$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: 1H+Gd7QPx79r93V+PLK2sYZr21xvqQ09rf/+I5yZG9w= Subject key identifier: 2D:4E:4C:49:E7:08:E7:0D:6C:4C:79:F9:6A:34:01:A6:14:15:E7:24 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 0119 Signing time: Mon 03 Nov 2025 04:51:23 +0000 Manifest this update: Mon 03 Nov 2025 04:51:23 +0000 Manifest next update: Mon 10 Nov 2025 04:51:23 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: IBJWZ/jcuXefNWPYG3RvQTcUIu/zOR2BoVHrOthsetM=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: CwXxvQd82DMK841MpqVGbyP5fEoZfjolyFEgUa5vlRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Nov 3 04:51:23 2025 GMT Not After : Nov 10 04:51:23 2025 GMT Subject: CN=690834cb-e159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:1a:64:86:62:c4:62:2d:c3:40:a7:8b:2a: 22:2a:62:6d:bc:15:db:16:90:72:13:e9:69:bc:05: 07:38:2f:41:f7:0a:8c:d1:36:f3:e1:6a:83:0b:2e: 0c:9a:9c:b1:5a:59:8f:a0:35:7a:fd:27:25:bf:09: df:18:2d:09:62:a8:8f:50:c2:3b:b8:83:75:d7:9b: 25:81:3c:2f:c0:04:8d:ba:07:d9:7a:02:a3:51:2a: a0:77:03:2f:ca:85:53:1f:5c:94:ff:16:f4:91:30: ba:72:0a:a2:fc:8c:07:0e:68:1a:1f:1b:a8:84:e2: 05:ed:0c:09:e3:ca:84:7d:e4:96:f3:38:ad:88:65: 40:15:fc:75:28:4d:ac:02:59:d3:6a:3e:48:d9:d7: b9:31:88:a6:e5:08:b3:70:16:81:09:c3:77:7f:a4: d9:ee:21:bd:18:92:c0:b7:90:ef:69:7f:8a:e8:85: e5:dd:e2:74:3c:f9:48:21:c5:2a:da:57:0d:6c:c4: ea:64:7d:73:e2:de:4b:e3:63:b4:59:d7:13:ca:11: cd:d1:2f:48:eb:ba:db:a6:7d:6f:d8:32:6b:8b:1a: 69:09:cc:4a:18:fa:57:a6:ba:e0:ed:e2:db:56:bf: 0e:26:03:3d:3c:30:1c:06:7a:fb:1a:e4:0b:f2:8c: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4E:4C:49:E7:08:E7:0D:6C:4C:79:F9:6A:34:01:A6:14:15:E7:24 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a8:50:75:7c:61:fd:f5:76:92:2a:0b:58:6d:e2:07:ba:dd: ce:57:6c:bf:dd:26:91:45:64:ee:a9:56:1b:49:e3:f1:dc:5d: bb:49:e7:53:59:89:1d:b1:1c:28:75:e6:54:37:a5:a4:37:3a: 63:3d:fe:0c:c3:4f:7d:11:ec:47:d1:fd:7c:c0:a4:67:31:e9: 77:fb:85:c3:cb:d6:cd:8b:c1:7e:43:df:0c:ec:11:96:4f:99: 9f:e8:f5:4b:f2:78:56:15:57:57:2c:24:16:a5:eb:cf:f7:4f: aa:83:0a:00:ad:dd:b6:32:7c:49:d1:39:a3:ab:7b:cc:35:a2: 53:0f:f8:69:16:32:9d:e4:33:88:1b:89:3f:a3:e8:8b:c1:04: a6:23:e7:29:2c:6c:d3:09:86:33:f1:92:df:15:e6:09:f8:c2: 2c:68:95:3c:e9:e4:52:15:2e:b6:e6:13:97:54:76:38:4e:0a: a3:eb:bb:6e:b7:f9:d1:fa:a6:16:69:38:50:c1:cc:79:4f:a5: ec:5d:6e:a0:73:0c:08:da:72:41:38:72:cf:ec:fb:b4:28:c4: a3:d5:e7:89:b8:18:f9:b9:b8:60:6e:a6:73:68:65:97:ed:77: 38:73:1b:42:d9:4f:03:0a:33:2e:9d:9d:0b:24:d1:66:ec:6b: 42:ba:bf:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUxMTAzMDQ1MTIzWhcNMjUxMTEwMDQ1MTIzWjAYMRYwFAYD VQQDEw02OTA4MzRjYi1lMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHYaZIZixGItw0CniyoiKmJtvBXbFpByE+lpvAUHOC9B9wqM0Tbz4WqDCy4M mpyxWlmPoDV6/SclvwnfGC0JYqiPUMI7uIN115slgTwvwASNugfZegKjUSqgdwMv yoVTH1yU/xb0kTC6cgqi/IwHDmgaHxuohOIF7QwJ48qEfeSW8zitiGVAFfx1KE2s AlnTaj5I2de5MYim5QizcBaBCcN3f6TZ7iG9GJLAt5DvaX+K6IXl3eJ0PPlIIcUq 2lcNbMTqZH1z4t5L42O0WdcTyhHN0S9I67rbpn1v2DJrixppCcxKGPpXprrg7eLb Vr8OJgM9PDAcBnr7GuQL8oyU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1OTEnn COcNbEx5+Wo0AaYUFeckMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwqFB1fGH99XaSKgtYbeIHut3OV2y/3SaRRWTuqVYbSePx3F27SedT WYkdsRwodeZUN6WkNzpjPf4Mw099EexH0f18wKRnMel3+4XDy9bNi8F+Q98M7BGW T5mf6PVL8nhWFVdXLCQWpevP90+qgwoArd22MnxJ0Tmjq3vMNaJTD/hpFjKd5DOI G4k/o+iLwQSmI+cpLGzTCYYz8ZLfFeYJ+MIsaJU86eRSFS625hOXVHY4Tgqj67tu t/nR+qYWaThQwcx5T6XsXW6gcwwI2nJBOHLP7Pu0KMSj1eeJuBj5ubhgbqZzaGWX 7Xc4cxtC2U8DCjMunZ0LJNFm7GtCur/d -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:26 2025 by rpki-client