:52:52 2025 GMT Subject: CN=690a5994-e2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:a5:97:62:ca:0c:79:38:cc:4e:91:47:99: 9e:ac:5d:2d:52:de:ef:f7:da:bf:92:fe:cb:ef:30: d6:a8:31:e9:c1:1e:52:c5:ca:95:cc:b1:8f:7d:f6: 99:09:49:43:5f:1d:e2:e6:fe:01:5c:1f:42:02:1b: ee:ad:32:84:d2:83:2e:b7:c7:d3:54:40:3e:16:74: 5d:67:91:32:62:ca:7c:d8:6d:be:f3:6b:4f:70:01: 9f:ae:de:74:85:b6:ce:3a:6e:2d:dc:9b:62:9d:fb: 83:55:ea:3d:69:05:54:91:50:a9:c9:c9:fb:30:4e: 7e:8c:1c:37:38:c1:b8:12:7d:44:0a:ef:ad:08:da: 91:97:8e:ae:4a:2d:c6:93:35:ed:5b:dc:ce:aa:81: 78:cf:23:9d:25:78:64:9d:3c:b5:7f:7a:f7:d0:c5: 33:34:57:2e:84:45:41:56:d2:51:29:94:b0:f9:a2: f6:71:8a:b6:e9:40:2b:60:cd:90:c6:83:23:6d:ef: 94:0d:aa:45:9b:da:5a:ef:a0:b5:70:41:95:c1:f0: ce:55:e4:a7:75:6a:52:ce:c9:b7:f0:2a:bd:13:c3: 20:57:32:9b:51:5a:4d:83:88:f2:5a:69:54:34:bc: 68:1c:e4:e6:7f:b3:ae:68:99:1a:fc:a2:a6:29:ce: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AE:22:7C:0E:F6:B9:A6:3C:26:78:3B:CB:C6:98:97:31:06:5E:8F X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:22:eb:d2:53:0b:3d:88:fa:79:f2:b8:70:ed:f5:bb:c8: ff:04:a8:ee:e7:20:ee:e9:b0:a0:52:0a:51:1c:52:da:d7:01: cb:94:dd:1c:c8:da:1d:29:31:56:e1:65:00:7d:57:0a:60:3f: 93:e3:6a:08:18:56:97:f2:bc:3a:eb:95:85:7b:ce:df:c8:1d: 55:77:92:fd:1b:65:59:61:3d:30:7f:cf:e8:e1:0b:e3:13:70: 1c:4a:12:f5:b8:d2:5b:31:ec:25:95:11:17:da:0a:7f:c3:33: 28:17:1f:96:af:46:df:64:e2:47:9e:07:a8:5d:4f:b5:68:cf: 63:76:54:f1:a4:ba:dd:90:8f:af:db:ec:31:50:38:93:42:a2: a8:3e:60:f2:ad:9a:4d:4d:4d:51:90:6b:99:5f:97:90:a2:ba: cb:7b:20:bb:28:88:cb:0b:4b:6b:39:1b:8a:6c:03:89:fd:7e: f2:54:96:da:e9:fa:fe:16:5d:64:b2:5e:3b:50:1b:82:6b:e5: e2:bb:b0:05:49:a7:d3:7e:9f:06:e6:36:7a:63:14:2d:7c:b7: aa:17:eb:5f:d9:e0:6c:cf:1b:f4:4b:2e:d0:cf:a9:b3:42:02: 1a:a4:d8:5c:b8:b6:6a:b9:9c:41:5a:9c:18:fa:d7:68:38:de: 10:62:db:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUxMTA0MTk1MjUyWhcNMjUxMTExMTk1MjUyWjAYMRYwFAYD VQQDEw02OTBhNTk5NC1lMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lill2LKDHk4zE6RR5merF0tUt7v99q/kv7L7zDWqDHpwR5SxcqVzLGPffaZ CUlDXx3i5v4BXB9CAhvurTKE0oMut8fTVEA+FnRdZ5EyYsp82G2+82tPcAGfrt50 hbbOOm4t3JtinfuDVeo9aQVUkVCpycn7ME5+jBw3OMG4En1ECu+tCNqRl46uSi3G kzXtW9zOqoF4zyOdJXhknTy1f3r30MUzNFcuhEVBVtJRKZSw+aL2cYq26UArYM2Q xoMjbe+UDapFm9pa76C1cEGVwfDOVeSndWpSzsm38Cq9E8MgVzKbUVpNg4jyWmlU NLxoHOTmf7OuaJka/KKmKc4tLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCuInwO 9rmmPCZ4O8vGmJcxBl6PMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeASLr0lMLPYj6efK4cO31u8j/BKju5yDu6bCgUgpRHFLa1wHLlN0c yNodKTFW4WUAfVcKYD+T42oIGFaX8rw665WFe87fyB1Vd5L9G2VZYT0wf8/o4Qvj E3AcShL1uNJbMewllREX2gp/wzMoFx+Wr0bfZOJHngeoXU+1aM9jdlTxpLrdkI+v 2+wxUDiTQqKoPmDyrZpNTU1RkGuZX5eQorrLeyC7KIjLC0trORuKbAOJ/X7yVJba 6fr+Fl1ksl47UBuCa+Xiu7AFSafTfp8G5jZ6YxQtfLeqF+tf2eBszxv0Sy7Qz6mz QgIapNhcuLZquZxBWpwY+tdoON4QYtt6 -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:39 2025 by rpki-client