$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json) Hash identifier: F2MXUgBZSqja73GlsbH1nPlJH7D5pyeEKib9cRzkVSk= Subject key identifier: D3:86:57:E1:19:26:7C:12:56:15:FB:E3:80:01:D8:BA:4E:1D:C4:41 Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Certificate serial: 0DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft Manifest number: 0DC9 Signing time: Tue 04 Nov 2025 17:58:03 +0000 Manifest this update: Tue 04 Nov 2025 17:58:03 +0000 Manifest next update: Tue 11 Nov 2025 17:58:03 +0000 Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: uVkfBiJcVqcZ+m8BdtJDfSplCdZB69YG/1Zc0QtL7jA=) 2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=) 3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=) 4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=) 5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Validity Not Before: Nov 4 17:58:03 2025 GMT Not After : Nov 11 17:58:03 2025 GMT Subject: CN=690a3eab-7b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:59:0b:1d:84:77:d0:67:ea:f3:af:59:1e: 62:ea:d1:3b:64:37:1b:aa:aa:19:dc:5b:27:44:a2: 17:22:64:fb:1c:33:6d:10:12:0d:c8:fa:c7:ed:b7: 86:e4:1a:69:10:42:b3:6d:70:80:9c:f2:d5:56:6b: dd:79:89:a6:78:0f:22:8f:e8:93:31:6c:51:97:98: 04:bf:c7:1d:7a:35:58:95:71:7d:d9:a5:1b:c2:6f: ca:94:00:d0:3b:ea:fa:48:03:7e:e7:65:cc:cd:b5: 96:3b:3c:b2:c3:bf:b5:75:75:06:75:81:88:85:87: 42:12:a7:51:5c:bd:5a:53:a5:21:76:96:6b:bc:25: 11:17:9b:40:30:91:a4:d9:fb:37:d4:7e:72:9c:de: ce:17:00:26:44:ae:47:63:f8:28:ed:fc:e1:ce:d8: 3c:1d:cc:b3:17:b3:2c:7d:3f:42:86:8b:8e:4c:2f: 97:6f:e0:72:de:8d:9a:e2:c3:03:34:74:73:39:69: 3c:34:c1:38:7c:4f:24:c7:ff:69:3f:e9:a1:18:87: b1:c0:a3:44:0c:ff:a0:42:f0:01:50:a7:66:45:b8: bc:53:1b:f1:82:aa:6f:10:b7:86:c9:f0:36:59:fc: 9f:3e:a2:af:fd:19:e6:fb:33:df:61:4a:f9:99:8e: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:57:E1:19:26:7C:12:56:15:FB:E3:80:01:D8:BA:4E:1D:C4:41 X509v3 Authority Key Identifier: keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9f:33:e6:82:59:65:85:1e:4a:b1:f5:b0:e6:a3:96:ef:33: 57:83:b6:7a:ed:b3:fc:60:5b:a6:8f:bc:b9:c4:dd:cf:e6:9a: 07:75:4b:54:a0:bc:d0:42:ff:1e:4c:78:47:46:fb:e4:c0:ec: 49:e2:c4:05:55:f2:6a:b6:bc:8a:21:72:25:0b:c3:ee:b6:75: bb:95:76:38:0c:ee:b4:a5:c6:2e:72:80:93:4e:b4:cb:fc:8d: e7:0a:f1:e2:e2:71:cd:5d:cb:b0:fa:8a:06:64:f6:1e:e8:ca: 6f:6f:eb:01:42:37:ed:f7:7d:b3:34:4f:92:0f:bd:6d:22:e1: 3a:b7:66:db:46:a4:6c:37:4f:99:91:30:47:1b:1d:68:a8:cb: 19:c5:b9:9d:36:20:00:fe:84:df:81:d2:9c:79:08:27:b5:93: 90:9a:89:6a:c4:76:19:a6:14:05:26:95:d6:0b:5e:d8:e1:65: 30:62:3a:9f:ef:f9:94:1d:97:a8:07:00:12:e2:c8:04:19:8e: 42:52:2d:4c:72:ff:dc:48:e7:9b:b4:0a:f2:e1:81:bd:b2:82: c6:b9:0d:b2:94:72:0b:f2:5c:93:88:6d:a5:f4:87:c5:e8:2e: 83:0e:5f:fa:33:3f:29:db:5a:53:0b:9e:36:08:f4:8c:ce:1b: e2:79:8e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4 OTFFNEY0NEUwHhcNMjUxMTA0MTc1ODAzWhcNMjUxMTExMTc1ODAzWjAYMRYwFAYD VQQDEw02OTBhM2VhYi03Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRZZCx2Ed9Bn6vOvWR5i6tE7ZDcbqqoZ3FsnRKIXImT7HDNtEBINyPrH7beG 5BppEEKzbXCAnPLVVmvdeYmmeA8ij+iTMWxRl5gEv8cdejVYlXF92aUbwm/KlADQ O+r6SAN+52XMzbWWOzyyw7+1dXUGdYGIhYdCEqdRXL1aU6UhdpZrvCURF5tAMJGk 2fs31H5ynN7OFwAmRK5HY/go7fzhztg8HcyzF7MsfT9ChouOTC+Xb+By3o2a4sMD NHRzOWk8NME4fE8kx/9pP+mhGIexwKNEDP+gQvABUKdmRbi8UxvxgqpvELeGyfA2 WfyfPqKv/Rnm+zPfYUr5mY7cbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOGV+EZ JnwSVhX744AB2LpOHcRBMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAnzPmglllhR5KsfWw5qOW7zNXg7Z67bP8YFumj7y5xN3P5poHdUtU oLzQQv8eTHhHRvvkwOxJ4sQFVfJqtryKIXIlC8PutnW7lXY4DO60pcYucoCTTrTL /I3nCvHi4nHNXcuw+ooGZPYe6Mpvb+sBQjft932zNE+SD71tIuE6t2bbRqRsN0+Z kTBHGx1oqMsZxbmdNiAA/oTfgdKceQgntZOQmolqxHYZphQFJpXWC17Y4WUwYjqf 7/mUHZeoBwAS4sgEGY5CUi1Mcv/cSOebtAry4YG9soLGuQ2ylHIL8lyTiG2l9IfF 6C6DDl/6Mz8p21pTC542CPSMzhvieY7Q -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:46 2025 by rpki-client