$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json) Hash identifier: iZ8EWNlpw+m8/b7SknbghtYwxp+0AzO7fNgSIbNQuWc= Subject key identifier: 03:1D:58:92:53:71:A5:E8:7A:14:AF:7D:1F:D9:7C:45:E0:73:D1:77 Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft Manifest number: E2 Signing time: Mon 03 Nov 2025 05:28:51 +0000 Manifest this update: Mon 03 Nov 2025 05:28:51 +0000 Manifest next update: Mon 10 Nov 2025 05:28:51 +0000 Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: TcSXF+/d5pL9uweUBN/vZBKzisVEaskDFm/1iwy98b8=) 2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: IdTeZSdJYpvrv4PlLAcbyZ45qrh+mkn1A6fS8tzZ0GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Validity Not Before: Nov 3 05:28:51 2025 GMT Not After : Nov 10 05:28:51 2025 GMT Subject: CN=69083d93-ac74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:b0:65:b6:7d:0d:cd:ff:8c:90:b6:80:2a: af:0f:e7:e1:95:1f:46:c9:dd:a1:69:89:75:18:51: 7a:e4:4c:b2:80:72:25:84:4b:13:79:3d:25:41:2e: 35:e1:ff:0e:8b:24:04:d8:12:9a:81:3f:98:41:44: 27:0c:e4:2c:45:c7:a2:ab:a5:6a:be:f6:d9:99:b4: d1:71:e1:da:33:6b:89:5d:3c:a8:fd:f0:2f:6f:fd: 73:4f:9e:83:f6:4a:e1:e6:ef:44:af:42:d5:2b:a0: 0a:83:d5:1c:d6:00:51:82:c1:e8:b8:e1:9f:91:a2: 38:13:78:3f:55:91:54:05:09:b8:28:24:a1:39:4d: 46:7d:75:66:a3:ae:1b:43:8c:66:59:f2:64:08:67: 5b:a4:86:f7:92:39:41:10:88:be:36:9a:6b:31:1e: 20:11:e2:0a:51:bd:4a:e6:4a:50:8b:b1:d7:4d:8c: 14:5a:ba:35:e8:5f:0c:ed:c7:bd:1c:78:a5:34:ca: 50:bc:9b:90:b4:48:55:cf:40:a3:80:ea:22:f4:5e: 3e:c7:62:d3:a2:bc:8e:31:91:d2:7d:ab:31:64:a6: 75:ff:94:c8:ba:13:ad:c3:c9:7e:d3:65:1b:62:df: d5:ae:5e:f2:24:f3:b0:a6:68:ec:95:4c:8d:fb:e4: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1D:58:92:53:71:A5:E8:7A:14:AF:7D:1F:D9:7C:45:E0:73:D1:77 X509v3 Authority Key Identifier: keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ce:8d:93:22:c3:ad:2c:67:55:79:60:dc:74:02:94:2e:4a: 80:46:45:b8:c7:d2:ed:5d:89:04:63:31:f2:ef:dd:9e:fd:66: 29:24:58:d5:0a:c4:31:5a:68:9d:88:6e:b6:31:bc:0e:9f:a1: b4:b1:3a:b3:1a:33:3b:90:a5:ea:9a:72:83:ea:d4:cc:47:c3: 85:7e:c8:00:d2:3f:34:65:8f:1d:9c:f0:e0:f9:32:b6:70:c5: 9d:a8:73:41:5e:a7:a1:ad:85:e6:ed:b0:54:54:ff:4e:26:05: ba:d1:91:0c:55:1f:90:32:0f:bc:1d:40:68:41:4c:e8:3c:ed: 14:c6:e6:70:7f:3c:28:40:0c:0a:c4:43:74:ad:52:12:28:da: d8:c7:e1:6b:a0:0d:cf:90:2d:a8:f2:e9:60:4a:d1:aa:be:3c: d8:1e:ea:a0:53:2c:87:1e:b8:2a:fd:01:a1:57:3e:00:16:8d: 6b:be:f4:95:ac:d3:29:c8:08:6c:9a:ab:e2:fa:2a:29:36:68: 67:b4:a9:8e:a1:ee:5e:76:f4:6d:db:12:a6:8c:47:af:59:d1: 33:7e:d2:0f:b4:93:06:25:ab:18:fb:e4:26:39:45:be:07:cb: 0a:a4:d8:eb:84:62:d1:13:73:bb:b0:bc:34:ed:e9:fc:dd:33: a2:80:e9:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKEE2RTlDQkE1MjlDMDVBOTYyNENBNjAzNTQ4QTNFMzE0 OTE3NThGMkIwHhcNMjUxMTAzMDUyODUxWhcNMjUxMTEwMDUyODUxWjAYMRYwFAYD VQQDEw02OTA4M2Q5My1hYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+qwZbZ9Dc3/jJC2gCqvD+fhlR9Gyd2haYl1GFF65EyygHIlhEsTeT0lQS41 4f8OiyQE2BKagT+YQUQnDOQsRceiq6VqvvbZmbTRceHaM2uJXTyo/fAvb/1zT56D 9krh5u9Er0LVK6AKg9Uc1gBRgsHouOGfkaI4E3g/VZFUBQm4KCShOU1GfXVmo64b Q4xmWfJkCGdbpIb3kjlBEIi+NpprMR4gEeIKUb1K5kpQi7HXTYwUWro16F8M7ce9 HHilNMpQvJuQtEhVz0CjgOoi9F4+x2LToryOMZHSfasxZKZ1/5TIuhOtw8l+02Ub Yt/Vrl7yJPOwpmjslUyN++SOYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMdWJJT caXoehSvfR/ZfEXgc9F3MB8GA1UdIwQYMBaAFKbpy6UpwFqWJMpgNUij4xSRdY8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS82OUI3Njk4RTYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdwWWt5bUExU0tQakZKRjFq eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3B1bkxwU25BV3BZa3ltQTFTS1BqRkpGMWp5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS82OUI3Njk4RTYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdw WWt5bUExU0tQakZKRjFqeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8zo2TIsOtLGdVeWDcdAKULkqARkW4x9LtXYkEYzHy792e/WYpJFjV CsQxWmidiG62MbwOn6G0sTqzGjM7kKXqmnKD6tTMR8OFfsgA0j80ZY8dnPDg+TK2 cMWdqHNBXqehrYXm7bBUVP9OJgW60ZEMVR+QMg+8HUBoQUzoPO0UxuZwfzwoQAwK xEN0rVISKNrYx+FroA3PkC2o8ulgStGqvjzYHuqgUyyHHrgq/QGhVz4AFo1rvvSV rNMpyAhsmqvi+iopNmhntKmOoe5edvRt2xKmjEevWdEzftIPtJMGJasY++QmOUW+ B8sKpNjrhGLRE3O7sLw07en83TOigOl7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:51 2025 by rpki-client