$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: GcQtEISlVrTfbLm2h0FUOkUQmTM8IK2U69Jm63WfBVU= Subject key identifier: 9B:10:EB:9A:DC:64:E5:ED:AD:93:5F:F9:39:E0:04:2F:AF:0B:C5:D2 Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0C55 Signing time: Tue 04 Nov 2025 18:41:45 +0000 Manifest this update: Tue 04 Nov 2025 18:41:45 +0000 Manifest next update: Tue 11 Nov 2025 18:41:45 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: evFuOl5/GYlsKetHk0VEpeBVLJ2n5hc6IhASU/sb+Z4=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 3f3zqC4M9r+CBjBgJL/J6zSN/PgrTrc+js52IEKhV5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: Nov 4 18:41:45 2025 GMT Not After : Nov 11 18:41:45 2025 GMT Subject: CN=690a48e9-6de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:20:f1:7a:91:8a:81:92:24:f8:16:ee:77: d4:5d:c8:da:72:99:b2:f4:77:1a:c0:89:e2:a7:99: fd:74:b5:31:5f:27:29:6e:c7:0c:c7:03:f7:d6:b6: 2e:3b:bb:df:99:cf:b1:9e:59:c9:c8:dc:23:1d:ac: 3c:c3:8d:d4:e2:ed:95:ff:8d:47:01:48:3e:98:57: 4c:8f:40:90:a8:45:0a:6e:6e:0f:36:0f:b5:cc:90: 82:11:cf:0d:dc:60:a8:8f:e3:8f:b8:59:6e:93:22: 6c:0b:7e:c3:c1:d2:ee:95:e9:97:b3:17:e9:88:c8: 6f:e4:16:bb:db:01:ff:b9:22:e9:6e:a4:48:eb:e9: fe:6b:01:3a:dd:bf:e0:63:71:65:b0:43:1e:e1:3c: 8e:59:9c:7d:5d:31:67:eb:86:49:10:7a:7d:10:45: 44:66:2e:57:c6:d1:58:4a:34:d9:4a:4b:c8:7e:5b: a4:11:c2:34:43:f1:0b:c0:e8:72:41:35:88:ac:31: 85:98:c2:ba:b7:62:1f:28:df:81:7c:fd:28:7c:31: fa:f2:56:cd:74:f4:3c:44:a4:fa:66:19:ee:d0:f8: 97:41:90:49:b9:0b:fc:a2:94:f6:d8:60:e2:d8:56: 3e:b0:5e:10:4f:4f:cb:e5:a4:bd:b1:79:d9:2d:f2: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:10:EB:9A:DC:64:E5:ED:AD:93:5F:F9:39:E0:04:2F:AF:0B:C5:D2 X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1d:2a:9c:4e:2f:5f:48:59:c2:41:98:cc:37:c5:90:5a:d1: 76:21:f0:c7:c3:8f:ab:98:67:5c:11:98:cb:d5:eb:b2:ab:62: 0d:d3:ea:57:f8:8c:1d:ec:e9:ed:29:be:20:fc:52:6d:2b:68: b4:c2:d6:61:2f:24:11:e0:e2:f0:63:23:60:de:59:81:70:cb: 70:f7:13:68:a8:77:9b:e7:6a:dd:f2:bb:eb:5b:a9:dc:f5:38: 59:3d:65:f5:0b:bb:12:11:ba:ac:2e:7b:80:cc:2e:71:74:6e: 69:7e:75:23:2d:d4:8b:c5:d3:71:de:da:42:3f:1c:ff:17:f5: 6b:52:75:ed:27:24:41:61:5b:b6:7e:ab:c7:25:d3:e6:2a:97: 38:26:b2:db:01:c5:b6:b1:f4:cd:bc:a7:bc:c0:e0:88:ec:bb: 46:41:a9:8d:4c:32:a3:9a:ec:d9:85:54:3b:bb:af:18:62:8c: 85:04:d2:1d:fd:b2:27:c8:14:04:37:dc:65:5b:64:73:b2:b6: ec:34:cd:44:22:e2:ef:f1:a3:b9:d3:71:43:95:be:27:22:03: 96:f9:f2:aa:ab:d6:16:99:7e:a3:ae:34:e4:3d:22:96:05:84: 6b:87:9b:81:14:83:3a:92:93:f7:23:db:b9:8f:29:5d:32:21: 17:3e:9c:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjUxMTA0MTg0MTQ1WhcNMjUxMTExMTg0MTQ1WjAYMRYwFAYD VQQDEw02OTBhNDhlOS02ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEkg8XqRioGSJPgW7nfUXcjacpmy9HcawInip5n9dLUxXycpbscMxwP31rYu O7vfmc+xnlnJyNwjHaw8w43U4u2V/41HAUg+mFdMj0CQqEUKbm4PNg+1zJCCEc8N 3GCoj+OPuFlukyJsC37DwdLulemXsxfpiMhv5Ba72wH/uSLpbqRI6+n+awE63b/g Y3FlsEMe4TyOWZx9XTFn64ZJEHp9EEVEZi5XxtFYSjTZSkvIflukEcI0Q/ELwOhy QTWIrDGFmMK6t2IfKN+BfP0ofDH68lbNdPQ8RKT6Zhnu0PiXQZBJuQv8opT22GDi 2FY+sF4QT0/L5aS9sXnZLfKQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsQ65rc ZOXtrZNf+TngBC+vC8XSMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXHSqcTi9fSFnCQZjMN8WQWtF2IfDHw4+rmGdcEZjL1euyq2IN0+pX +Iwd7OntKb4g/FJtK2i0wtZhLyQR4OLwYyNg3lmBcMtw9xNoqHeb52rd8rvrW6nc 9ThZPWX1C7sSEbqsLnuAzC5xdG5pfnUjLdSLxdNx3tpCPxz/F/VrUnXtJyRBYVu2 fqvHJdPmKpc4JrLbAcW2sfTNvKe8wOCI7LtGQamNTDKjmuzZhVQ7u68YYoyFBNId /bInyBQEN9xlW2RzsrbsNM1EIuLv8aO503FDlb4nIgOW+fKqq9YWmX6jrjTkPSKW BYRrh5uBFIM6kpP3I9u5jyldMiEXPpx1 -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:22 2025 by rpki-client