$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: vnWHj8pKESK+ojyOdrwf6zQohLFF9bl5/gGeKM8Ru7A= Subject key identifier: 97:FE:B6:E4:3A:81:EA:69:07:E4:DB:8F:47:9E:24:20:BA:06:EE:4B Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 03A9 Signing time: Wed 05 Nov 2025 00:53:16 +0000 Manifest this update: Wed 05 Nov 2025 00:53:16 +0000 Manifest next update: Wed 12 Nov 2025 00:53:16 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: LfKDg/89Jc9JgKO9VceCLWPmuara9gFZULq0D641itk=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=) 4: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Nov 5 00:53:16 2025 GMT Not After : Nov 12 00:53:16 2025 GMT Subject: CN=690a9ffc-3f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:3b:d4:b9:ef:19:b7:69:4a:20:08:4a:4e: 78:fc:d2:fb:19:cc:ab:4c:49:31:73:6f:5b:9a:77: cc:6c:65:d7:7e:bc:49:1c:73:3c:31:ab:e2:7c:0b: 90:8f:c0:f2:53:56:b8:cb:bc:3d:47:58:54:0e:31: e6:7d:84:24:ed:22:3a:89:98:51:71:b7:63:52:ad: 5e:8a:51:22:06:5a:a1:b0:23:da:3c:09:c2:3f:f0: 65:c2:44:3f:d9:d8:b4:f9:a6:73:14:2e:01:cc:e3: 12:2a:77:ff:64:af:eb:a3:0c:36:21:fa:12:8a:37: 1d:ac:d0:a7:76:02:c6:ad:f1:41:ec:a9:18:05:91: d5:7e:9e:4d:63:ad:98:2f:b8:5c:65:cb:94:bf:27: 1d:83:3b:f5:27:d8:9b:51:bc:de:59:bb:5a:8f:ce: 02:71:01:d9:13:5e:48:ba:eb:6c:db:8b:6f:f2:2c: f6:0d:2e:30:1c:2c:0b:53:bf:1c:d7:20:0f:97:e2: 6b:fa:67:3d:ea:56:d4:5d:8a:d0:47:98:4c:68:10: 23:85:f3:f8:9b:27:0b:5a:11:f3:7f:9f:b5:bc:ce: 71:8e:98:6a:de:b0:3d:62:18:cd:ec:4a:89:9f:6d: 28:81:11:87:2b:66:ef:9a:ff:76:4f:78:45:1f:89: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FE:B6:E4:3A:81:EA:69:07:E4:DB:8F:47:9E:24:20:BA:06:EE:4B X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:75:ca:59:2d:ce:00:00:c8:82:98:1b:99:7d:2a:3e:15:09: a9:f8:28:db:2e:fc:c3:9b:19:35:5b:1e:76:4b:a3:fc:78:f1: e1:43:04:f8:4a:58:0d:09:1b:ce:a6:d0:a5:ca:30:42:0e:6c: b9:85:df:c0:10:d5:86:08:60:0c:e5:a0:6f:1d:3c:1a:4a:84: 8b:7f:31:ae:89:75:e5:04:67:ef:5d:2f:f4:bf:79:ae:35:95: b0:f0:40:e3:5c:bf:1c:03:ee:dc:78:de:11:75:d4:54:dd:c7: 4f:f6:0f:c9:82:86:f3:ef:d0:d4:6b:e3:75:a7:0b:b3:09:92: 50:2b:15:f3:dd:82:58:9f:c3:82:2a:05:0c:d1:09:02:ff:1b: 08:95:d0:cc:c4:87:4d:4f:ed:f3:9c:b9:81:d0:b1:1b:39:d9: 74:71:75:c6:8c:73:17:1d:c5:03:dc:28:f8:1a:19:f8:dd:d8: 93:c7:fe:63:47:85:66:25:99:29:0b:94:7d:06:62:1b:de:ef: ba:73:8a:97:65:c3:a9:fe:ce:43:40:02:23:e9:61:80:46:66: 0d:3a:d4:36:b4:1c:d6:a3:7f:ff:47:bb:86:2f:02:63:d7:40: 46:95:98:d0:39:53:5c:6f:b7:6c:8b:6e:50:8a:1c:db:a9:25: 48:b0:14:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUxMTA1MDA1MzE2WhcNMjUxMTEyMDA1MzE2WjAYMRYwFAYD VQQDEw02OTBhOWZmYy0zZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1871LnvGbdpSiAISk54/NL7GcyrTEkxc29bmnfMbGXXfrxJHHM8MavifAuQ j8DyU1a4y7w9R1hUDjHmfYQk7SI6iZhRcbdjUq1eilEiBlqhsCPaPAnCP/BlwkQ/ 2di0+aZzFC4BzOMSKnf/ZK/roww2IfoSijcdrNCndgLGrfFB7KkYBZHVfp5NY62Y L7hcZcuUvycdgzv1J9ibUbzeWbtaj84CcQHZE15Iuuts24tv8iz2DS4wHCwLU78c 1yAPl+Jr+mc96lbUXYrQR5hMaBAjhfP4mycLWhHzf5+1vM5xjphq3rA9YhjN7EqJ n20ogRGHK2bvmv92T3hFH4kaLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf+tuQ6 geppB+Tbj0eeJCC6Bu5LMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVdcpZLc4AAMiCmBuZfSo+FQmp+CjbLvzDmxk1Wx52S6P8ePHhQwT4 SlgNCRvOptClyjBCDmy5hd/AENWGCGAM5aBvHTwaSoSLfzGuiXXlBGfvXS/0v3mu NZWw8EDjXL8cA+7ceN4RddRU3cdP9g/Jgobz79DUa+N1pwuzCZJQKxXz3YJYn8OC KgUM0QkC/xsIldDMxIdNT+3znLmB0LEbOdl0cXXGjHMXHcUD3Cj4Ghn43diTx/5j R4VmJZkpC5R9BmIb3u+6c4qXZcOp/s5DQAIj6WGARmYNOtQ2tBzWo3//R7uGLwJj 10BGlZjQOVNcb7dsi25QihzbqSVIsBTh -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:44 2025 by rpki-client