$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json) Hash identifier: DU7WpsaFE9CPFxuW03cUIfe8ZwBGh7kpRja9FMwSlAc= Subject key identifier: 57:26:96:5E:40:CB:33:61:85:5C:2D:B5:97:4B:EA:BD:84:1E:31:F9 Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft Manifest number: 09 Signing time: Mon 03 Nov 2025 08:01:35 +0000 Manifest this update: Mon 03 Nov 2025 08:01:34 +0000 Manifest next update: Mon 10 Nov 2025 08:01:34 +0000 Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: xzuYt8uK6+vi7hN0sdYpNO1GjxOjKNrLHYHdZw1nXDM=) 2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: AgPQ+g0vVS1AcBmkA5KDmZRoTP4TQytZY60/q5U1Jhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED Validity Not Before: Nov 3 08:01:34 2025 GMT Not After : Nov 10 08:01:34 2025 GMT Subject: CN=6908615e-d9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:5a:dc:68:c4:c9:06:a6:93:47:5d:82:00: 45:57:31:c7:f8:d4:8e:af:67:03:e2:89:4e:c4:9f: 34:e1:c4:91:de:8e:52:0e:70:c0:af:34:a4:54:e4: 91:29:a7:72:81:4c:31:c7:1f:19:bd:b3:f3:37:3d: 2d:b3:b5:11:62:9a:fd:45:33:60:6d:8f:df:b4:55: 98:39:29:7f:0c:3e:f7:b1:80:b8:d0:49:cd:be:c7: 24:87:ba:8f:48:57:dc:14:34:e0:d4:d8:e1:d9:ff: 65:9d:ed:cb:ce:98:05:95:4f:b5:d0:8b:4a:82:f8: 11:bb:a3:83:ca:f2:c4:11:7c:68:74:37:29:b2:f1: ee:07:d0:3e:0f:09:55:d7:0e:1b:f9:fa:ec:28:17: 52:48:3e:bd:48:02:90:ca:2d:2d:1c:30:45:df:ba: 33:0d:2a:35:d3:34:e4:3b:47:66:46:0c:aa:44:1b: 3f:3d:b2:9c:e2:07:b8:9c:63:28:67:1f:81:a1:2e: 78:40:37:f1:72:58:49:83:26:ec:29:a1:90:a0:f0: b5:0d:cb:bd:90:b8:51:ac:89:8d:4d:fe:92:d8:81: fc:0b:84:0c:3f:df:af:cf:9b:d1:d0:76:44:c2:ff: 9a:3c:5a:32:82:63:53:da:0c:08:88:2d:77:98:4d: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:26:96:5E:40:CB:33:61:85:5C:2D:B5:97:4B:EA:BD:84:1E:31:F9 X509v3 Authority Key Identifier: keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c8:c5:a7:6e:df:96:75:04:82:3d:55:3f:b2:d1:38:82:10: c8:c2:89:6c:c2:08:51:3a:95:ad:8e:1f:4c:9a:29:c8:ba:1b: da:48:c4:e5:7f:f6:a9:eb:ab:2a:56:e2:f3:b4:e0:f5:a4:7b: 45:e0:f3:24:ad:43:17:e5:0c:7f:6b:4d:22:e9:02:41:6c:f4: 1d:7d:9c:7f:f2:d0:ea:95:83:b5:bf:89:10:ed:c7:31:6a:d5: c6:ce:e1:51:81:c3:81:f2:a1:31:f2:4e:27:f5:44:ee:7a:dd: d0:c5:2e:be:46:a2:c5:36:9d:3e:90:7b:20:ba:a5:23:b0:d0: 69:5a:29:0e:37:d8:3e:2a:53:28:1a:28:ba:06:20:d0:fd:a7: 15:29:b3:77:44:87:a6:1e:41:05:a6:7a:23:44:64:c4:9f:ef: a5:7a:1d:a8:bf:9a:db:3e:8d:a4:81:a8:ec:b8:00:43:b4:fc: 78:9c:86:68:dc:97:9e:d0:88:4a:15:a2:ed:ad:ef:3e:46:bc: 53:c7:b4:c3:02:8a:7a:d1:cd:03:06:32:9b:e6:f2:92:2f:c2: 3c:2e:31:1c:17:c6:58:e5:e4:33:f2:55:0f:b8:0b:6b:34:35: 25:eb:29:f0:86:22:ce:f0:53:39:8f:df:1b:41:cc:57:f8:ae: f9:fa:7d:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTk5NjExMC8GA1UEBRMoNzA0QzM5RTlCMjMwMkVDOTdBOUNBRTk5RUNFNzk0NUI4 MUYyQ0JFRDAeFw0yNTExMDMwODAxMzRaFw0yNTExMTAwODAxMzRaMBgxFjAUBgNV BAMTDTY5MDg2MTVlLWQ5YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOb1rcaMTJBqaTR12CAEVXMcf41I6vZwPiiU7EnzThxJHejlIOcMCvNKRU5JEp p3KBTDHHHxm9s/M3PS2ztRFimv1FM2Btj9+0VZg5KX8MPvexgLjQSc2+xySHuo9I V9wUNODU2OHZ/2Wd7cvOmAWVT7XQi0qC+BG7o4PK8sQRfGh0Nymy8e4H0D4PCVXX Dhv5+uwoF1JIPr1IApDKLS0cMEXfujMNKjXTNOQ7R2ZGDKpEGz89spziB7icYyhn H4GhLnhAN/FyWEmDJuwpoZCg8LUNy72QuFGsiY1N/pLYgfwLhAw/36/Pm9HQdkTC /5o8WjKCY1PaDAiILXeYTZbPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVyaWXkDL M2GFXC21l0vqvYQeMfkwHwYDVR0jBBgwFoAUcEw56bIwLsl6nK6Z7OeUW4Hyy+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0FGN0Y0RDZDQUU2 NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNsNm5LNlo3T2VVVzRIeXkt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY0V3NTZiSXdMc2w2bks2WjdPZVVXNEh5eS0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx OTk2L0FGN0Y0RDZDQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNs Nm5LNlo3T2VVVzRIeXktMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfIxadu35Z1BII9VT+y0TiCEMjCiWzCCFE6la2OH0yaKci6G9pIxOV/ 9qnrqypW4vO04PWke0Xg8yStQxflDH9rTSLpAkFs9B19nH/y0OqVg7W/iRDtxzFq 1cbO4VGBw4HyoTHyTif1RO563dDFLr5GosU2nT6QeyC6pSOw0GlaKQ432D4qUyga KLoGIND9pxUps3dEh6YeQQWmeiNEZMSf76V6Hai/mts+jaSBqOy4AEO0/Hichmjc l57QiEoVou2t7z5GvFPHtMMCinrRzQMGMpvm8pIvwjwuMRwXxljl5DPyVQ+4C2s0 NSXrKfCGIs7wUzmP3xtBzFf4rvn6fbY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:18 2025 by rpki-client