$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json) Hash identifier: 3Ry/jrmMpGUlkRhDZ82KH3KMUw/KLj0J3ouj40dY8Gc= Subject key identifier: 96:DC:82:6B:5F:C5:82:F5:E1:D4:AC:FD:E1:4E:AF:D0:66:43:77:5E Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft Manifest number: 08FD Signing time: Sun 02 Nov 2025 20:17:05 +0000 Manifest this update: Sun 02 Nov 2025 20:17:04 +0000 Manifest next update: Sun 09 Nov 2025 20:17:04 +0000 Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: DXb9jUXFQ2xdm58adJbgehfniH5XxR367vIaIq+HVkk=) 2: 46106B5077E811F0B822833AC4F9AE02.roa (hash: 9Oj88fgWpf7bDNpYMBgtHOzsobZ0C0giyGClKVgu7Io=) 3: C6B310B077E711F0B31CEB36C4F9AE02.roa (hash: xSQoZAfy0zR56Zr6/C+AkFsuhvwUbTGAIDtsgoONysw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Validity Not Before: Nov 2 20:17:04 2025 GMT Not After : Nov 9 20:17:04 2025 GMT Subject: CN=6907bc41-9b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:77:99:e3:1d:27:57:cf:dc:cf:33:15:c0: 51:08:e6:d0:c4:03:13:1b:da:a0:0e:43:c5:b0:fd: 0b:d2:51:4f:b3:3d:fd:2a:29:c2:09:73:b6:fc:c6: 61:9c:f5:02:24:79:d9:ad:01:6a:a3:57:ce:f7:c6: e0:5d:dc:a9:1a:be:fd:9f:45:d8:45:14:8f:12:68: 92:dd:39:dc:55:a7:a4:9d:c8:7f:ed:2a:c0:32:7e: ef:8d:3a:1e:e8:ab:bf:dd:89:5f:11:f7:d9:55:90: 4e:38:1a:17:69:3b:7a:07:e9:7d:5f:b0:8b:c1:37: 3f:37:91:6e:67:ee:b2:e1:4a:9d:1c:1d:4a:de:cb: 5b:eb:e1:40:27:b5:ff:0e:e8:1d:31:8c:c9:79:a8: aa:cc:63:fe:76:ec:fc:0c:c4:4c:d4:0f:d7:88:57: 18:d6:a3:d5:4b:70:5c:59:d1:9a:0f:db:16:f3:ed: 01:3e:23:8a:60:05:23:2d:97:e3:23:80:46:76:0c: 36:07:4b:25:ac:76:c0:79:90:65:86:6c:fa:de:2d: 29:ab:8d:b7:29:6c:a3:c9:d2:84:a9:be:fc:9d:f0: 13:c7:70:21:8d:4d:ad:9e:f2:45:5c:ef:2f:b5:cd: 69:c6:b1:24:66:d5:a1:af:bd:9c:ec:d3:97:1e:15: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:82:6B:5F:C5:82:F5:E1:D4:AC:FD:E1:4E:AF:D0:66:43:77:5E X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:a2:cc:ba:8a:44:25:18:2e:1f:03:ac:7a:21:07:18:e0: fb:ea:59:d9:89:a9:2f:df:38:f7:71:18:b7:81:ad:3a:0d:a1: d4:ae:02:ab:35:7d:b9:60:c1:75:10:7f:e8:26:e2:3f:3d:48: 6d:26:96:5f:52:43:35:d8:0b:78:f4:28:a6:e1:b6:d1:aa:43: 0b:6f:51:ad:45:02:ee:14:07:96:8e:f6:3b:ff:2a:a1:ac:3e: d7:49:81:a5:4f:e4:c6:82:82:a0:4d:86:11:53:e8:07:3f:18: 5c:29:7c:b1:db:de:96:7e:72:5a:0d:44:02:bd:14:72:0b:ba: 07:04:c6:fa:bf:5f:cd:09:8d:c2:17:c9:56:8a:f9:5b:93:91: 64:00:aa:64:2b:c2:6b:db:dd:a1:2d:31:a7:3b:c4:a4:74:c6: 27:91:85:bc:7f:02:7e:92:c4:f8:18:17:ab:48:1c:62:ca:a1: 18:bd:bd:8f:ec:d0:df:a8:8b:bb:50:07:0e:ac:6d:03:a5:41: 29:51:96:bd:9f:81:e3:44:b4:8a:94:d5:5f:fc:1d:70:99:30: d7:7d:e9:b5:f8:c5:ef:51:bb:65:51:ce:a5:c5:5a:4e:90:d1: 77:8e:1c:49:af:fe:3a:bf:a0:e7:9e:41:37:3f:87:a6:7a:7e: ae:1b:16:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjUxMTAyMjAxNzA0WhcNMjUxMTA5MjAxNzA0WjAYMRYwFAYD VQQDEw02OTA3YmM0MS05YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4p3meMdJ1fP3M8zFcBRCObQxAMTG9qgDkPFsP0L0lFPsz39KinCCXO2/MZh nPUCJHnZrQFqo1fO98bgXdypGr79n0XYRRSPEmiS3TncVaeknch/7SrAMn7vjToe 6Ku/3YlfEffZVZBOOBoXaTt6B+l9X7CLwTc/N5FuZ+6y4UqdHB1K3stb6+FAJ7X/ DugdMYzJeaiqzGP+duz8DMRM1A/XiFcY1qPVS3BcWdGaD9sW8+0BPiOKYAUjLZfj I4BGdgw2B0slrHbAeZBlhmz63i0pq423KWyjydKEqb78nfATx3AhjU2tnvJFXO8v tc1pxrEkZtWhr72c7NOXHhX/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbcgmtf xYL14dSs/eFOr9BmQ3deMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0 MUhHYndLM0ZoN1BiaWVlOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvX6LMuopEJRguHwOseiEHGOD76lnZiakv3zj3cRi3ga06DaHUrgKr NX25YMF1EH/oJuI/PUhtJpZfUkM12At49Cim4bbRqkMLb1GtRQLuFAeWjvY7/yqh rD7XSYGlT+TGgoKgTYYRU+gHPxhcKXyx296WfnJaDUQCvRRyC7oHBMb6v1/NCY3C F8lWivlbk5FkAKpkK8Jr292hLTGnO8SkdMYnkYW8fwJ+ksT4GBerSBxiyqEYvb2P 7NDfqIu7UAcOrG0DpUEpUZa9n4HjRLSKlNVf/B1wmTDXfem1+MXvUbtlUc6lxVpO kNF3jhxJr/46v6DnnkE3P4emen6uGxYu -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:15 2025 by rpki-client