$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: eugJuPSHsP+efI4u2eTvmHmPHUSF8JO9AaraNJhf/2w= Subject key identifier: F4:BA:E7:A4:22:55:B2:0C:DB:93:89:3A:26:1C:DA:21:05:25:37:53 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 01EF Signing time: Wed 05 Nov 2025 02:39:12 +0000 Manifest this update: Wed 05 Nov 2025 02:39:11 +0000 Manifest next update: Wed 12 Nov 2025 02:39:11 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: VYASrvmeoMWd0EoQc044eSLFqAGsX6dWer6gWBeXaow=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Nov 5 02:39:11 2025 GMT Not After : Nov 12 02:39:11 2025 GMT Subject: CN=690ab8cf-f273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:29:86:8d:b6:29:d1:02:d9:37:3b:c5:11: 9c:f7:e9:d4:dd:18:d0:b5:0c:83:ba:f2:97:44:14: 40:f4:11:42:94:a0:77:ec:a9:1a:de:76:bb:74:95: f9:71:c2:4d:86:6e:20:eb:d7:81:6c:ab:0f:69:fa: 87:c2:f8:29:dc:e5:02:fb:7a:e8:aa:73:51:88:9b: bb:46:26:db:bb:3e:ad:dc:78:d2:25:fb:75:5e:af: 13:4d:ad:a0:7b:ba:9d:13:68:bf:0a:b9:6d:6a:f9: 63:f3:1a:59:14:f5:33:03:0a:7b:3f:b8:7f:ab:65: 39:ca:8d:bb:a0:b4:67:f0:9f:a9:fb:12:65:6c:f6: fa:89:9b:a0:da:88:01:96:ad:26:ac:97:1e:89:7d: b0:49:76:84:14:1d:a7:d4:02:96:04:bf:d7:63:f0: ed:d0:43:0f:eb:01:9a:48:09:4b:82:dc:6d:0d:68: cb:7e:5e:74:bc:c2:61:e3:6f:3d:17:ea:1e:40:81: 0d:85:77:7e:db:33:45:e9:fa:ed:1a:33:64:a9:37: 8f:d9:ae:6f:4c:27:5f:a0:99:de:77:51:6b:03:18: 2d:21:67:ff:f0:8e:38:c2:45:cc:75:60:9a:94:d1: 56:d3:c3:78:50:f6:5c:4f:b0:49:32:cd:fa:89:c7: 2d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:E7:A4:22:55:B2:0C:DB:93:89:3A:26:1C:DA:21:05:25:37:53 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:b1:06:01:2c:36:f1:d0:a7:7a:ba:bd:3f:ed:2d:9c:fd: 77:a4:93:4a:57:9f:fb:c3:2f:b7:22:60:d6:45:e2:b9:d4:fd: 03:4f:56:a9:3d:62:25:1a:05:11:fa:31:5d:49:b5:83:50:9a: 46:4a:35:2b:66:fd:1d:e6:77:a4:bc:c8:9d:06:4e:87:e2:ea: 48:48:fe:8b:47:84:93:c0:4d:80:f7:17:52:48:70:90:e6:99: 3c:69:8a:93:11:3b:1c:01:ae:cc:e4:06:76:40:bd:29:6e:7d: 30:d0:c6:8d:ed:b5:72:fd:20:81:b5:4e:36:b1:0d:b9:42:7d: c0:df:2e:ab:42:60:72:6d:ce:6a:ba:5c:59:67:43:c6:b7:c4: 50:72:d2:8e:39:86:15:db:99:a8:56:94:b5:62:4b:cb:19:24: 40:80:40:86:e5:73:ef:26:1f:14:a7:62:da:db:b5:c1:4e:e8: 3d:72:12:a5:1a:e3:d4:b6:22:40:ef:09:db:75:4d:dd:13:f4: 64:44:1a:0a:ba:0b:aa:32:e4:90:a6:1c:67:6c:82:b0:00:16: 1b:b4:12:71:01:d5:73:cc:61:f9:34:3d:bc:1b:61:ff:c9:3a: f1:65:88:26:48:8c:c5:01:8c:b5:7a:5c:76:84:4b:32:9d:cf: 92:a8:2a:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjUxMTA1MDIzOTExWhcNMjUxMTEyMDIzOTExWjAYMRYwFAYD VQQDEw02OTBhYjhjZi1mMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VMpho22KdEC2Tc7xRGc9+nU3RjQtQyDuvKXRBRA9BFClKB37Kka3na7dJX5 ccJNhm4g69eBbKsPafqHwvgp3OUC+3roqnNRiJu7Ribbuz6t3HjSJft1Xq8TTa2g e7qdE2i/Crltavlj8xpZFPUzAwp7P7h/q2U5yo27oLRn8J+p+xJlbPb6iZug2ogB lq0mrJceiX2wSXaEFB2n1AKWBL/XY/Dt0EMP6wGaSAlLgtxtDWjLfl50vMJh4289 F+oeQIENhXd+2zNF6frtGjNkqTeP2a5vTCdfoJned1FrAxgtIWf/8I44wkXMdWCa lNFW08N4UPZcT7BJMs36icctMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS656Qi VbIM25OJOiYc2iEFJTdTMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABD7EGASw28dCnerq9P+0tnP13pJNKV5/7wy+3ImDWReK51P0DT1ap PWIlGgUR+jFdSbWDUJpGSjUrZv0d5nekvMidBk6H4upISP6LR4STwE2A9xdSSHCQ 5pk8aYqTETscAa7M5AZ2QL0pbn0w0MaN7bVy/SCBtU42sQ25Qn3A3y6rQmBybc5q ulxZZ0PGt8RQctKOOYYV25moVpS1YkvLGSRAgECG5XPvJh8Up2La27XBTug9chKl GuPUtiJA7wnbdU3dE/RkRBoKuguqMuSQphxnbIKwABYbtBJxAdVzzGH5ND28G2H/ yTrxZYgmSIzFAYy1elx2hEsync+SqCql -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:01 2025 by rpki-client