$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: sUw/KmTf3h4uT0IkBGtyT/Yna/ONPdXq1KVrbqTOEyM= Subject key identifier: 24:7C:13:70:01:CE:82:95:F9:87:9E:8E:5F:CD:04:26:F5:AF:96:3B Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 355F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 351D Signing time: Tue 04 Nov 2025 14:44:24 +0000 Manifest this update: Tue 04 Nov 2025 14:44:23 +0000 Manifest next update: Tue 11 Nov 2025 14:44:23 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: fKkBfJXmEbXFv8ZdDC4G9ckuk08k7sarCXWM6DIpcis=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: V+iG3uoTEhOB1RpnqXAIwFGBw4WNdCYvL4uQOduviF4=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: we2qvgf2vxZ4ZPjgEZi4dnNDvsLxezsmqMuBAL4C+Nw=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: ku0ByaK/68w8G7tu0tDiWUq8Zdb9YUsOCXoz+0AOmhM=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: 4O6f6zO4+rp67RvHt+QYmoPjYNWBYX03aCYC6rT0bKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13663 (0x355f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Nov 4 14:44:23 2025 GMT Not After : Nov 11 14:44:23 2025 GMT Subject: CN=690a1147-89d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:1e:7d:91:ac:0f:74:86:64:f1:f4:84:2b: 35:32:78:d6:f3:92:73:78:bf:f3:18:25:a4:1a:39: 1c:92:57:45:57:a5:9c:16:c5:ad:2a:cf:97:bc:57: 8d:f6:b2:31:00:ea:e0:d7:40:d7:1a:89:ca:41:ee: b9:12:c3:85:fd:70:e0:2f:50:38:c3:31:59:2c:9f: 0b:ac:8e:2d:61:6e:55:28:9b:4c:20:a5:02:01:49: 72:ef:c4:d6:bb:33:ff:8f:8a:1a:c1:84:41:d5:35: 37:15:61:76:a2:ea:52:5a:8b:19:21:21:b7:dd:a6: 87:42:ad:ee:84:ed:0c:f6:4b:66:ca:c4:bc:54:3b: cb:16:05:a3:22:43:0e:08:7f:d4:5d:d3:db:53:96: 65:1c:2b:a1:d5:6e:ed:44:1b:85:97:1a:19:c0:ec: 14:3c:55:7e:42:ab:4d:b1:85:a8:3d:68:7c:72:16: 6e:8b:17:f4:e1:5c:b7:34:af:89:06:c1:38:2c:3a: c8:61:a4:43:ae:66:f6:cd:80:e4:8a:b4:72:c9:c4: 4f:54:75:f3:35:d4:4b:99:d2:86:ec:c3:36:68:65: 10:60:25:9d:6a:f7:91:3c:d3:9a:33:dc:b8:75:4a: a5:85:36:60:17:7c:ee:9f:a4:dd:47:12:84:ff:3c: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:13:70:01:CE:82:95:F9:87:9E:8E:5F:CD:04:26:F5:AF:96:3B X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:89:2e:2e:6c:84:ab:44:b5:6c:71:b4:06:fd:d8:96:43:b7: 86:e9:eb:a3:13:f3:bd:0d:af:b1:ae:83:89:d4:cb:8a:44:44: 94:2c:b6:1f:21:3c:8e:69:96:d7:a5:58:f7:63:c2:65:9e:1e: f9:80:c3:03:f3:57:44:c0:5b:db:d6:78:d8:c3:7b:aa:ac:cc: 0c:90:a1:f4:df:11:6b:54:1a:51:a1:d5:2b:42:e0:e1:6d:82: 40:66:b0:8e:ce:12:95:f9:ef:61:00:a1:30:61:9a:a2:bb:ea: 7e:8d:43:8e:7e:39:ba:cc:fb:f7:4f:fc:26:a2:58:ca:a5:90: 2e:5a:32:c6:16:34:9e:02:20:48:68:ae:dc:d8:9a:42:3f:99: d8:6d:dd:50:4f:98:02:7a:6f:c9:8a:f8:2e:04:c1:ab:fe:37: b2:a9:0a:f9:c9:e2:3c:b8:fe:dc:e7:62:3a:9b:fe:e6:d5:f0: b3:00:2b:21:46:46:b6:c2:41:e0:90:96:99:18:0a:23:29:d3: c5:21:11:9e:1e:49:0b:9a:f5:45:d8:bb:b9:a4:a1:18:53:f9: d2:04:a1:4e:da:aa:94:c7:d5:bb:6f:1a:f1:bc:e0:4c:b7:5c: 4b:07:c2:78:e7:c4:82:3e:79:35:b9:ac:87:89:1d:f0:b6:3d: 45:a3:a3:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUxMTA0MTQ0NDIzWhcNMjUxMTExMTQ0NDIzWjAYMRYwFAYD VQQDEw02OTBhMTE0Ny04OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndMefZGsD3SGZPH0hCs1MnjW85JzeL/zGCWkGjkckldFV6WcFsWtKs+XvFeN 9rIxAOrg10DXGonKQe65EsOF/XDgL1A4wzFZLJ8LrI4tYW5VKJtMIKUCAUly78TW uzP/j4oawYRB1TU3FWF2oupSWosZISG33aaHQq3uhO0M9ktmysS8VDvLFgWjIkMO CH/UXdPbU5ZlHCuh1W7tRBuFlxoZwOwUPFV+QqtNsYWoPWh8chZuixf04Vy3NK+J BsE4LDrIYaRDrmb2zYDkirRyycRPVHXzNdRLmdKG7MM2aGUQYCWdaveRPNOaM9y4 dUqlhTZgF3zun6TdRxKE/zwHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR8E3AB zoKV+Yeejl/NBCb1r5Y7MB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPiS4ubISrRLVscbQG/diWQ7eG6eujE/O9Da+xroOJ1MuKRESULLYf ITyOaZbXpVj3Y8Jlnh75gMMD81dEwFvb1njYw3uqrMwMkKH03xFrVBpRodUrQuDh bYJAZrCOzhKV+e9hAKEwYZqiu+p+jUOOfjm6zPv3T/wmoljKpZAuWjLGFjSeAiBI aK7c2JpCP5nYbd1QT5gCem/JivguBMGr/jeyqQr5yeI8uP7c52I6m/7m1fCzACsh Rka2wkHgkJaZGAojKdPFIRGeHkkLmvVF2Lu5pKEYU/nSBKFO2qqUx9W7bxrxvOBM t1xLB8J458SCPnk1uayHiR3wtj1Fo6OS -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:28 2025 by rpki-client