$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: Ha1vzygkzFUaa2dIyDHVXvwsOlmVDFtyr3Zg3cxPFpE= Subject key identifier: 96:AA:CD:81:EC:09:BF:7B:73:83:B2:5C:2F:AD:E0:D3:9C:B8:14:F7 Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: A5 Signing time: Wed 05 Nov 2025 06:37:04 +0000 Manifest this update: Wed 05 Nov 2025 06:37:04 +0000 Manifest next update: Wed 12 Nov 2025 06:37:04 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: dVw+i/U05dVYgrlIEFuF1zido0CuyZRkS9/fCJO2SGY=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: G7Rh/kD9ovidahZtN/DccolLPZ5w6zif+prC8czAfkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Nov 5 06:37:04 2025 GMT Not After : Nov 12 06:37:04 2025 GMT Subject: CN=690af090-d736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:19:f2:bc:2a:56:69:b5:27:1a:65:51:44:74: 67:8f:bd:b1:38:dc:b7:eb:66:ad:b2:f1:20:ca:c4: d3:75:46:71:0b:e0:97:96:64:15:f9:d9:00:1b:9a: 20:d6:f8:b1:8a:9a:0e:0a:00:a8:42:37:04:be:f2: 77:8f:ba:bc:64:fc:1f:c1:55:cf:39:0f:c9:67:ca: 34:f0:20:1b:2a:06:37:97:86:58:d1:93:da:e6:b4: 0a:b3:1a:67:e8:1b:01:9b:bb:b0:9d:28:af:7a:61: 72:12:e5:f3:c4:86:9b:0e:3a:b6:b2:cc:8e:2b:6b: 24:24:39:b4:04:0a:92:bd:fe:ed:23:96:3b:4e:4c: 85:8c:fc:8e:fa:12:31:d9:7b:7d:fd:1c:7d:52:c8: 0d:98:3e:3a:01:3c:e9:52:0d:ad:79:26:46:4b:2b: 50:66:82:fe:4e:00:6c:18:f2:b4:ac:4c:80:8a:2e: 41:ce:89:57:f4:72:7f:73:25:14:9e:7f:f2:7f:98: 2b:dd:ea:e5:87:10:d9:16:3c:ee:35:9c:05:2b:f7: 11:6d:6d:a4:b7:82:66:a7:f2:27:6e:20:57:99:da: 65:56:6b:88:39:61:7e:59:d8:58:61:a3:b1:dd:3b: ce:5c:6f:1a:93:25:68:8d:3d:f3:88:21:62:b4:72: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AA:CD:81:EC:09:BF:7B:73:83:B2:5C:2F:AD:E0:D3:9C:B8:14:F7 X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3b:9c:f7:45:42:49:ec:10:ef:9b:d9:87:be:5f:cf:bc:27: cb:1e:bb:2d:dc:9e:d6:97:7f:2d:09:15:25:74:d6:99:ed:df: fa:28:bc:12:4f:73:97:37:38:ac:1b:e1:e6:6a:ff:f4:38:5a: be:e2:d3:46:87:ad:e9:6d:00:0b:09:ab:c0:a3:38:6e:37:5e: 5b:81:27:62:c2:ea:77:1e:ea:26:cd:4a:17:10:fb:11:a6:ac: 78:42:05:04:50:ed:5c:47:b3:e1:07:e9:77:04:85:92:c9:46: 64:b5:70:a3:cb:ad:95:5a:b9:e5:1f:68:e1:40:17:c2:03:f4: 22:be:98:a5:4e:a2:c9:55:f3:e6:a2:01:eb:78:23:d6:b6:96: 60:4f:db:b4:30:8d:23:8f:92:c6:08:d6:86:18:c6:6d:37:4c: 94:6a:a7:c8:1e:f0:19:e4:60:15:30:22:a8:4d:da:89:e4:8b: cf:23:6a:8a:56:e4:5b:e6:35:94:4e:c9:c4:a6:bd:a2:21:94: 61:f2:02:41:10:5a:1b:47:2c:bf:6f:a3:7d:d3:22:4f:68:d0: 3e:2a:df:57:ef:d8:a6:21:5d:eb:1a:c3:7b:d3:3a:1a:c3:f1: 93:25:3b:a3:aa:e4:8c:a1:8d:79:31:c1:f5:df:3b:f9:23:e1: 1a:59:a4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw QkVFQTQ4RDAwHhcNMjUxMTA1MDYzNzA0WhcNMjUxMTEyMDYzNzA0WjAYMRYwFAYD VQQDEw02OTBhZjA5MC1kNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+BnyvCpWabUnGmVRRHRnj72xONy362atsvEgysTTdUZxC+CXlmQV+dkAG5og 1vixipoOCgCoQjcEvvJ3j7q8ZPwfwVXPOQ/JZ8o08CAbKgY3l4ZY0ZPa5rQKsxpn 6BsBm7uwnSivemFyEuXzxIabDjq2ssyOK2skJDm0BAqSvf7tI5Y7TkyFjPyO+hIx 2Xt9/Rx9UsgNmD46ATzpUg2teSZGSytQZoL+TgBsGPK0rEyAii5BzolX9HJ/cyUU nn/yf5gr3erlhxDZFjzuNZwFK/cRbW2kt4Jmp/InbiBXmdplVmuIOWF+WdhYYaOx 3TvOXG8akyVojT3ziCFitHIAtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaqzYHs Cb97c4OyXC+t4NOcuBT3MB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2 c05zTjVsWmZBc2tMN3FTTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsO5z3RUJJ7BDvm9mHvl/PvCfLHrst3J7Wl38tCRUldNaZ7d/6KLwS T3OXNzisG+Hmav/0OFq+4tNGh63pbQALCavAozhuN15bgSdiwup3HuomzUoXEPsR pqx4QgUEUO1cR7PhB+l3BIWSyUZktXCjy62VWrnlH2jhQBfCA/QivpilTqLJVfPm ogHreCPWtpZgT9u0MI0jj5LGCNaGGMZtN0yUaqfIHvAZ5GAVMCKoTdqJ5IvPI2qK VuRb5jWUTsnEpr2iIZRh8gJBEFobRyy/b6N90yJPaNA+Kt9X79imIV3rGsN70zoa w/GTJTujquSMoY15McH13zv5I+EaWaTj -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:26 2025 by rpki-client