$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: wob9E0JMN9eeN8DyTIuLOJytEjkTG8bpSjFFJGu7E1Y= Subject key identifier: 75:30:ED:B8:2F:82:52:02:6A:9F:5F:8A:E0:1C:19:2D:EC:86:D6:FA Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: B8 Signing time: Fri 07 Nov 2025 01:26:23 +0000 Manifest this update: Fri 07 Nov 2025 01:26:23 +0000 Manifest next update: Fri 14 Nov 2025 01:26:23 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: +cURy05yl8hB51PT7dpwN119D1vDN5GwjGD2XTjQCiY=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 01:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Nov 7 01:26:23 2025 GMT Not After : Nov 14 01:26:23 2025 GMT Subject: CN=690d4abf-61c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:da:79:3e:72:ee:32:61:e0:1e:6b:f3:ef:ef: b1:06:f3:57:cb:7f:e7:45:47:93:a6:0d:a0:f5:50: da:0b:d6:42:ed:d6:e1:6b:f8:a5:c0:03:af:3e:97: b4:18:07:4b:3b:88:f8:8b:4d:c6:d1:7f:33:58:04: ac:82:8a:49:18:b4:2d:25:e7:d9:fc:1a:b1:86:40: 57:c4:76:98:1e:d2:c4:59:01:f2:49:41:ec:24:94: 21:bd:38:2a:bd:12:e9:2d:89:28:c3:e5:04:a3:32: 90:ab:91:99:e1:c4:ce:53:bc:6a:ba:ce:57:20:ea: d5:50:c6:4b:cf:e9:3b:85:41:b9:31:b9:6c:ff:a7: 7e:5d:51:74:dc:f2:da:55:6e:58:62:af:8e:87:56: 9b:de:69:37:4a:b3:e4:a4:d2:f3:d9:6c:57:bb:8a: 66:3e:63:da:8a:18:1c:ff:c9:7f:5c:6d:3d:8a:72: 83:a8:e1:a0:51:ff:72:97:ab:8d:92:e9:3d:19:78: 7a:7c:76:fd:c2:99:42:e3:74:df:35:74:22:8e:4e: ef:7a:ad:81:dd:ce:9e:a2:f6:05:4e:d9:ef:fc:b8: e7:26:14:94:16:57:7f:99:87:b5:3d:28:8d:79:d5: 1c:e9:7a:60:41:59:68:e4:69:e4:6c:66:78:ef:61: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:30:ED:B8:2F:82:52:02:6A:9F:5F:8A:E0:1C:19:2D:EC:86:D6:FA X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:db:ed:86:d7:da:c0:45:fb:5d:c7:c6:eb:e9:92:2a:8d:b9: f3:03:99:da:80:15:cd:62:c5:a8:53:dc:c9:5e:ec:77:ac:c1: 72:4f:1a:0f:a8:8d:11:64:c7:19:a4:92:14:6c:0a:66:06:20: a3:9c:4b:cc:33:97:9b:90:36:d4:d6:66:01:94:df:73:e3:da: 30:b6:fe:b7:3f:c2:19:f2:67:fd:60:d5:27:0e:7d:b3:27:cc: 00:8d:a4:8a:1e:b4:03:8f:c3:95:f4:28:af:29:ca:84:aa:08: bc:5c:02:2f:33:dd:ec:75:b9:5e:1d:7a:88:95:58:e0:61:74: 85:96:0e:a0:43:77:4e:8b:34:f8:8e:bf:f1:71:1a:45:21:96: 27:56:fb:03:b9:69:3c:a0:e3:6a:f7:70:46:56:e8:68:e4:68: 85:3a:0b:4c:4c:e9:14:c9:a4:53:8d:b1:36:b7:86:35:14:b9: 4b:58:a7:5f:2b:d8:bd:ca:3e:31:4c:70:4e:95:9c:92:40:ad: 83:f6:13:c2:0b:e9:2e:b6:70:c6:b2:9f:f2:77:f1:5d:b9:68: da:40:e6:cb:fa:aa:06:c1:14:85:0c:db:f7:1d:76:c0:6a:32: 2b:81:8b:9f:09:ed:fb:c3:d6:d9:8e:02:9e:7a:7c:ec:07:76: a2:3f:1e:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUxMTA3MDEyNjIzWhcNMjUxMTE0MDEyNjIzWjAYMRYwFAYD VQQDEw02OTBkNGFiZi02MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Np5PnLuMmHgHmvz7++xBvNXy3/nRUeTpg2g9VDaC9ZC7dbha/ilwAOvPpe0 GAdLO4j4i03G0X8zWASsgopJGLQtJefZ/BqxhkBXxHaYHtLEWQHySUHsJJQhvTgq vRLpLYkow+UEozKQq5GZ4cTOU7xqus5XIOrVUMZLz+k7hUG5Mbls/6d+XVF03PLa VW5YYq+Oh1ab3mk3SrPkpNLz2WxXu4pmPmPaihgc/8l/XG09inKDqOGgUf9yl6uN kuk9GXh6fHb9wplC43TfNXQijk7veq2B3c6eovYFTtnv/LjnJhSUFld/mYe1PSiN edUc6XpgQVlo5GnkbGZ472FOJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUw7bgv glICap9fiuAcGS3shtb6MB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs2+2G19rARftdx8br6ZIqjbnzA5nagBXNYsWoU9zJXux3rMFyTxoP qI0RZMcZpJIUbApmBiCjnEvMM5ebkDbU1mYBlN9z49owtv63P8IZ8mf9YNUnDn2z J8wAjaSKHrQDj8OV9CivKcqEqgi8XAIvM93sdbleHXqIlVjgYXSFlg6gQ3dOizT4 jr/xcRpFIZYnVvsDuWk8oONq93BGVuho5GiFOgtMTOkUyaRTjbE2t4Y1FLlLWKdf K9i9yj4xTHBOlZySQK2D9hPCC+kutnDGsp/yd/FduWjaQObL+qoGwRSFDNv3HXbA ajIrgYufCe37w9bZjgKeenzsB3aiPx5u -----END CERTIFICATE-----Generated at Fri Nov 7 11:46:53 2025 by rpki-client