$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json) Hash identifier: l1lMjD9F9dmvZ5LqPH39HT8emHajwBqxR4gKvy0D5gY= Subject key identifier: 5B:92:DA:3C:D7:E4:D3:B9:DD:32:2A:8B:D5:AB:ED:D9:9D:7B:02:B8 Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81 Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft Manifest number: 0441 Signing time: Wed 05 Nov 2025 00:20:18 +0000 Manifest this update: Wed 05 Nov 2025 00:20:17 +0000 Manifest next update: Wed 12 Nov 2025 00:20:17 +0000 Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: d7pvAsjbVXy3L9vhSQTZ3vnZc1pChH3dK7Gn48c3uKY=) 2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681 Validity Not Before: Nov 5 00:20:17 2025 GMT Not After : Nov 12 00:20:17 2025 GMT Subject: CN=690a9842-bb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:39:95:c5:a5:14:ac:18:9e:c7:87:7f:0c: 48:0c:34:36:ab:fa:1e:66:0d:94:67:8f:55:55:59: 3d:72:06:35:50:7d:c1:6c:fb:e2:29:5d:94:8d:b4: b7:b5:ad:4e:d2:ff:13:99:04:d6:c0:16:50:e9:0f: 65:af:30:f1:01:09:e5:e4:18:21:4b:f3:e3:ab:b7: b4:78:7c:f7:2a:ce:c8:8f:36:f1:ff:7d:3b:8d:d1: 3e:34:b1:8e:98:1c:6c:0a:d1:3c:6d:60:21:a3:d9: 59:b3:7e:11:ab:22:bf:62:c6:89:43:c8:ac:db:fc: ad:2d:d2:b0:03:ad:e7:0c:4a:df:d9:a1:f9:72:c7: a5:9d:24:3d:19:19:74:35:b0:38:b0:09:b6:f5:0c: d1:81:4a:8c:0b:68:cd:97:9d:87:83:a2:de:73:a0: cc:60:ab:f3:81:ae:a6:a1:ed:c6:f1:61:74:d1:c6: 4a:87:84:98:88:fa:4b:06:56:ca:e0:cc:68:1e:8c: 8c:a4:7d:05:f6:d7:b5:01:93:af:77:66:ac:fd:5f: 25:b8:5c:b2:2d:53:50:ab:30:26:ad:5d:32:54:02: f4:ca:d6:c2:cb:d7:d6:56:ca:a3:fb:8e:1a:b3:f3: 40:59:93:72:6f:e5:a0:8a:b3:dc:f2:e1:96:56:d9: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:92:DA:3C:D7:E4:D3:B9:DD:32:2A:8B:D5:AB:ED:D9:9D:7B:02:B8 X509v3 Authority Key Identifier: keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:62:50:91:02:d6:80:d5:56:ad:01:15:7d:cf:ed:95:af:48: 1a:e8:98:ff:1d:aa:db:a7:6e:6c:cf:3e:ff:6a:f8:47:48:52: c2:cc:31:1a:16:2f:38:ec:8e:07:48:e3:d7:e0:b7:2e:0f:76: 57:17:8d:e2:b8:8f:f2:a1:8d:07:ea:4c:e0:1b:e6:a8:8f:ee: 37:da:05:80:f0:b5:3d:2d:47:ac:e8:f7:c8:2c:fe:16:1c:3b: 43:bc:db:c0:5d:73:5d:81:f5:aa:5f:31:15:b4:b3:95:58:5c: ed:37:93:f0:e5:1a:18:c9:dd:51:78:8a:86:c3:65:56:ec:be: 6b:ec:26:98:85:f7:15:fd:77:fd:1b:91:29:81:9c:9d:95:94: f0:da:11:fc:67:56:ac:37:c9:61:b4:de:56:bb:6c:0e:b2:a6: 7f:89:83:55:38:ae:d1:b9:d1:a1:58:22:c6:93:19:69:b6:11: 1c:2b:30:d5:83:d9:79:30:b3:af:5a:e3:3b:88:43:90:a3:3d: 2c:c8:05:3f:9a:55:15:9b:18:92:59:23:91:7a:86:b7:d8:a4: 2a:dd:54:88:24:86:fe:a0:70:91:71:51:18:ea:c2:43:c4:5d: bd:12:36:e0:45:10:11:bd:df:1f:a7:de:14:4b:ab:1e:b5:2a: 85:72:84:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCQ0ExMTAvBgNVBAUTKEY0Q0M0MzA0RTE3OTBFMDhGNUVDOTI5QTg3MzcyMjY5 RDA4RkI2ODEwHhcNMjUxMTA1MDAyMDE3WhcNMjUxMTEyMDAyMDE3WjAYMRYwFAYD VQQDEw02OTBhOTg0Mi1iYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmp05lcWlFKwYnseHfwxIDDQ2q/oeZg2UZ49VVVk9cgY1UH3BbPviKV2UjbS3 ta1O0v8TmQTWwBZQ6Q9lrzDxAQnl5BghS/Pjq7e0eHz3Ks7Ijzbx/307jdE+NLGO mBxsCtE8bWAho9lZs34RqyK/YsaJQ8is2/ytLdKwA63nDErf2aH5cselnSQ9GRl0 NbA4sAm29QzRgUqMC2jNl52Hg6Lec6DMYKvzga6moe3G8WF00cZKh4SYiPpLBlbK 4MxoHoyMpH0F9te1AZOvd2as/V8luFyyLVNQqzAmrV0yVAL0ytbCy9fWVsqj+44a s/NAWZNyb+WgirPc8uGWVtmnBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuS2jzX 5NO53TIqi9Wr7dmdewK4MB8GA1UdIwQYMBaAFPTMQwTheQ4I9eySmoc3ImnQj7aB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0JDQS82MkJDRDVERTdB OUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURnajE3SkthaHpjaWFkQ1B0 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNeERCT0Y1RGdqMTdKS2FoemNpYWRDUHRvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0JDQS82MkJDRDVERTdBOUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURn ajE3SkthaHpjaWFkQ1B0b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4YlCRAtaA1VatARV9z+2Vr0ga6Jj/Harbp25szz7/avhHSFLCzDEa Fi847I4HSOPX4LcuD3ZXF43iuI/yoY0H6kzgG+aoj+432gWA8LU9LUes6PfILP4W HDtDvNvAXXNdgfWqXzEVtLOVWFztN5Pw5RoYyd1ReIqGw2VW7L5r7CaYhfcV/Xf9 G5EpgZydlZTw2hH8Z1asN8lhtN5Wu2wOsqZ/iYNVOK7RudGhWCLGkxlpthEcKzDV g9l5MLOvWuM7iEOQoz0syAU/mlUVmxiSWSOReoa32KQq3VSIJIb+oHCRcVEY6sJD xF29EjbgRRARvd8fp94US6setSqFcoTJ -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:39 2025 by rpki-client