$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: uXMMjt5O8JW6Tx3T8QniAarxQVcPlNnrq3G83KbiWlM= Subject key identifier: E6:D5:79:4F:38:8F:AC:D8:6B:95:F0:0D:F8:60:43:96:A6:D4:6A:57 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 058F Signing time: Sun 02 Nov 2025 23:10:57 +0000 Manifest this update: Sun 02 Nov 2025 23:10:56 +0000 Manifest next update: Sun 09 Nov 2025 23:10:56 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: bAWoyzWUgd130796gZODLiVX3dsT+nedbzgVu2MXf94=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: LSj0rBxO9Z29e6JUXgqXeUATalGSgm5CqWXMd5B6WOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Nov 2 23:10:56 2025 GMT Not After : Nov 9 23:10:56 2025 GMT Subject: CN=6907e501-5da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:6a:95:a5:ac:46:88:87:f6:cf:3a:f2:22: da:18:32:a2:c6:a5:59:5f:2d:ab:5a:a0:c3:b3:d9: 9d:f0:1f:60:2b:44:33:21:2e:60:a1:a9:f6:c0:f7: ca:34:1c:66:ce:d3:2e:22:fd:67:4e:b6:3d:99:70: 36:1d:e4:5f:19:8d:c9:f3:fe:bf:42:0b:b0:bb:58: f8:23:70:9c:70:a1:67:9b:60:45:d0:1d:80:83:3c: bf:ae:e1:03:0f:5c:65:61:0c:a1:b8:b3:c7:10:d7: 0f:dd:ed:64:b2:f6:93:1a:13:35:e2:61:3d:e7:00: fc:cb:25:fb:bb:74:6b:28:08:9a:cb:4e:c2:ca:bf: c3:6f:45:3e:9f:26:44:e0:d8:90:a2:37:dc:af:6e: 8a:ad:b1:3f:a9:18:1e:08:d6:7a:c2:8e:60:64:c1: c7:0b:c1:46:53:1d:50:53:c5:20:47:81:26:03:23: e7:d5:1b:00:e5:c4:bd:1b:b5:db:11:3f:d8:d2:49: f6:46:06:fd:a8:31:b7:86:c3:f8:ea:45:64:97:5a: ab:11:8e:46:88:a2:46:86:c2:e7:f8:b7:9a:f2:30: 55:b0:bd:47:29:b5:fb:aa:90:52:e8:d6:1f:19:73: 3d:79:db:2e:8c:f6:a8:9b:4b:ce:71:02:43:f1:5b: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:79:4F:38:8F:AC:D8:6B:95:F0:0D:F8:60:43:96:A6:D4:6A:57 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e9:f3:ca:8f:7b:16:79:31:90:b7:6e:26:13:c5:72:a3:94: a0:67:23:1c:bb:39:04:47:87:1c:43:d1:1d:d5:82:8f:2d:d8: 30:f3:bb:03:21:fa:ce:e0:13:17:47:5f:2b:66:b9:3e:39:fe: 2c:e9:6f:1a:13:ae:d4:50:f5:66:92:a1:db:27:ba:f0:5e:60: 7d:3a:4e:72:7a:b6:64:83:2e:09:e2:b6:38:33:1d:f6:e5:03: 8b:8f:da:d4:92:9f:a4:55:ff:19:5a:d9:62:c7:0a:82:09:f1: eb:12:11:6b:ac:8a:7d:8c:4d:2e:c3:ad:75:95:6d:df:a5:ef: c7:ac:87:0d:63:c3:0a:3e:dc:81:69:c0:ac:a8:a1:80:f7:b9: 15:dd:96:c9:35:20:52:35:8e:a5:9a:1f:f2:8e:05:1b:49:32: b0:bc:83:2a:0b:ad:7f:f4:73:ea:77:1d:61:04:09:02:64:67: 5c:82:8c:3c:f1:8c:24:52:d0:a0:8e:a9:12:66:b5:af:fb:fb: a3:e6:93:5e:ab:d9:78:c3:96:a7:dc:98:07:a9:4c:21:91:e1: e5:12:df:33:cf:a9:71:2b:1e:cc:53:8a:4f:b0:98:4e:5d:f7: e5:89:3b:13:e4:68:fd:06:ba:05:1f:e5:bd:b6:e1:6d:95:e8: 31:01:dc:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUxMTAyMjMxMDU2WhcNMjUxMTA5MjMxMDU2WjAYMRYwFAYD VQQDEw02OTA3ZTUwMS01ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkVqlaWsRoiH9s868iLaGDKixqVZXy2rWqDDs9md8B9gK0QzIS5goan2wPfK NBxmztMuIv1nTrY9mXA2HeRfGY3J8/6/Qguwu1j4I3CccKFnm2BF0B2Agzy/ruED D1xlYQyhuLPHENcP3e1ksvaTGhM14mE95wD8yyX7u3RrKAiay07Cyr/Db0U+nyZE 4NiQojfcr26KrbE/qRgeCNZ6wo5gZMHHC8FGUx1QU8UgR4EmAyPn1RsA5cS9G7Xb ET/Y0kn2Rgb9qDG3hsP46kVkl1qrEY5GiKJGhsLn+Lea8jBVsL1HKbX7qpBS6NYf GXM9edsujPaom0vOcQJD8VuI/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObVeU84 j6zYa5XwDfhgQ5am1GpXMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP6fPKj3sWeTGQt24mE8Vyo5SgZyMcuzkER4ccQ9Ed1YKPLdgw87sD IfrO4BMXR18rZrk+Of4s6W8aE67UUPVmkqHbJ7rwXmB9Ok5yerZkgy4J4rY4Mx32 5QOLj9rUkp+kVf8ZWtlixwqCCfHrEhFrrIp9jE0uw611lW3fpe/HrIcNY8MKPtyB acCsqKGA97kV3ZbJNSBSNY6lmh/yjgUbSTKwvIMqC61/9HPqdx1hBAkCZGdcgow8 8YwkUtCgjqkSZrWv+/uj5pNeq9l4w5an3JgHqUwhkeHlEt8zz6lxKx7MU4pPsJhO XffliTsT5Gj9BroFH+W9tuFtlegxAdza -----END CERTIFICATE-----Generated at Tue Nov 4 12:33:05 2025 by rpki-client