$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: cq6LS/PfP0qZYztULCNxj2J1fP/KCc3rjs6geeazPIY= Subject key identifier: C7:C2:A4:2B:21:B2:49:61:36:05:A8:D4:19:AA:20:1D:27:56:4F:16 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 350C Signing time: Tue 04 Nov 2025 14:35:08 +0000 Manifest this update: Tue 04 Nov 2025 14:35:07 +0000 Manifest next update: Tue 11 Nov 2025 14:35:07 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: Lk63gt7n4MPdiFHZgmzM6a/GKgAY8TrzMdgvPv9KUDw=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Nov 4 14:35:07 2025 GMT Not After : Nov 11 14:35:07 2025 GMT Subject: CN=690a0f1c-459d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:30:6f:35:f4:7c:dd:3e:ce:34:e6:56:7f: 44:7e:ec:b0:74:87:81:98:89:ba:35:bc:5b:83:c4: b3:d0:01:e8:79:90:ea:8b:27:a0:b6:01:1a:8a:57: d0:a7:87:ae:61:a7:c1:6a:ac:c0:23:b8:eb:45:41: 51:f5:91:ab:57:85:3b:bd:b3:34:e4:da:72:23:da: 37:0a:0b:68:c5:7c:38:17:23:a6:08:45:a5:55:fa: 5c:66:ab:4e:df:4e:30:62:1f:82:57:05:57:2f:25: a5:ef:08:63:33:14:64:3a:80:1d:ed:be:ae:d5:d7: 26:0d:5f:d4:80:f1:c7:2d:0c:a3:f5:b8:ef:e2:11: 1d:60:6e:90:fb:aa:57:98:e5:d9:fc:03:0c:0b:c3: 97:a5:3d:7a:b0:3c:4d:7b:b7:3e:f1:3b:30:9a:7a: 62:2a:b8:fb:8a:0e:2c:2f:26:94:2c:21:ef:a9:c5: 29:d7:a7:33:35:91:f0:bf:1e:ea:ad:33:f5:f0:87: 33:2e:b3:4d:85:01:74:03:a9:64:4c:e1:e3:ae:62: 00:f2:62:1f:1c:62:0c:3f:9a:21:eb:ff:b2:c3:02: 81:f8:25:24:5f:02:c8:a8:ab:6a:94:ec:ec:1c:7f: 57:73:65:a7:99:34:99:20:eb:dd:dd:18:2c:84:c7: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:A4:2B:21:B2:49:61:36:05:A8:D4:19:AA:20:1D:27:56:4F:16 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:39:a5:91:62:a7:bf:68:2a:db:1b:bd:17:6e:96:d0:d0:95: 5f:45:81:59:c9:63:d9:8b:11:42:e4:25:a1:74:3d:5b:61:ad: 9b:f1:6d:71:71:11:ae:b2:8f:a8:a5:3d:ba:69:47:f7:01:af: fa:c9:92:67:93:55:b0:15:4b:60:a2:ff:8e:b0:b5:ef:6b:cd: fb:21:3e:b0:dc:bc:5c:4f:87:ba:bf:d5:17:fa:77:ee:73:51: 43:2a:de:b5:7d:ee:78:cc:cc:f9:79:c5:0c:b3:e4:e2:e4:0f: e6:7b:b8:03:1e:31:3d:a5:99:b1:09:86:8e:33:64:ae:b2:4f: e3:a3:dd:d0:c5:b1:ed:da:43:9f:a1:a6:c0:0d:d4:6f:8e:76: 3d:55:f3:1a:05:33:b8:dc:74:e4:76:f1:1f:92:57:d2:25:df: a4:a4:3b:ce:00:95:e9:f3:27:ed:57:60:6b:55:32:4f:7d:55: fc:a3:7b:f3:cd:59:27:d1:b4:33:5b:11:0b:20:2e:b2:22:ef: 6d:7f:61:dd:19:d3:2c:61:2c:c7:c7:c9:77:da:b8:1c:f7:cf: b7:04:1c:1e:e1:be:a2:22:55:df:bf:f8:02:d1:bd:7d:42:85: c2:22:f3:06:88:9a:0d:da:5c:34:8e:58:b4:a9:ac:cc:fc:36: 6b:62:b7:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUxMTA0MTQzNTA3WhcNMjUxMTExMTQzNTA3WjAYMRYwFAYD VQQDEw02OTBhMGYxYy00NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuMwbzX0fN0+zjTmVn9EfuywdIeBmIm6Nbxbg8Sz0AHoeZDqiyegtgEailfQ p4euYafBaqzAI7jrRUFR9ZGrV4U7vbM05NpyI9o3CgtoxXw4FyOmCEWlVfpcZqtO 304wYh+CVwVXLyWl7whjMxRkOoAd7b6u1dcmDV/UgPHHLQyj9bjv4hEdYG6Q+6pX mOXZ/AMMC8OXpT16sDxNe7c+8TswmnpiKrj7ig4sLyaULCHvqcUp16czNZHwvx7q rTP18IczLrNNhQF0A6lkTOHjrmIA8mIfHGIMP5oh6/+ywwKB+CUkXwLIqKtqlOzs HH9Xc2WnmTSZIOvd3RgshMc1HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfCpCsh sklhNgWo1BmqIB0nVk8WMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgOaWRYqe/aCrbG70XbpbQ0JVfRYFZyWPZixFC5CWhdD1bYa2b8W1x cRGuso+opT26aUf3Aa/6yZJnk1WwFUtgov+OsLXva837IT6w3LxcT4e6v9UX+nfu c1FDKt61fe54zMz5ecUMs+Ti5A/me7gDHjE9pZmxCYaOM2Susk/jo93QxbHt2kOf oabADdRvjnY9VfMaBTO43HTkdvEfklfSJd+kpDvOAJXp8yftV2BrVTJPfVX8o3vz zVkn0bQzWxELIC6yIu9tf2HdGdMsYSzHx8l32rgc98+3BBwe4b6iIlXfv/gC0b19 QoXCIvMGiJoN2lw0jli0qazM/DZrYrfg -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:56 2025 by rpki-client