$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: 3Caidjd6OM2b8s4bpvWSVGmcO/9UqAwgxfodYsXpI34= Subject key identifier: 81:3D:36:4D:39:24:2F:5A:22:E5:64:24:D9:B6:1F:A6:7C:33:7A:04 Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: C9 Signing time: Mon 03 Nov 2025 05:46:47 +0000 Manifest this update: Mon 03 Nov 2025 05:46:46 +0000 Manifest next update: Mon 10 Nov 2025 05:46:46 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: hzmA9Xvn8F7m/o7db00mIo2LeFbsSQJ4Q5DxuTqDcRI=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: uCHzaAIAycwpBc70iXWJQqRjsJQk8uvEaTZJzV9udnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Nov 3 05:46:46 2025 GMT Not After : Nov 10 05:46:46 2025 GMT Subject: CN=690841c7-fd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e1:54:e5:e3:1b:b7:d4:6a:bb:10:1e:cb:1e: c7:f9:dd:8c:95:8d:08:cc:e3:a1:0a:69:e9:e8:f7: f4:99:cb:18:12:50:e8:ac:d2:9e:6b:f5:48:e4:2f: 9f:60:bb:13:eb:f7:d0:37:a1:1f:f6:f9:89:0e:fb: 2d:70:fa:80:e1:c4:72:ad:31:c6:c1:34:4e:28:3f: 6f:be:d3:6e:fd:ef:7b:00:ba:7c:90:59:40:e1:83: f9:48:50:7f:b9:75:49:bd:34:69:ee:df:61:c2:bc: fa:a1:cd:9c:7e:ab:14:85:07:c8:f6:0a:49:00:a0: 14:cb:31:85:1a:37:c4:97:02:b3:f4:7a:94:8d:67: 29:ba:68:a9:1b:43:16:84:b5:57:13:c4:73:5a:d7: 39:54:cd:69:91:fd:ba:31:b5:9e:39:40:7f:68:8c: 3c:78:d0:11:dd:71:ec:cc:96:39:f2:9c:48:e0:e8: cb:8f:8f:bb:be:9f:37:53:26:d0:e8:85:bb:f5:e1: 9e:7b:23:98:93:83:ec:47:cc:b8:a4:33:f3:7f:66: 4a:06:d0:3f:f7:3f:d8:33:c8:c1:ef:fc:0f:8f:74: e1:bb:89:de:58:e8:b3:78:ab:e4:c6:d3:29:7f:b0: ae:ef:7e:18:e2:8d:9a:0d:0d:37:06:a6:7d:0f:e4: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:36:4D:39:24:2F:5A:22:E5:64:24:D9:B6:1F:A6:7C:33:7A:04 X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:92:fc:28:e7:c8:dd:5c:26:d1:9f:98:61:f1:41:2a:63:7a: 22:25:7a:db:a3:bb:91:6c:40:3d:a2:c7:7a:6c:c9:74:4d:8b: 8d:b0:d7:80:f6:56:74:2e:d5:54:fc:05:d2:a5:da:e7:ba:d4: ad:f1:93:18:da:45:9a:d0:cc:66:a9:65:12:aa:fb:0b:e6:6e: 03:dc:b6:f7:e2:f6:be:b6:e3:c1:15:5a:ea:20:d7:02:6a:87: da:dc:f0:ba:89:e6:03:62:84:62:84:b2:4a:af:b1:52:24:c3: 9e:4d:6f:ed:ff:b3:be:0e:54:40:0c:29:fd:c7:06:48:48:0a: 88:83:51:a6:ba:f5:97:0d:77:97:60:26:15:54:c3:bc:d4:cd: 75:dc:b9:4f:00:2a:41:36:58:f2:20:ab:c2:ac:7b:05:cf:03: 4a:ab:48:5a:13:a7:45:19:ed:06:eb:a3:c3:ea:f4:65:6b:d8: 5b:c3:b3:3a:ea:b9:07:34:4e:b7:c6:db:2d:55:db:b7:69:8e: 0e:64:34:8a:81:b7:53:bd:2c:b6:3b:1a:6f:10:e9:ba:b3:2b: d8:19:a4:2e:0e:7f:1f:90:29:d4:d6:2a:96:48:9b:de:3a:e5: b5:59:39:24:a0:ca:5c:3b:87:4f:91:5c:b1:4b:c9:94:81:35: b2:9c:a4:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx OUQwQ0VBQTMwHhcNMjUxMTAzMDU0NjQ2WhcNMjUxMTEwMDU0NjQ2WjAYMRYwFAYD VQQDEw02OTA4NDFjNy1mZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+uFU5eMbt9RquxAeyx7H+d2MlY0IzOOhCmnp6Pf0mcsYElDorNKea/VI5C+f YLsT6/fQN6Ef9vmJDvstcPqA4cRyrTHGwTROKD9vvtNu/e97ALp8kFlA4YP5SFB/ uXVJvTRp7t9hwrz6oc2cfqsUhQfI9gpJAKAUyzGFGjfElwKz9HqUjWcpumipG0MW hLVXE8RzWtc5VM1pkf26MbWeOUB/aIw8eNAR3XHszJY58pxI4OjLj4+7vp83UybQ 6IW79eGeeyOYk4PsR8y4pDPzf2ZKBtA/9z/YM8jB7/wPj3Thu4neWOizeKvkxtMp f7Cu734Y4o2aDQ03BqZ9D+Tr+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE9Nk05 JC9aIuVkJNm2H6Z8M3oEMB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1 aDZHblczU1Q4THdaME02cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWkvwo58jdXCbRn5hh8UEqY3oiJXrbo7uRbEA9osd6bMl0TYuNsNeA 9lZ0LtVU/AXSpdrnutSt8ZMY2kWa0MxmqWUSqvsL5m4D3Lb34va+tuPBFVrqINcC aofa3PC6ieYDYoRihLJKr7FSJMOeTW/t/7O+DlRADCn9xwZISAqIg1GmuvWXDXeX YCYVVMO81M113LlPACpBNljyIKvCrHsFzwNKq0haE6dFGe0G66PD6vRla9hbw7M6 6rkHNE63xtstVdu3aY4OZDSKgbdTvSy2OxpvEOm6syvYGaQuDn8fkCnU1iqWSJve OuW1WTkkoMpcO4dPkVyxS8mUgTWynKQf -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:05 2025 by rpki-client