$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: 3dnsHxYQc6LgSW7PkxN+JFJzis6B8aR2thKT7zjqMmA= Subject key identifier: 77:66:28:CF:45:16:B1:FB:E4:02:14:D2:65:33:4D:1D:E8:47:5F:EB Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0B29 Signing time: Tue 04 Nov 2025 19:22:36 +0000 Manifest this update: Tue 04 Nov 2025 19:22:36 +0000 Manifest next update: Tue 11 Nov 2025 19:22:36 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: BRPwMgJnsYiwxiy8dpawuHzUcY4klqxLvacokANEenM=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: 8QV3Z7HQrXKgQcgsCkmTuSXwKLorUwTjpR6lcWwX/xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Nov 4 19:22:36 2025 GMT Not After : Nov 11 19:22:36 2025 GMT Subject: CN=690a527c-43cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:e5:66:f7:6e:a6:1b:1a:31:fa:8a:a7:7f: ce:84:b2:a6:38:7c:e9:ce:8c:0a:56:82:b3:5c:f5: 67:cf:2c:2d:a5:7a:f4:8e:60:27:f7:c3:3c:96:c1: ed:97:7c:2a:2f:41:ce:2f:fa:18:44:2d:85:11:64: 6f:60:38:53:55:7b:3d:39:64:b7:17:54:82:5c:d1: ab:bd:af:57:84:a2:6a:04:c4:28:0d:33:3f:f1:9f: dc:bf:72:37:4d:9e:ef:68:14:ae:eb:e7:30:54:d2: b5:10:be:ca:d3:99:67:6f:f8:98:33:4e:4e:b1:f8: fa:6a:7c:04:52:e3:e5:fc:97:c9:8f:d9:95:ec:44: b3:60:54:f4:f1:82:56:ea:d0:08:81:08:4e:d3:bc: 29:3a:63:85:9d:ec:f8:f4:25:24:fd:19:94:03:62: 5a:2f:4c:15:0e:73:46:4f:b6:27:54:c3:82:c3:5b: 25:4c:18:af:eb:01:09:b4:26:96:8d:e9:f9:d3:a1: 65:d6:01:42:7c:99:c3:1f:4c:d7:bf:34:51:5e:c1: 13:47:69:9b:96:40:1d:57:ec:92:6a:27:74:dd:bb: 21:d6:69:e9:56:60:dd:d5:05:94:11:9a:d6:3d:af: 58:8d:26:40:65:1b:2b:87:41:63:32:37:e6:6a:d3: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:28:CF:45:16:B1:FB:E4:02:14:D2:65:33:4D:1D:E8:47:5F:EB X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d1:d3:ea:b1:76:bb:d8:79:40:8f:a9:b6:82:c0:ca:50:6d: 80:89:44:fb:ef:e0:d3:ed:60:3b:f8:63:97:91:e4:9f:85:ae: 46:f6:1a:ed:75:fb:87:38:ad:91:2e:2a:15:b7:11:27:e2:ec: 6e:6e:f6:31:50:e5:f4:4e:95:7e:f6:cd:13:1e:37:df:8f:f3: e8:62:59:06:97:4d:fb:89:64:3a:45:a2:58:b7:d0:9f:9a:0f: e9:8a:72:d1:5a:6d:17:ea:e9:e7:c4:d4:fd:80:73:85:2b:28: 48:35:a2:ce:5d:6d:70:e9:b9:12:d8:47:3c:dc:4d:f1:c0:c0: 38:7c:d5:74:23:b2:b0:19:ec:8d:9c:51:7a:38:47:cc:6c:c3: 58:cd:56:96:e0:69:70:8b:11:1c:55:94:21:d0:05:cb:bd:dc: 1d:dc:6f:37:9e:06:05:75:30:47:02:ee:67:2b:14:1c:ee:c4: e5:21:66:8b:13:cd:d7:9d:b7:a2:6a:6c:fb:2c:cd:ff:17:e4: ab:fb:e7:09:82:66:62:b4:15:a6:bc:aa:a4:da:e7:3c:7c:ec: b5:ee:2e:cc:17:c4:af:40:e3:d0:5e:e0:28:a8:34:82:0f:3a: a0:5e:ab:39:93:f7:28:6e:1b:53:0a:8d:b1:1a:00:ba:e7:f6: e7:f1:e7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjUxMTA0MTkyMjM2WhcNMjUxMTExMTkyMjM2WjAYMRYwFAYD VQQDEw02OTBhNTI3Yy00M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLTlZvduphsaMfqKp3/OhLKmOHzpzowKVoKzXPVnzywtpXr0jmAn98M8lsHt l3wqL0HOL/oYRC2FEWRvYDhTVXs9OWS3F1SCXNGrva9XhKJqBMQoDTM/8Z/cv3I3 TZ7vaBSu6+cwVNK1EL7K05lnb/iYM05Osfj6anwEUuPl/JfJj9mV7ESzYFT08YJW 6tAIgQhO07wpOmOFnez49CUk/RmUA2JaL0wVDnNGT7YnVMOCw1slTBiv6wEJtCaW jen506Fl1gFCfJnDH0zXvzRRXsETR2mblkAdV+ySaid03bsh1mnpVmDd1QWUEZrW Pa9YjSZAZRsrh0FjMjfmatOStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdmKM9F FrH75AIU0mUzTR3oR1/rMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/0dPqsXa72HlAj6m2gsDKUG2AiUT77+DT7WA7+GOXkeSfha5G9hrt dfuHOK2RLioVtxEn4uxubvYxUOX0TpV+9s0THjffj/PoYlkGl037iWQ6RaJYt9Cf mg/pinLRWm0X6unnxNT9gHOFKyhINaLOXW1w6bkS2Ec83E3xwMA4fNV0I7KwGeyN nFF6OEfMbMNYzVaW4GlwixEcVZQh0AXLvdwd3G83ngYFdTBHAu5nKxQc7sTlIWaL E83Xnbeiamz7LM3/F+Sr++cJgmZitBWmvKqk2uc8fOy17i7MF8SvQOPQXuAoqDSC DzqgXqs5k/cobhtTCo2xGgC65/bn8efd -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:18 2025 by rpki-client