$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: 9JMVS0W0uke4RTnvv78XQfzZk3UNCliZtLzmTS2x8iE= Subject key identifier: 61:1A:35:E5:93:6C:8D:B3:A7:1A:83:D2:BE:2D:19:82:77:BA:9A:B1 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0CED Signing time: Tue 04 Nov 2025 18:13:59 +0000 Manifest this update: Tue 04 Nov 2025 18:13:59 +0000 Manifest next update: Tue 11 Nov 2025 18:13:59 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: mEAgr5Y/1e9Uq4NRCVImSkVG23pPOFoQch/zQFO0bIM=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Nov 4 18:13:59 2025 GMT Not After : Nov 11 18:13:59 2025 GMT Subject: CN=690a4267-cbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:8e:35:ab:a9:d6:04:db:5b:b9:17:db:b3: 9e:59:b0:a8:6c:80:a2:f3:c2:20:a7:18:1e:fa:b1: e5:b6:48:02:13:f1:ed:55:09:bb:9f:79:df:c1:85: e7:16:ca:f8:19:17:09:ce:b2:06:cf:c4:a4:9a:44: ee:2f:55:49:ea:89:03:5e:0f:16:40:bc:89:e4:bd: 6e:24:82:0e:32:69:78:44:93:cb:5d:21:ba:d7:0f: 80:4a:a7:6f:1a:fb:0e:7b:c4:7c:5b:92:57:e2:2a: 1d:29:c3:ae:74:f4:e8:29:a7:67:79:26:ff:8b:b4: e9:f9:e4:8f:11:52:f7:e4:87:21:49:e5:ad:0f:30: 08:cd:02:8b:47:f6:29:da:60:5a:e2:66:78:df:0a: 22:ba:c9:c7:25:f2:b4:54:2f:0b:61:ee:82:1f:c9: 61:19:3c:a0:27:2c:8a:51:59:ad:3d:44:88:2e:ad: ff:53:52:7c:f4:bb:80:4f:d5:2e:9f:29:52:c6:85: 92:77:3d:59:b6:c5:80:fd:1a:74:ff:8f:7f:8f:0c: ac:ef:ca:bb:31:5a:a0:56:7d:8c:d7:0e:68:c9:47: 10:9a:2c:31:7b:0f:cd:e4:a7:42:ab:e3:ae:5c:25: 87:fb:e5:61:bb:a3:f4:39:13:8e:7b:86:b5:55:c2: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1A:35:E5:93:6C:8D:B3:A7:1A:83:D2:BE:2D:19:82:77:BA:9A:B1 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:03:47:e8:50:77:4f:9f:ab:99:88:4f:c1:9d:36:e3:84:b4: 1f:28:4e:7f:af:5b:61:40:97:6b:d8:6f:d0:ac:a8:1b:4c:e6: 68:10:5c:37:9b:2f:c1:ed:59:1a:31:fd:0b:3a:63:9a:91:fc: ac:ce:17:5e:be:a0:c2:56:11:87:61:d2:18:e3:61:7c:68:5f: fc:bd:d1:58:24:9c:84:95:d6:81:2d:b1:9e:ad:a9:9b:7e:88: 9c:d0:68:ef:5c:b6:79:6a:e6:48:d3:39:0b:9f:38:db:a4:dd: 5e:78:40:41:81:87:0b:99:3b:fd:d1:9e:35:48:83:2d:7f:21: 17:34:a3:ea:5e:62:f8:9b:8f:a8:3c:78:78:f5:2f:e0:c0:a8: 3d:cb:57:a5:e2:f7:6d:83:6d:1f:f2:1e:2b:2d:ef:2c:b6:1e: 7c:7b:b4:eb:f6:29:4a:af:11:25:68:05:4d:4a:eb:02:3a:0c: 08:29:85:ba:ac:24:07:ec:1d:17:fd:6a:fa:d4:41:e5:b7:6a: 87:72:c7:60:e6:b1:22:39:5f:c3:28:b9:0d:a0:1c:75:ea:3e: 55:2c:76:2a:6b:6b:1e:39:bf:06:86:94:72:21:55:c6:04:ad: 1d:bd:17:a8:d2:f8:c8:67:36:5e:bb:79:1e:0e:38:79:88:8c: 35:fa:98:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUxMTA0MTgxMzU5WhcNMjUxMTExMTgxMzU5WjAYMRYwFAYD VQQDEw02OTBhNDI2Ny1jYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPuONaup1gTbW7kX27OeWbCobICi88Igpxge+rHltkgCE/HtVQm7n3nfwYXn Fsr4GRcJzrIGz8SkmkTuL1VJ6okDXg8WQLyJ5L1uJIIOMml4RJPLXSG61w+ASqdv GvsOe8R8W5JX4iodKcOudPToKadneSb/i7Tp+eSPEVL35IchSeWtDzAIzQKLR/Yp 2mBa4mZ43woiusnHJfK0VC8LYe6CH8lhGTygJyyKUVmtPUSILq3/U1J89LuAT9Uu nylSxoWSdz1ZtsWA/Rp0/49/jwys78q7MVqgVn2M1w5oyUcQmiwxew/N5KdCq+Ou XCWH++Vhu6P0OROOe4a1VcLfNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEaNeWT bI2zpxqD0r4tGYJ3upqxMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDoA0foUHdPn6uZiE/BnTbjhLQfKE5/r1thQJdr2G/QrKgbTOZoEFw3 my/B7VkaMf0LOmOakfyszhdevqDCVhGHYdIY42F8aF/8vdFYJJyEldaBLbGeramb foic0GjvXLZ5auZI0zkLnzjbpN1eeEBBgYcLmTv90Z41SIMtfyEXNKPqXmL4m4+o PHh49S/gwKg9y1el4vdtg20f8h4rLe8sth58e7Tr9ilKrxElaAVNSusCOgwIKYW6 rCQH7B0X/Wr61EHlt2qHcsdg5rEiOV/DKLkNoBx16j5VLHYqa2seOb8GhpRyIVXG BK0dvReo0vjIZzZeu3keDjh5iIw1+pir -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:39 2025 by rpki-client