$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json) Hash identifier: 5H06jmguy71CnxtfPduhsDvkGhOhE9hKz54IQ9nVKrs= Subject key identifier: 39:69:91:84:97:0C:E0:75:36:23:D2:63:DA:FA:AA:40:7A:D1:61:76 Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft Manifest number: 0525 Signing time: Sun 02 Nov 2025 23:31:21 +0000 Manifest this update: Sun 02 Nov 2025 23:31:21 +0000 Manifest next update: Sun 09 Nov 2025 23:31:21 +0000 Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: nflW5c4vKIMSgaSlkW0oEd4eA2fa32Od6AsHT9MDmLo=) 2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: j71cmSthQcDo2Eras5pbfgnd1wVSMIr06Qrqouii3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: Nov 2 23:31:21 2025 GMT Not After : Nov 9 23:31:21 2025 GMT Subject: CN=6907e9c9-feb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:0d:2f:17:61:e4:cc:55:ab:ee:06:97:b8: 53:1f:02:a2:78:9c:14:50:a6:2d:4b:0f:ff:0c:02: b3:cf:04:44:6a:d9:60:3d:54:52:93:b8:25:d9:18: 64:f3:42:70:34:14:f3:c0:21:b7:e7:03:79:a2:e5: c4:ba:6f:b2:03:58:18:ed:76:9e:a0:87:38:bd:b2: 2f:3c:ad:20:59:41:2c:d8:c3:09:28:49:e9:69:00: 96:76:08:cf:d7:45:14:90:98:b5:1b:d8:e4:77:d8: be:7a:63:07:fb:58:ef:0c:33:9a:8e:05:dc:f6:40: 7d:d5:9c:c2:12:3a:9a:79:45:be:2e:12:90:91:b2: 54:72:3d:19:21:68:38:eb:86:63:99:90:94:0a:58: 63:29:11:67:a5:0c:9e:29:0a:31:9c:d5:8a:b6:7a: 90:80:20:ad:35:f2:3a:c8:1e:a3:b4:a4:86:ca:53: e1:37:cb:d0:f9:4a:05:8e:45:8d:fd:2a:86:5d:79: 5a:3c:4f:b9:9f:20:1b:7b:a2:fb:ff:1a:05:a5:f9: 72:11:d5:ee:e4:78:67:54:52:9e:7c:3f:c0:12:a8: 10:68:85:9c:7d:f8:89:3a:79:db:26:4b:2f:e3:44: f6:bd:6a:0b:85:15:76:8f:e7:45:3a:d7:64:03:d7: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:91:84:97:0C:E0:75:36:23:D2:63:DA:FA:AA:40:7A:D1:61:76 X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:72:fd:25:3b:9b:5a:eb:2d:67:64:ad:6f:1c:57:44:67:e0: d7:2e:f9:e2:c3:bf:df:af:01:48:32:89:d3:09:5f:0b:8f:c3: 9d:16:16:f9:c0:88:c2:2e:12:18:b5:11:83:16:26:f2:9a:5c: 34:7d:ad:bf:b7:02:e3:9a:03:f4:20:70:a4:5d:20:ec:f5:96: c6:96:c9:7b:30:e3:3e:28:14:ba:39:0e:c1:c9:f1:ed:ca:50: ca:f4:4f:b9:0a:01:8d:02:da:de:a7:54:59:b1:37:42:1c:d5: 71:56:e1:f0:ef:d6:97:2b:ef:45:f6:3f:72:3e:87:a7:4d:54: 2c:eb:02:c9:ac:a4:87:f4:a4:23:92:ea:b3:13:a7:84:82:4f: 0f:4e:e9:39:4f:34:93:63:4e:15:3c:80:74:8f:8d:fa:85:e0: db:96:65:53:1c:56:fa:97:10:a8:5a:7b:ba:96:16:5c:26:5c: 46:8e:39:cf:59:cc:c0:ff:3c:97:fa:30:f0:a4:35:ea:d4:81: 0c:39:96:9b:ee:e0:8b:5e:5c:d3:23:85:e1:d1:bd:a6:76:5b: 1a:e1:90:01:e2:3a:97:e5:d5:31:9e:58:da:76:5a:bd:e3:17: b7:87:18:7c:04:d0:a9:1e:9a:21:89:e0:2b:cc:79:79:72:bb: a1:e7:29:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjUxMTAyMjMzMTIxWhcNMjUxMTA5MjMzMTIxWjAYMRYwFAYD VQQDEw02OTA3ZTljOS1mZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xENLxdh5MxVq+4Gl7hTHwKieJwUUKYtSw//DAKzzwREatlgPVRSk7gl2Rhk 80JwNBTzwCG35wN5ouXEum+yA1gY7XaeoIc4vbIvPK0gWUEs2MMJKEnpaQCWdgjP 10UUkJi1G9jkd9i+emMH+1jvDDOajgXc9kB91ZzCEjqaeUW+LhKQkbJUcj0ZIWg4 64ZjmZCUClhjKRFnpQyeKQoxnNWKtnqQgCCtNfI6yB6jtKSGylPhN8vQ+UoFjkWN /SqGXXlaPE+5nyAbe6L7/xoFpflyEdXu5HhnVFKefD/AEqgQaIWcffiJOnnbJksv 40T2vWoLhRV2j+dFOtdkA9e8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlpkYSX DOB1NiPSY9r6qkB60WF2MB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt NnVzYjkwQjJsTnRPM2ExVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkcv0lO5ta6y1nZK1vHFdEZ+DXLvniw7/frwFIMonTCV8Lj8OdFhb5 wIjCLhIYtRGDFibymlw0fa2/twLjmgP0IHCkXSDs9ZbGlsl7MOM+KBS6OQ7ByfHt ylDK9E+5CgGNAtrep1RZsTdCHNVxVuHw79aXK+9F9j9yPoenTVQs6wLJrKSH9KQj kuqzE6eEgk8PTuk5TzSTY04VPIB0j436heDblmVTHFb6lxCoWnu6lhZcJlxGjjnP WczA/zyX+jDwpDXq1IEMOZab7uCLXlzTI4Xh0b2mdlsa4ZAB4jqX5dUxnljadlq9 4xe3hxh8BNCpHpohieArzHl5cruh5ykX -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:36 2025 by rpki-client