$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json) Hash identifier: UWwEi13q2VYgNasFBzQmZb1OQnLXJHwBa531knFmfzw= Subject key identifier: 1D:A6:32:7C:14:40:36:14:98:F9:7E:9C:F4:50:A0:1E:1B:AD:DB:6E Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft Manifest number: 01D9 Signing time: Wed 05 Nov 2025 03:03:13 +0000 Manifest this update: Wed 05 Nov 2025 03:03:12 +0000 Manifest next update: Wed 12 Nov 2025 03:03:12 +0000 Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: OKyv0rxlnFYhQCiefW79iAe0YKVxkyalPwUCJz7hwM8=) 2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: aVU9JOEv5GYjCvTVv3rm3CjlRISRbtbgFsAh8ZW2TaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Validity Not Before: Nov 5 03:03:12 2025 GMT Not After : Nov 12 03:03:12 2025 GMT Subject: CN=690abe71-8dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2a:48:cd:e5:1f:f4:f0:1c:4c:b3:5b:76:b0: ef:f1:ed:e4:78:94:5e:04:f8:e1:28:4f:dc:36:1a: 8c:4a:d2:74:c8:cd:ad:ff:1a:1f:cb:3f:f0:93:7a: 58:75:73:de:22:fd:1d:e4:51:c1:c7:e4:90:96:29: 8f:ad:53:fc:cd:ec:a5:b7:00:7e:02:1b:6d:04:57: 63:3b:d8:65:2f:c7:92:43:63:05:e8:82:15:06:12: a8:2c:ec:73:07:c5:d6:81:30:08:11:66:6a:48:9f: 28:86:8b:5e:8a:d2:d7:ae:82:16:84:51:96:49:0c: f8:a2:2b:26:11:bc:61:a4:3c:dc:e1:94:6a:45:a3: e2:89:b5:3e:99:37:e3:52:31:29:2f:12:d9:27:61: dc:a0:9e:a7:23:f3:52:a5:40:69:68:cf:1f:c0:3e: a4:82:49:92:ff:67:8f:15:ee:46:61:72:42:a8:7b: bc:1e:43:95:0b:db:e7:1c:95:e3:02:e7:02:4a:45: 49:a8:91:5a:11:bd:5f:ed:c2:18:c2:3d:7d:c8:70: e9:80:26:0f:fe:c7:bc:6b:92:8b:96:23:8a:1f:f2: 8c:9d:bd:09:30:fd:c4:60:10:11:3f:65:66:4a:b7: 9a:5f:b8:da:16:eb:a7:03:de:21:4f:28:cc:54:60: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A6:32:7C:14:40:36:14:98:F9:7E:9C:F4:50:A0:1E:1B:AD:DB:6E X509v3 Authority Key Identifier: keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:d2:c4:cf:be:e4:15:57:38:cb:72:db:c4:c7:97:22:42: dc:ff:67:ad:87:f2:f2:55:10:cb:06:c6:e8:7b:b5:37:c6:c9: 2f:a2:2c:5c:5d:d3:d7:45:5f:77:9c:b4:e0:f7:e1:da:b0:d8: 64:1d:24:69:fa:a0:bf:ff:2f:7d:58:d3:11:3e:a9:cc:5a:4e: 2e:04:b3:7a:97:f3:3c:45:bc:8a:1c:b9:0d:30:4c:4c:13:13: b5:1b:ab:cc:93:ce:c0:b2:4a:da:19:ed:a0:c2:fe:07:f5:dc: 33:db:b2:7c:63:16:ee:69:cf:91:0d:f7:69:31:3c:36:cc:fe: 1a:d7:db:97:18:b8:c1:4c:47:88:3e:72:83:67:41:3a:56:bf: bf:70:22:cf:d8:2d:bf:61:dd:a9:8f:04:88:f7:db:e9:3f:95: 95:f3:17:0b:a9:99:1a:4c:bb:c0:04:6d:8d:04:55:c2:ec:c0: 68:a7:81:cd:66:f7:ee:3e:1d:2a:cc:4f:92:0d:8a:36:c0:1f: 5d:5e:cb:ed:4c:2b:84:d9:31:96:c9:70:a0:31:28:5e:9e:39: fa:e0:20:87:d0:3a:4b:5c:bd:ee:5b:dc:b0:a5:29:ea:d7:09: 28:79:f3:c8:32:7b:ae:6c:1b:be:b9:cc:a9:f4:e3:03:e3:e1: 3d:1c:a8:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF NkNDQkEyMkYwHhcNMjUxMTA1MDMwMzEyWhcNMjUxMTEyMDMwMzEyWjAYMRYwFAYD VQQDEw02OTBhYmU3MS04ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CpIzeUf9PAcTLNbdrDv8e3keJReBPjhKE/cNhqMStJ0yM2t/xofyz/wk3pY dXPeIv0d5FHBx+SQlimPrVP8zeyltwB+AhttBFdjO9hlL8eSQ2MF6IIVBhKoLOxz B8XWgTAIEWZqSJ8ohoteitLXroIWhFGWSQz4oismEbxhpDzc4ZRqRaPiibU+mTfj UjEpLxLZJ2HcoJ6nI/NSpUBpaM8fwD6kgkmS/2ePFe5GYXJCqHu8HkOVC9vnHJXj AucCSkVJqJFaEb1f7cIYwj19yHDpgCYP/se8a5KLliOKH/KMnb0JMP3EYBARP2Vm SreaX7jaFuunA94hTyjMVGB3GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2mMnwU QDYUmPl+nPRQoB4brdtuMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0 MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUI0Qy8yOTc5OTE1MjA0MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJy VkhwOENKc2QzLTdtekxvaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpEdLEz77kFVc4y3LbxMeXIkLc/2eth/LyVRDLBsboe7U3xskvoixc XdPXRV93nLTg9+HasNhkHSRp+qC//y99WNMRPqnMWk4uBLN6l/M8RbyKHLkNMExM ExO1G6vMk87AskraGe2gwv4H9dwz27J8Yxbuac+RDfdpMTw2zP4a19uXGLjBTEeI PnKDZ0E6Vr+/cCLP2C2/Yd2pjwSI99vpP5WV8xcLqZkaTLvABG2NBFXC7MBop4HN ZvfuPh0qzE+SDYo2wB9dXsvtTCuE2TGWyXCgMShenjn64CCH0DpLXL3uW9ywpSnq 1wkoefPIMnuubBu+ucyp9OMD4+E9HKhq -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:14 2025 by rpki-client