$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: ZfpW+T6O96/QgKWQ0LZGQy9F9gk7OLklOIrcqJqed2k= Subject key identifier: 04:42:9E:AE:6C:73:41:2E:64:CF:EB:18:47:AF:A6:9D:AD:37:96:8F Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: 0123 Signing time: Wed 05 Nov 2025 04:52:22 +0000 Manifest this update: Wed 05 Nov 2025 04:52:21 +0000 Manifest next update: Wed 12 Nov 2025 04:52:21 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: Df9xi8L8xfCfs5/B08eFSxrosP9qGCq3dPCQl7wPtJE=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Nov 5 04:52:21 2025 GMT Not After : Nov 12 04:52:21 2025 GMT Subject: CN=690ad805-7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:64:fe:80:e3:74:c5:82:e8:6d:f7:ec:b7: be:23:7a:5d:f6:e1:93:b1:20:b8:6b:23:a8:14:fc: 6c:30:b8:42:e9:83:dd:73:34:9b:b6:35:7e:9a:d3: 2a:48:f8:cb:4e:13:ec:19:7c:28:66:d7:31:46:9f: 37:16:67:69:b6:8e:aa:50:cd:76:ab:29:3d:10:30: 59:6c:e0:b4:c6:bd:bd:d7:db:8a:97:79:a1:1f:84: 8a:bd:13:63:a2:1a:fe:bc:80:f1:cc:a7:fb:63:5f: c5:f4:db:64:b5:ca:de:b5:8b:5a:cc:a4:d3:ab:c3: 29:b9:b5:36:58:14:db:f8:18:06:a1:90:92:b5:34: ab:30:7b:19:d7:25:9a:4d:05:f4:7c:35:e5:55:ac: c9:5f:36:00:55:ce:f1:18:cb:5d:63:95:1d:4c:88: dc:b9:3f:19:30:26:0a:82:4f:82:6b:6d:50:50:a3: 4e:a5:ea:c3:1e:f2:e5:98:35:57:66:b0:33:b6:cd: d5:9c:6e:bb:1a:a2:54:6a:41:09:d7:ce:89:cd:1a: b6:72:2d:8a:a3:6c:5d:3b:4a:f3:65:10:56:44:53: 4b:48:dc:ab:a9:d9:28:11:39:d6:48:6d:bf:8f:de: 80:d7:82:91:f6:b9:aa:4e:a9:6c:3d:01:1d:54:a9: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:9E:AE:6C:73:41:2E:64:CF:EB:18:47:AF:A6:9D:AD:37:96:8F X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:43:f7:85:4a:a6:c2:31:8e:5e:9c:0c:7d:c9:7a:5a:c7: 46:f8:6d:15:ae:dd:57:66:aa:cc:3f:6f:c9:1f:f3:62:d4:1e: 9c:9a:89:b1:42:40:b8:cc:fd:f0:8f:c8:a1:29:75:fa:13:85: 5c:4e:49:7b:29:18:91:83:ca:7a:79:48:76:65:14:2b:39:d3: 9c:54:0e:b3:6c:4d:2f:8f:61:07:00:9d:9a:52:6a:5e:08:55: 25:26:19:78:15:29:0e:6a:9f:fe:e1:5d:63:96:24:aa:15:30: 6a:6b:6d:56:fe:b8:c7:57:98:29:fb:a2:10:bd:de:1e:6e:e8: 51:d8:e3:7d:87:7d:52:e7:59:47:06:6c:80:00:22:39:ba:08: 9f:2f:38:01:17:ed:4a:db:b4:da:cc:1e:05:63:4f:ae:d7:87: 18:93:dc:0b:a2:f2:5f:6d:80:58:02:53:53:b8:cc:6b:37:c4: 74:8c:be:6e:57:05:3c:56:97:17:5a:94:ba:67:a0:81:9e:02: 53:14:73:9b:ed:ef:30:aa:5f:aa:78:76:9a:4f:90:95:07:d7: 9d:71:79:f5:85:9f:77:ea:cb:5d:7a:f7:e4:0b:5c:bc:79:18: a4:0d:09:48:6b:8b:59:c7:14:75:51:42:a8:e2:21:6c:65:0d: c5:33:99:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUxMTA1MDQ1MjIxWhcNMjUxMTEyMDQ1MjIxWjAYMRYwFAYD VQQDEw02OTBhZDgwNS03MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5Vk/oDjdMWC6G337Le+I3pd9uGTsSC4ayOoFPxsMLhC6YPdczSbtjV+mtMq SPjLThPsGXwoZtcxRp83Fmdpto6qUM12qyk9EDBZbOC0xr2919uKl3mhH4SKvRNj ohr+vIDxzKf7Y1/F9NtktcretYtazKTTq8MpubU2WBTb+BgGoZCStTSrMHsZ1yWa TQX0fDXlVazJXzYAVc7xGMtdY5UdTIjcuT8ZMCYKgk+Ca21QUKNOperDHvLlmDVX ZrAzts3VnG67GqJUakEJ186JzRq2ci2Ko2xdO0rzZRBWRFNLSNyrqdkoETnWSG2/ j96A14KR9rmqTqlsPQEdVKmLIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARCnq5s c0EuZM/rGEevpp2tN5aPMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAUP3hUqmwjGOXpwMfcl6WsdG+G0Vrt1XZqrMP2/JH/Ni1B6cmomx QkC4zP3wj8ihKXX6E4VcTkl7KRiRg8p6eUh2ZRQrOdOcVA6zbE0vj2EHAJ2aUmpe CFUlJhl4FSkOap/+4V1jliSqFTBqa21W/rjHV5gp+6IQvd4ebuhR2ON9h31S51lH BmyAACI5ugifLzgBF+1K27TazB4FY0+u14cYk9wLovJfbYBYAlNTuMxrN8R0jL5u VwU8VpcXWpS6Z6CBngJTFHOb7e8wql+qeHaaT5CVB9edcXn1hZ936stdevfkC1y8 eRikDQlIa4tZxxR1UUKo4iFsZQ3FM5l2 -----END CERTIFICATE-----Generated at Wed Nov 5 14:04:52 2025 by rpki-client