$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: uKOi4EFsFQoGTgnBx/jUckcfW6qDqLBg0NYzSu4/jF4= Subject key identifier: 87:71:EF:05:19:AA:4A:12:D3:CF:F6:A9:7D:8A:FF:26:46:14:AE:5D Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B9D Signing time: Tue 04 Nov 2025 19:05:39 +0000 Manifest this update: Tue 04 Nov 2025 19:05:39 +0000 Manifest next update: Tue 11 Nov 2025 19:05:39 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: KHZs9n3sDRCPLOYJyC2DIFlNOGuCseSpd0gYbIuBHKA=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Nov 4 19:05:39 2025 GMT Not After : Nov 11 19:05:39 2025 GMT Subject: CN=690a4e83-1d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:a1:92:5f:cd:03:06:91:99:fd:1c:13:ba: be:b4:f7:95:2c:01:2d:68:31:4a:92:6b:55:2c:6b: 9e:9b:93:4b:bf:2d:70:51:6d:06:af:48:80:84:60: 0e:bc:9e:b1:50:2f:ea:20:2b:a2:0d:92:25:0f:16: 1b:1b:65:6a:dd:19:0d:2f:e4:de:8f:98:a9:f8:82: a5:9a:92:4d:ea:1f:3f:dd:a3:3e:6d:f6:81:26:40: b5:1e:8d:49:c4:55:c6:4f:57:2f:a3:f5:7a:a8:a7: a4:11:ae:87:01:24:3f:fd:ea:7c:af:e6:31:c2:92: 1e:24:ac:be:a8:7b:ee:59:59:a6:c4:44:77:c0:92: 80:4e:3c:09:1a:46:b1:0f:15:10:c3:8e:c5:c6:a9: ad:80:63:fe:ca:c1:7f:35:24:dc:94:f7:c7:59:78: ed:03:1e:ba:6f:5d:d6:a7:0e:54:c1:ca:92:ca:22: 61:bf:9c:48:a6:ca:b3:05:3d:b7:a3:20:e2:97:0e: 4f:43:8b:1a:8a:c0:bf:cd:80:7a:12:ae:09:58:63: 73:67:a4:a0:7c:9a:80:3f:d2:be:72:19:68:5d:ac: e1:e9:9b:7f:ef:39:d7:68:9e:a0:24:69:22:8d:3e: 48:2d:d7:43:16:23:6e:c9:cb:29:7b:f8:6a:c9:95: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:EF:05:19:AA:4A:12:D3:CF:F6:A9:7D:8A:FF:26:46:14:AE:5D X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ca:bf:94:db:ae:6d:9b:c3:fc:e6:c1:81:6d:9d:29:ae:d8: 7f:df:72:7f:76:11:f5:4e:3d:dc:0c:e9:08:a6:90:bd:4f:35: 6d:78:c4:6e:cf:af:ee:bf:94:da:de:5c:57:bd:61:cb:76:6e: ba:6e:70:f1:17:80:70:9f:e8:ce:86:ec:15:31:f5:aa:3b:b0: 9e:47:9a:34:f2:7c:da:4a:cc:22:45:f5:4e:ac:dc:42:6e:56: 76:4f:72:1e:ee:62:b9:25:9f:b9:ca:c0:3e:d6:45:e7:53:a6: 27:a2:01:cd:2c:c6:ac:23:aa:5f:ad:0a:a4:29:80:a3:cd:86: fd:71:51:c7:9d:6d:50:90:f5:b4:1e:66:ab:c7:58:ee:59:2c: 7e:ca:c1:b2:3e:28:ed:15:41:86:24:b4:7b:96:da:44:96:a9: 44:38:35:60:d0:e6:54:62:c7:6c:b5:4b:52:0e:a2:01:27:27: fe:5c:66:84:0c:ca:ef:64:2d:c6:b4:65:aa:44:86:2a:06:2d: ed:03:99:0f:f9:37:cc:43:8c:60:4d:c6:b7:e3:7c:f3:67:d9: 9b:71:3d:d0:ba:50:97:14:c7:1f:77:0d:8d:e9:12:81:89:db: 90:65:01:35:1e:17:4d:4a:5d:51:37:4b:3a:00:bd:08:8c:79: 4d:41:94:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUxMTA0MTkwNTM5WhcNMjUxMTExMTkwNTM5WjAYMRYwFAYD VQQDEw02OTBhNGU4My0xZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZqhkl/NAwaRmf0cE7q+tPeVLAEtaDFKkmtVLGuem5NLvy1wUW0Gr0iAhGAO vJ6xUC/qICuiDZIlDxYbG2Vq3RkNL+Tej5ip+IKlmpJN6h8/3aM+bfaBJkC1Ho1J xFXGT1cvo/V6qKekEa6HASQ//ep8r+YxwpIeJKy+qHvuWVmmxER3wJKATjwJGkax DxUQw47FxqmtgGP+ysF/NSTclPfHWXjtAx66b13Wpw5UwcqSyiJhv5xIpsqzBT23 oyDilw5PQ4saisC/zYB6Eq4JWGNzZ6SgfJqAP9K+chloXazh6Zt/7znXaJ6gJGki jT5ILddDFiNuycspe/hqyZXaVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdx7wUZ qkoS08/2qX2K/yZGFK5dMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTyr+U265tm8P85sGBbZ0prth/33J/dhH1Tj3cDOkIppC9TzVteMRu z6/uv5Ta3lxXvWHLdm66bnDxF4Bwn+jOhuwVMfWqO7CeR5o08nzaSswiRfVOrNxC blZ2T3Ie7mK5JZ+5ysA+1kXnU6YnogHNLMasI6pfrQqkKYCjzYb9cVHHnW1QkPW0 Hmarx1juWSx+ysGyPijtFUGGJLR7ltpElqlEODVg0OZUYsdstUtSDqIBJyf+XGaE DMrvZC3GtGWqRIYqBi3tA5kP+TfMQ4xgTca343zzZ9mbcT3QulCXFMcfdw2N6RKB iduQZQE1HhdNSl1RN0s6AL0IjHlNQZQN -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:15 2025 by rpki-client