$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json) Hash identifier: 4oOnqyLza73CrhKIlnhTUXIv+WVOmwI7zc2CfSdmKMI= Subject key identifier: 5C:45:0E:1A:DB:EE:7D:92:7B:AF:2B:9C:D8:7A:09:5F:A0:F4:5F:32 Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft Manifest number: 76 Signing time: Mon 03 Nov 2025 06:50:32 +0000 Manifest this update: Mon 03 Nov 2025 06:50:31 +0000 Manifest next update: Mon 10 Nov 2025 06:50:31 +0000 Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: 22vzSaHyNJXRFa9eFKcv+57u6Zci/xmQ/YFyhriiKwM=) 2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: kGx1CJpE3cHBsf4M7cgjGHBrxKAD0rzUUv2UM3HRfTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Validity Not Before: Nov 3 06:50:31 2025 GMT Not After : Nov 10 06:50:31 2025 GMT Subject: CN=690850b7-9eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:aa:28:e9:bc:f4:ef:69:f4:88:20:33:0f: 95:b7:0f:00:72:48:24:a1:20:5a:8a:93:35:36:ab: b0:a3:2d:94:82:81:c0:ad:c1:c1:dc:bb:05:78:37: 34:34:4d:ba:76:1a:1a:9c:3b:69:1c:a7:d7:f9:23: a8:1d:4a:34:f8:4e:11:f2:99:73:ec:d1:33:dc:1e: e5:c2:bb:a1:16:20:4d:32:30:a9:cb:b3:16:e0:54: 98:db:e8:0d:00:03:e1:d0:80:a5:e6:c8:30:9a:d5: e7:8f:ed:bf:e6:4c:72:22:e7:e0:74:b3:c7:3e:4d: 27:f9:32:eb:69:5b:d0:43:69:06:92:86:d2:88:ff: 0b:9a:28:91:2f:e9:ea:89:3b:cc:79:fd:10:09:31: dd:1a:82:b3:49:bf:16:aa:a6:6a:bf:c3:61:36:9c: 33:76:3b:28:e8:dc:09:4f:b8:32:2f:c2:25:ad:5e: e2:55:55:99:cb:b8:7a:5f:cb:64:2f:fc:20:84:78: 7e:bc:52:48:72:d7:91:a2:f6:2f:fe:81:8e:85:28: b0:ba:75:35:7b:94:d1:14:5c:9b:a5:99:45:53:f6: 9b:c6:98:44:34:0b:7e:4b:27:13:fa:54:85:f8:08: f3:dc:7f:6c:af:23:16:f1:0b:f1:9b:23:2e:e0:f6: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:0E:1A:DB:EE:7D:92:7B:AF:2B:9C:D8:7A:09:5F:A0:F4:5F:32 X509v3 Authority Key Identifier: keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:68:3b:d0:7b:a0:4f:f3:c1:68:a5:31:f9:a5:ff:75:f9:4f: 84:42:87:be:75:ba:1d:96:5b:12:51:e6:8d:ab:73:b4:28:4d: 4f:23:ca:87:bd:99:55:4f:19:67:4a:ed:1d:cc:87:6f:6c:b0: 2e:ad:a4:24:93:ba:55:ed:1a:a1:29:b6:77:11:01:68:0b:b2: 5a:be:a2:ee:ed:ac:64:d1:9d:4f:6d:3a:ae:73:70:c8:5f:e6: 7a:5f:e9:ac:85:c5:3e:ee:bf:ac:24:63:eb:4a:52:bb:6d:50: 92:2f:c1:58:5f:6f:7b:df:f5:db:97:4f:90:02:1d:55:b7:be: 35:54:70:90:71:38:ec:2c:1d:20:23:df:e5:53:d5:5e:59:37: 1e:94:bf:bb:79:37:f0:36:66:ef:2e:f1:fb:b7:b6:95:d6:45: f1:75:fb:25:ba:af:fb:69:2f:00:68:9c:81:0f:9d:74:be:52: 7e:84:f8:c3:cc:b0:da:a6:21:95:78:79:db:13:06:72:46:a9: 54:14:26:07:fa:ef:ad:77:44:54:54:93:3e:67:ed:3a:a3:d8: a7:38:35:a3:ef:2a:cd:95:a1:b7:77:19:99:8b:ef:fa:1e:e4: d5:13:6a:ff:bf:cf:00:45:41:4b:98:8e:31:08:f7:76:b6:8b: 04:d9:6f:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0ZCQTExMC8GA1UEBRMoQjAzNDFDMzQzRkUxNTI1Rjc2QzkyOTk2MTBDQTBFNzhF OTNFODdDMzAeFw0yNTExMDMwNjUwMzFaFw0yNTExMTAwNjUwMzFaMBgxFjAUBgNV BAMTDTY5MDg1MGI3LTllYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZcaoo6bz072n0iCAzD5W3DwBySCShIFqKkzU2q7CjLZSCgcCtwcHcuwV4NzQ0 Tbp2GhqcO2kcp9f5I6gdSjT4ThHymXPs0TPcHuXCu6EWIE0yMKnLsxbgVJjb6A0A A+HQgKXmyDCa1eeP7b/mTHIi5+B0s8c+TSf5MutpW9BDaQaShtKI/wuaKJEv6eqJ O8x5/RAJMd0agrNJvxaqpmq/w2E2nDN2Oyjo3AlPuDIvwiWtXuJVVZnLuHpfy2Qv /CCEeH68Ukhy15Gi9i/+gY6FKLC6dTV7lNEUXJulmUVT9pvGmEQ0C35LJxP6VIX4 CPPcf2yvIxbxC/GbIy7g9rQPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXEUOGtvu fZJ7ryuc2HoJX6D0XzIwHwYDVR0jBBgwFoAUsDQcND/hUl92ySmWEMoOeOk+h8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3RkJBLzQyRkMzRDhBMDQ4 RjExRjA4NzJFODU0N0M0RjlBRTAyL3NEUWNORF9oVWw5MnlTbVdFTW9PZU9rLWg4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0RRY05EX2hVbDkyeVNtV0VNb09lT2staDhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 RkJBLzQyRkMzRDhBMDQ4RjExRjA4NzJFODU0N0M0RjlBRTAyL3NEUWNORF9oVWw5 MnlTbVdFTW9PZU9rLWg4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJoO9B7oE/zwWilMfml/3X5T4RCh751uh2WWxJR5o2rc7QoTU8jyoe9 mVVPGWdK7R3Mh29ssC6tpCSTulXtGqEptncRAWgLslq+ou7trGTRnU9tOq5zcMhf 5npf6ayFxT7uv6wkY+tKUrttUJIvwVhfb3vf9duXT5ACHVW3vjVUcJBxOOwsHSAj 3+VT1V5ZNx6Uv7t5N/A2Zu8u8fu3tpXWRfF1+yW6r/tpLwBonIEPnXS+Un6E+MPM sNqmIZV4edsTBnJGqVQUJgf67613RFRUkz5n7Tqj2Kc4NaPvKs2Vobd3GZmL7/oe 5NUTav+/zwBFQUuYjjEI93a2iwTZbzo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:21 2025 by rpki-client