$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: i9GwMcAzrmuBL3rU7Mv8e5Rau+b5Pjyw5068hSJYJcA= Subject key identifier: 06:32:DE:3D:27:9E:E7:5F:E8:B3:65:FA:09:3C:9C:87:FD:AB:32:69 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04DF Signing time: Tue 04 Nov 2025 23:52:31 +0000 Manifest this update: Tue 04 Nov 2025 23:52:30 +0000 Manifest next update: Tue 11 Nov 2025 23:52:30 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: NR4mdVQImbZO4dMrXKctg2julNNKC25KA1BtFkGTTSc=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Nov 4 23:52:30 2025 GMT Not After : Nov 11 23:52:30 2025 GMT Subject: CN=690a91bf-389b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:2f:69:a8:53:55:14:35:5c:97:e1:3b:c3: 2b:1f:48:ed:41:6d:01:fb:dd:23:50:74:bb:3e:ab: ee:7c:25:5a:fb:fe:22:a7:3b:12:44:6e:f7:db:7e: 43:c0:a4:bb:78:d3:7a:db:d8:72:b1:3f:0e:92:b8: 27:a5:3a:81:1e:d3:94:82:0d:ae:cd:c5:6c:89:03: e9:61:df:95:8d:28:4a:21:51:8b:b5:ba:20:37:93: bc:c7:3b:67:e8:5f:4d:2c:f6:86:31:c9:b2:9d:ba: c7:6c:bb:48:09:d4:52:0e:db:52:f8:ad:64:84:2a: 2a:bc:32:a3:7d:f7:65:23:6f:f6:43:ea:b2:0c:00: aa:20:82:26:4f:ca:6b:e9:eb:43:ff:6d:15:db:52: 3c:d7:8d:08:39:94:1e:1a:f2:76:46:71:80:76:2a: 7f:cc:33:1e:b1:d5:30:5a:f3:5a:be:1f:10:2d:06: fc:06:be:68:9c:60:9f:5a:12:27:3a:14:4c:45:35: 36:1d:0a:ef:5a:09:c6:ee:c5:ab:c1:d6:76:74:3a: 6d:e5:ef:55:90:fb:16:4b:62:10:eb:2d:1b:3b:0d: dd:c9:2a:cc:50:9e:cd:b1:95:4a:76:26:71:e4:92: 5f:cf:c5:a7:57:e6:43:74:47:d3:5c:54:b9:c6:d9: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:32:DE:3D:27:9E:E7:5F:E8:B3:65:FA:09:3C:9C:87:FD:AB:32:69 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:21:61:ab:a3:3d:5a:5c:19:64:0a:2e:d1:9f:bc:f8:b2:6a: b0:37:a6:8f:00:f1:c9:ee:b3:3a:28:8b:f8:12:f4:54:64:1b: d0:fa:3c:58:e7:c9:12:b7:ab:5a:53:c8:49:75:c4:ff:7a:f6: d4:dc:36:1c:fc:10:9c:2e:b1:bb:c2:68:cd:92:57:92:99:79: 4c:70:d8:40:d4:04:d5:da:c5:b1:d7:23:db:49:47:a9:f5:5b: 3d:28:ab:18:e2:9c:02:b2:5d:3a:07:47:99:39:be:6e:36:51: 1e:7a:1e:17:ca:d1:10:3b:20:62:f4:d7:31:26:87:f1:e7:be: 64:95:0f:e2:71:f8:ca:98:fb:83:a2:c5:8c:2d:29:62:53:1f: 86:a2:54:11:c9:a7:c6:0d:fc:1c:05:d3:20:d4:71:b7:39:0b: 7d:e8:49:ae:38:3e:ac:91:ef:2b:6d:1c:32:6f:89:58:2f:31: 46:4b:f0:8d:06:28:c7:49:00:23:22:c7:d2:53:3c:a8:90:b3: 63:d3:76:ff:2b:97:de:6a:17:54:12:54:e2:99:34:90:94:37: c3:6a:7f:77:ce:fe:87:d3:88:b5:cd:45:1a:40:7a:3c:a3:db: 42:1f:ae:61:71:88:b7:59:04:d4:c6:35:12:df:db:f0:0b:e7: a4:d0:80:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUxMTA0MjM1MjMwWhcNMjUxMTExMjM1MjMwWjAYMRYwFAYD VQQDEw02OTBhOTFiZi0zODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMQvaahTVRQ1XJfhO8MrH0jtQW0B+90jUHS7PqvufCVa+/4ipzsSRG73235D wKS7eNN629hysT8OkrgnpTqBHtOUgg2uzcVsiQPpYd+VjShKIVGLtbogN5O8xztn 6F9NLPaGMcmynbrHbLtICdRSDttS+K1khCoqvDKjffdlI2/2Q+qyDACqIIImT8pr 6etD/20V21I8140IOZQeGvJ2RnGAdip/zDMesdUwWvNavh8QLQb8Br5onGCfWhIn OhRMRTU2HQrvWgnG7sWrwdZ2dDpt5e9VkPsWS2IQ6y0bOw3dySrMUJ7NsZVKdiZx 5JJfz8WnV+ZDdEfTXFS5xtnkxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYy3j0n nudf6LNl+gk8nIf9qzJpMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHIWGroz1aXBlkCi7Rn7z4smqwN6aPAPHJ7rM6KIv4EvRUZBvQ+jxY 58kSt6taU8hJdcT/evbU3DYc/BCcLrG7wmjNkleSmXlMcNhA1ATV2sWx1yPbSUep 9Vs9KKsY4pwCsl06B0eZOb5uNlEeeh4XytEQOyBi9NcxJofx575klQ/icfjKmPuD osWMLSliUx+GolQRyafGDfwcBdMg1HG3OQt96EmuOD6ske8rbRwyb4lYLzFGS/CN BijHSQAjIsfSUzyokLNj03b/K5feahdUElTimTSQlDfDan93zv6H04i1zUUaQHo8 o9tCH65hcYi3WQTUxjUS39vwC+ek0ICb -----END CERTIFICATE-----Generated at Wed Nov 5 15:16:51 2025 by rpki-client