$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json) Hash identifier: aREb5TOWg7d79foYoZdGxnYaUFGgpa7UyeSotGOeFwI= Subject key identifier: 17:82:5B:4B:C6:1A:A3:D3:76:C5:23:3E:D4:15:4E:22:84:70:85:D6 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 1961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft Manifest number: 1931 Signing time: Sun 02 Nov 2025 16:27:19 +0000 Manifest this update: Sun 02 Nov 2025 16:27:19 +0000 Manifest next update: Sun 09 Nov 2025 16:27:19 +0000 Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: mW2hljnrLC1ppu9Tszq7COqOUOHu4KOK0T030qlZ1Dg=) 2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: afMkh+nThhAtZWr5uZa/M537SW67iX+SaWwO2XmeAUU=) 3: D3FDB470817311EFA6D1742FC4F9AE02.roa (hash: 4G7ZYo5KeEtsAfgPO4X6TXioM+QJOrK11Ezfknn68Qk=) 4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: M+kVidWeNxQJxyYqpjX+UThdH/HC0I70LM24xp9pvfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6497 (0x1961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Nov 2 16:27:19 2025 GMT Not After : Nov 9 16:27:19 2025 GMT Subject: CN=69078667-a857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:c0:80:66:e3:ac:0e:82:d7:7d:b7:81:80: f2:6d:97:73:66:8e:fd:b2:4a:5d:5e:70:6b:bd:8f: 9a:f4:c5:87:61:49:63:2c:eb:03:a4:1d:0c:36:64: 0c:14:4f:b9:fe:38:31:8d:d2:b0:34:c7:eb:a1:18: 2e:0f:18:1a:85:88:5a:af:86:81:db:cd:99:ac:e9: be:37:eb:6f:6a:2e:58:09:07:1a:37:aa:aa:f8:35: 38:96:04:04:9d:12:8e:02:19:0b:01:9e:7a:87:b4: 09:f3:57:ba:fa:fa:cd:bf:e6:f5:b5:ee:be:35:90: ad:03:fa:57:c8:8a:e2:5e:6a:ec:d4:96:38:36:e9: 82:8f:05:1a:6d:25:04:dc:45:b6:0a:6d:71:15:0f: 6f:78:26:7d:2a:40:60:61:10:1c:0f:ed:c3:7b:3d: c7:b1:05:02:62:dd:cf:16:7a:59:21:fd:5c:43:94: 81:82:fa:59:a3:e0:47:6c:77:22:02:79:7e:97:64: 3c:85:dc:22:f3:01:17:85:b5:bc:c4:da:01:95:dd: b2:3a:36:e8:58:c0:7e:5d:0c:23:88:b4:d4:f1:d2: 7e:df:41:ba:30:6f:ac:dc:c3:9b:a4:20:65:c0:aa: 4d:15:22:66:93:2e:5d:8c:51:58:f0:93:bd:76:c2: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:5B:4B:C6:1A:A3:D3:76:C5:23:3E:D4:15:4E:22:84:70:85:D6 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c1:5c:51:43:5e:21:c6:83:d6:85:fc:21:73:99:41:4f:cf: ed:90:a3:89:d8:a1:23:48:c6:f9:c9:bf:06:b1:bb:57:78:5c: d4:a1:ec:f1:1c:9b:0c:12:08:ae:30:5f:28:28:a1:ba:f9:42: 5b:ff:0a:cb:2c:92:4f:98:36:4f:c0:e7:0b:f6:47:12:09:1e: 1e:83:17:a0:0c:94:52:12:c8:bd:e0:78:ff:b2:3d:4c:e6:a6: 2c:23:0a:30:3d:67:9a:d6:ee:f6:4d:5c:a2:58:29:b9:6b:24: ac:a1:78:b7:b0:ab:09:ae:53:b3:c5:1d:d6:00:a3:65:2a:94: a4:69:b8:ff:de:21:8c:3e:e6:b3:1a:45:52:2d:9f:7c:92:2b: b7:cc:2b:b3:94:91:d2:9f:27:d4:6c:9a:f3:8e:84:39:9b:9b: fd:57:55:bb:3e:5c:4d:f3:ff:e4:a2:08:a4:13:f6:9d:03:f3: 1a:6e:46:c3:43:04:05:85:c2:1d:c4:16:00:01:aa:bd:f2:61: 0f:22:6a:1c:3a:88:c0:da:d8:71:00:37:d8:14:bd:db:4b:d0: 5e:01:02:ca:47:c5:06:ce:0d:fc:a2:57:e0:49:99:b2:b3:9e: 57:13:54:86:84:a9:82:df:d5:04:7b:c5:ec:bb:fe:a7:3a:62: 32:e2:ac:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjUxMTAyMTYyNzE5WhcNMjUxMTA5MTYyNzE5WjAYMRYwFAYD VQQDEw02OTA3ODY2Ny1hODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN3AgGbjrA6C1323gYDybZdzZo79skpdXnBrvY+a9MWHYUljLOsDpB0MNmQM FE+5/jgxjdKwNMfroRguDxgahYhar4aB282ZrOm+N+tvai5YCQcaN6qq+DU4lgQE nRKOAhkLAZ56h7QJ81e6+vrNv+b1te6+NZCtA/pXyIriXmrs1JY4NumCjwUabSUE 3EW2Cm1xFQ9veCZ9KkBgYRAcD+3Dez3HsQUCYt3PFnpZIf1cQ5SBgvpZo+BHbHci Anl+l2Q8hdwi8wEXhbW8xNoBld2yOjboWMB+XQwjiLTU8dJ+30G6MG+s3MObpCBl wKpNFSJmky5djFFY8JO9dsL+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeCW0vG GqPTdsUjPtQVTiKEcIXWMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI d0lkWHplZnlIc1BQS2s1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAawVxRQ14hxoPWhfwhc5lBT8/tkKOJ2KEjSMb5yb8GsbtXeFzUoezx HJsMEgiuMF8oKKG6+UJb/wrLLJJPmDZPwOcL9kcSCR4egxegDJRSEsi94Hj/sj1M 5qYsIwowPWea1u72TVyiWCm5aySsoXi3sKsJrlOzxR3WAKNlKpSkabj/3iGMPuaz GkVSLZ98kiu3zCuzlJHSnyfUbJrzjoQ5m5v9V1W7PlxN8//kogikE/adA/MabkbD QwQFhcIdxBYAAaq98mEPImocOojA2thxADfYFL3bS9BeAQLKR8UGzg38olfgSZmy s55XE1SGhKmC39UEe8Xsu/6nOmIy4qzv -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:01 2025 by rpki-client