$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: 7eIPkCUQca6nD3ZRukZisJoeQaMLBTPoxuWT1NIw3+o= Subject key identifier: EC:C2:6E:E4:AF:3A:1A:AF:CF:66:31:47:9C:84:11:48:29:9C:29:3F Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 1466 Signing time: Tue 04 Nov 2025 16:59:46 +0000 Manifest this update: Tue 04 Nov 2025 16:59:45 +0000 Manifest next update: Tue 11 Nov 2025 16:59:45 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: fPHA3pmsYDHrTRpTeNCiKQ2+RXTt1xwlmue6QY3Gnqc=) 2: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: FOnoWXzG/xzvG2wY9SEKlskrDJv5q/5MAP/jyysv8e0=) 3: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E=) 4: 983A5536450611F093EC3A65C4F9AE02.roa (hash: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8=) 5: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=) 6: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: U8BSX2DX6JtfXzvuoqYA9Tm3bqF1pxPrmS12/E0gdmw=) 7: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ=) 8: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs=) 9: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: 3SvNLk7hW+Uo3wG2xJFv1wsrHQt1APNp92391QdFtgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5255 (0x1487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Nov 4 16:59:45 2025 GMT Not After : Nov 11 16:59:45 2025 GMT Subject: CN=690a3102-1d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:5f:ff:a9:9f:bb:5d:ab:0c:c2:77:dd:c4: a6:e1:2a:38:61:97:9d:b8:c7:52:75:7b:37:3b:cb: ee:1e:08:e5:ac:82:e0:b3:fe:dc:49:eb:c5:5d:ab: ff:fd:17:28:c5:05:1c:a3:d4:2b:25:fb:19:c9:b1: cb:da:f4:73:09:fa:c3:d1:3a:61:7a:39:66:15:22: 1e:e1:ee:9e:90:b0:fe:49:fb:98:27:ec:66:7c:c4: 22:73:a5:9a:59:e3:18:2a:90:a5:31:b5:52:22:94: 2b:85:06:7e:1d:d6:77:9f:83:45:c1:30:c2:56:9d: f3:ff:c2:38:a3:6c:d4:1f:6f:0c:16:c6:02:6f:8b: 99:81:79:00:c6:28:81:cb:be:52:dc:e1:7d:68:8c: 2a:52:ac:e3:de:43:ed:4e:62:3a:8f:6a:77:9a:26: 37:b4:6e:1f:a9:b5:04:61:95:b4:b9:23:dd:60:38: da:65:e5:8a:93:a9:a2:ca:69:98:e1:75:35:f3:f5: 94:26:89:a8:39:fe:01:1f:fa:7b:0e:e5:a2:22:ac: 87:03:d0:d0:f0:61:9d:c0:47:ee:c4:19:4c:86:ff: f2:8f:53:ab:00:7e:62:88:8b:49:f1:4c:80:94:5b: 68:a1:2e:e5:33:b8:dd:ca:82:bc:e3:e4:a0:35:23: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C2:6E:E4:AF:3A:1A:AF:CF:66:31:47:9C:84:11:48:29:9C:29:3F X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f7:c1:0f:de:0d:b9:a5:e8:0e:99:33:27:1c:9c:62:32:a7: 43:a8:f7:62:d0:91:aa:28:9b:24:d5:36:57:58:a4:d7:3f:8f: ae:39:d8:4a:9c:31:23:8a:6d:ce:f2:0d:8c:38:39:15:12:c9: 01:f5:64:c3:ce:2c:d4:e3:92:65:03:c7:4e:be:2d:2a:e2:a3: 38:bb:8b:5e:15:aa:16:4f:66:43:29:20:93:3b:40:e0:7f:92: a9:a1:93:78:c5:5c:0e:20:4d:57:0d:9d:3c:73:2e:c9:40:5f: 9c:5f:51:41:0a:1f:de:fd:ab:6e:6a:1d:8e:e6:a8:7b:74:a9: 46:0a:87:64:a9:20:27:af:45:22:2c:7e:26:7b:8a:f1:d0:9d: 21:58:9f:23:13:90:8e:0b:7e:65:a7:2a:c7:6c:08:eb:c1:e4: ac:f5:f2:c5:43:9d:13:23:61:62:5f:ae:5e:db:4d:10:4a:b4: 57:b2:b3:3e:bc:95:60:28:8a:36:d1:cc:97:36:64:d6:a3:cb: fc:cc:d0:71:ed:c2:95:4e:45:e0:b2:b9:a5:4b:4e:78:ea:bc: d2:46:36:39:b1:32:4b:2d:6b:37:bd:f8:4c:80:b2:03:9f:dd: 99:70:d2:84:c4:3e:aa:73:16:4c:5e:d1:55:03:6a:49:43:b1: 6c:72:1c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUxMTA0MTY1OTQ1WhcNMjUxMTExMTY1OTQ1WjAYMRYwFAYD VQQDEw02OTBhMzEwMi0xZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5Zf/6mfu12rDMJ33cSm4So4YZeduMdSdXs3O8vuHgjlrILgs/7cSevFXav/ /RcoxQUco9QrJfsZybHL2vRzCfrD0TphejlmFSIe4e6ekLD+SfuYJ+xmfMQic6Wa WeMYKpClMbVSIpQrhQZ+HdZ3n4NFwTDCVp3z/8I4o2zUH28MFsYCb4uZgXkAxiiB y75S3OF9aIwqUqzj3kPtTmI6j2p3miY3tG4fqbUEYZW0uSPdYDjaZeWKk6miymmY 4XU18/WUJomoOf4BH/p7DuWiIqyHA9DQ8GGdwEfuxBlMhv/yj1OrAH5iiItJ8UyA lFtooS7lM7jdyoK84+SgNSM/yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzCbuSv Ohqvz2YxR5yEEUgpnCk/MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu98EP3g25pegOmTMnHJxiMqdDqPdi0JGqKJsk1TZXWKTXP4+uOdhK nDEjim3O8g2MODkVEskB9WTDzizU45JlA8dOvi0q4qM4u4teFaoWT2ZDKSCTO0Dg f5KpoZN4xVwOIE1XDZ08cy7JQF+cX1FBCh/e/atuah2O5qh7dKlGCodkqSAnr0Ui LH4me4rx0J0hWJ8jE5COC35lpyrHbAjrweSs9fLFQ50TI2FiX65e200QSrRXsrM+ vJVgKIo20cyXNmTWo8v8zNBx7cKVTkXgsrmlS0546rzSRjY5sTJLLWs3vfhMgLID n92ZcNKExD6qcxZMXtFVA2pJQ7FschwQ -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:48 2025 by rpki-client