$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: bCjA1qsQhwvmSyDK8PPnuUov+Fsp06drexyEUk+tDPs= Subject key identifier: 67:01:0F:B9:88:FD:1F:03:8F:D3:D1:BE:D4:7B:32:70:D7:E6:D4:FF Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0169 Signing time: Mon 03 Nov 2025 04:20:46 +0000 Manifest this update: Mon 03 Nov 2025 04:20:45 +0000 Manifest next update: Mon 10 Nov 2025 04:20:45 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: hPk29xq6b52+ycjaqkY23tdctIoNw+BDhGtkVpMbZuU=) 2: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: yi/JlbD7n+64UZKPjWeRYXCwO+TbmKfGvCIR+gFBIgU=) 3: 936A4548AC3A11F0A9C43F44C4F9AE02.roa (hash: aDzusaC8Tp4Xh29QzEkDqXm9UtTCSIlF3bFjfnnKcb4=) 4: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: kdnh0lY80uMfga5l6WUOTwTWs5iXaL/0Tn0l6KDoAeU=) 5: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: Rw5/f7mwiL2A4bDLQlquOGpfyNbiDbGp1uerfy4o6ls=) 6: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: 9NSBUz8m7XvUpzDF2q/kWtrtqPYOWvRlzQxmdt8OCJc=) 7: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: EN6MJJBs25VJA8BxPoTDjeqUMnebmHL6ptBQ7dXtzww=) 8: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: 4bqguqQkO2NdVWuTGwGDP28FXTuH4VtBBVIWhIpTMAk=) 9: BB17221E211611F08D31C34DC4F9AE02.roa (hash: ROJzIN797AliUmkcNaXXEwujC8/puzfhlC19YDeoFFk=) 10: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: 5GSc16lAwm/VgJPQr9dFvZJgXnG3knNsBXTvWJ5YEVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Nov 3 04:20:45 2025 GMT Not After : Nov 10 04:20:45 2025 GMT Subject: CN=69082d9d-c494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:5c:89:ae:aa:f7:3e:0b:e6:12:a8:7c:b7: 2c:a7:68:23:e5:62:c8:47:3a:9a:00:05:86:da:d7: 99:79:41:36:58:b6:c5:99:e6:03:89:6a:30:3d:2c: 40:eb:59:c3:83:44:57:5b:d0:f6:4e:ab:c6:82:20: dd:da:73:70:ae:9c:b0:41:b1:d5:ef:cc:79:66:e0: f4:d8:65:fc:02:d8:9e:ab:6d:a6:32:66:33:32:37: 62:38:4c:37:60:3c:11:e0:7a:10:d6:40:30:3f:12: 0f:2f:76:08:ac:73:c6:fb:3e:9f:87:37:d8:eb:50: 01:58:5d:4d:c1:db:dc:04:7b:9a:f4:7a:cc:af:11: 4d:d2:1a:a4:a2:56:ed:85:0b:4e:a1:ea:f9:12:ee: 18:0e:ee:3b:d7:82:e0:1a:d5:5d:79:93:67:f6:3b: 2e:99:34:61:8b:23:79:d6:c1:ad:8a:40:4e:06:8f: a2:8f:b9:53:cf:76:2a:9d:44:10:22:22:71:ba:e6: 44:9b:88:0e:fe:df:af:13:55:39:8d:3b:37:8d:33: 32:5d:5d:f9:cf:3e:b0:a7:72:99:bf:a7:25:2f:cb: bd:ee:1b:d9:13:c9:a9:d6:4d:3b:85:37:9b:c9:11: 76:ea:cb:fc:ef:8c:4f:66:72:50:7d:02:87:ee:d6: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:0F:B9:88:FD:1F:03:8F:D3:D1:BE:D4:7B:32:70:D7:E6:D4:FF X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1d:6c:b9:b3:cb:8b:6a:46:b0:a5:1c:dd:ea:22:99:8a:1d: c6:23:6d:b0:9d:a4:a5:14:3c:73:80:83:15:1d:2f:be:04:4f: b7:3d:e9:4f:a7:ce:74:1e:c9:d3:ef:6e:05:8e:98:d9:81:45: f4:2a:83:51:d2:d4:0b:9a:b0:f5:07:7f:1f:6b:f0:9a:e1:ed: c1:f2:88:2c:f9:12:7d:bf:59:80:d8:8e:7c:36:ab:79:6b:ae: a6:2a:6e:bd:08:fe:15:30:dc:e8:eb:8a:50:05:fa:c7:38:50: de:56:10:1e:c1:1d:c9:c0:da:ff:52:32:29:8a:9b:2b:88:68: c0:2c:c6:f7:4c:53:e6:c1:e2:5b:83:74:c9:59:1e:79:3b:74: a1:2b:3c:d6:8a:aa:ba:c2:ea:ac:02:37:ef:19:dd:e0:60:1b: e3:15:0c:12:5d:60:2e:05:ee:37:f3:ba:6f:a5:9b:9f:fc:a4: 0e:16:07:a9:ac:f8:79:97:3c:d1:bd:57:b5:e5:4e:54:3a:fd: 86:e9:e5:30:79:4d:c1:2e:76:95:51:50:1f:f8:80:7f:2d:3e: 87:1b:a9:e7:1f:54:3b:50:74:98:85:f5:85:37:19:0f:d6:cb: 33:4b:71:f0:10:c2:86:d4:42:63:71:e0:77:df:39:fa:55:cd: 4a:11:3e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUxMTAzMDQyMDQ1WhcNMjUxMTEwMDQyMDQ1WjAYMRYwFAYD VQQDEw02OTA4MmQ5ZC1jNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstVcia6q9z4L5hKofLcsp2gj5WLIRzqaAAWG2teZeUE2WLbFmeYDiWowPSxA 61nDg0RXW9D2TqvGgiDd2nNwrpywQbHV78x5ZuD02GX8Atieq22mMmYzMjdiOEw3 YDwR4HoQ1kAwPxIPL3YIrHPG+z6fhzfY61ABWF1NwdvcBHua9HrMrxFN0hqkolbt hQtOoer5Eu4YDu4714LgGtVdeZNn9jsumTRhiyN51sGtikBOBo+ij7lTz3YqnUQQ IiJxuuZEm4gO/t+vE1U5jTs3jTMyXV35zz6wp3KZv6clL8u97hvZE8mp1k07hTeb yRF26sv874xPZnJQfQKH7tbVtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcBD7mI /R8Dj9PRvtR7MnDX5tT/MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlHWy5s8uLakawpRzd6iKZih3GI22wnaSlFDxzgIMVHS++BE+3PelP p850HsnT724FjpjZgUX0KoNR0tQLmrD1B38fa/Ca4e3B8ogs+RJ9v1mA2I58Nqt5 a66mKm69CP4VMNzo64pQBfrHOFDeVhAewR3JwNr/UjIpipsriGjALMb3TFPmweJb g3TJWR55O3ShKzzWiqq6wuqsAjfvGd3gYBvjFQwSXWAuBe4387pvpZuf/KQOFgep rPh5lzzRvVe15U5UOv2G6eUweU3BLnaVUVAf+IB/LT6HG6nnH1Q7UHSYhfWFNxkP 1sszS3HwEMKG1EJjceB33zn6Vc1KET6j -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:43 2025 by rpki-client