$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: dVqaEgODJ5x3U/UYvqE4SzU0frlOykbfeInMD4qfBEc= Subject key identifier: D5:8E:67:3E:BF:EA:B7:CE:7C:7F:69:47:E4:F2:D2:A7:44:ED:A2:2A Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 0425 Signing time: Wed 05 Nov 2025 00:26:13 +0000 Manifest this update: Wed 05 Nov 2025 00:26:13 +0000 Manifest next update: Wed 12 Nov 2025 00:26:13 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: 1nYs2jOH8bNR0WSwNPVdNRaYm2DREu998CQWSuR1Z14=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Nov 5 00:26:13 2025 GMT Not After : Nov 12 00:26:13 2025 GMT Subject: CN=690a99a5-aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:ac:f8:8e:d9:38:28:f9:e2:d5:e2:de:5e: 75:06:f7:85:6c:ae:8e:12:1e:39:02:58:67:9b:f3: a4:73:a5:15:e0:d8:1e:20:03:87:02:00:d7:72:af: 5e:52:01:c0:09:b8:0d:b1:a3:3b:6f:25:a1:0a:51: 06:a8:dc:ce:f3:73:c7:6d:7c:4a:3e:4d:e2:18:21: dc:77:d1:c5:5b:17:1e:a7:89:95:24:99:6b:51:c7: ce:42:a5:e0:a7:4d:ae:c7:4d:1f:fe:a7:57:12:aa: 25:5a:43:69:dd:b9:09:16:16:33:43:06:27:35:94: 15:d1:61:71:84:68:42:75:1a:e0:c3:49:f6:3e:1b: a7:1b:59:a5:f7:ad:c8:7b:2b:14:28:98:6d:e8:4a: 80:67:95:a6:3f:a0:b0:df:a1:48:02:b9:da:a7:20: 36:ec:ce:82:0e:43:00:ff:a7:18:61:66:74:94:81: 79:b2:33:8d:06:86:dc:57:50:36:f3:84:6d:42:95: 64:35:e4:ac:d1:89:34:fc:a1:2e:69:c3:f6:30:87: 4c:6e:15:25:0c:27:91:a7:20:74:20:b2:88:e9:e7: 4e:4c:d2:60:89:d9:12:4f:a9:f8:5b:02:31:a5:f5: c1:8e:df:08:f8:ca:76:23:4a:7f:e0:e2:26:e3:5e: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8E:67:3E:BF:EA:B7:CE:7C:7F:69:47:E4:F2:D2:A7:44:ED:A2:2A X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6d:85:9d:19:c5:1f:eb:1f:ca:4a:20:b7:b6:39:d4:e6:36: 84:55:ad:0e:99:78:91:55:b0:0e:84:38:bf:87:8f:40:22:9d: ee:b2:a9:b5:5c:41:7e:73:41:68:83:15:6c:8a:1e:f4:3d:8b: 4d:c1:85:6b:b6:92:71:84:0d:1a:d0:42:89:ac:da:ff:38:79: 30:7b:0f:06:b0:8d:29:d6:c7:58:23:ec:76:c6:a2:d1:d0:8a: 92:cd:20:b2:27:a9:8e:de:91:c7:be:9a:56:5f:ae:05:01:41: 32:fc:92:48:dd:c1:c0:f3:2e:99:80:fe:bc:6c:ca:31:38:71: 5e:f5:e5:f7:54:e4:14:24:bb:84:6c:e6:fd:44:27:f0:43:3b: a6:05:3b:7e:49:e8:78:b9:04:56:5d:47:f8:34:eb:1e:79:e8: 0e:88:dc:82:91:3a:b7:ce:ac:d3:ef:85:1d:08:26:ff:f0:83: d3:f7:00:bd:82:49:40:b1:ae:57:a8:61:4a:6a:b1:db:9b:97: 3b:32:fe:52:31:4e:a6:87:d3:07:0c:cb:91:cd:3c:d0:d3:a9: df:52:1d:60:5d:71:39:cd:12:65:ac:ae:91:6a:ea:dc:21:34: 00:66:0c:71:ac:89:40:42:5c:48:e5:6e:e2:a8:7b:cd:df:2b: 5f:7d:3d:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUxMTA1MDAyNjEzWhcNMjUxMTEyMDAyNjEzWjAYMRYwFAYD VQQDEw02OTBhOTlhNS1hYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09Ws+I7ZOCj54tXi3l51BveFbK6OEh45Alhnm/Okc6UV4NgeIAOHAgDXcq9e UgHACbgNsaM7byWhClEGqNzO83PHbXxKPk3iGCHcd9HFWxcep4mVJJlrUcfOQqXg p02ux00f/qdXEqolWkNp3bkJFhYzQwYnNZQV0WFxhGhCdRrgw0n2PhunG1ml963I eysUKJht6EqAZ5WmP6Cw36FIArnapyA27M6CDkMA/6cYYWZ0lIF5sjONBobcV1A2 84RtQpVkNeSs0Yk0/KEuacP2MIdMbhUlDCeRpyB0ILKI6edOTNJgidkST6n4WwIx pfXBjt8I+Mp2I0p/4OIm415rswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWOZz6/ 6rfOfH9pR+Ty0qdE7aIqMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAebYWdGcUf6x/KSiC3tjnU5jaEVa0OmXiRVbAOhDi/h49AIp3usqm1 XEF+c0FogxVsih70PYtNwYVrtpJxhA0a0EKJrNr/OHkwew8GsI0p1sdYI+x2xqLR 0IqSzSCyJ6mO3pHHvppWX64FAUEy/JJI3cHA8y6ZgP68bMoxOHFe9eX3VOQUJLuE bOb9RCfwQzumBTt+Seh4uQRWXUf4NOseeegOiNyCkTq3zqzT74UdCCb/8IPT9wC9 gklAsa5XqGFKarHbm5c7Mv5SMU6mh9MHDMuRzTzQ06nfUh1gXXE5zRJlrK6Raurc ITQAZgxxrIlAQlxI5W7iqHvN3ytffT2+ -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:30 2025 by rpki-client