$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: C70B5Hk1M7DD8kWkzxWbsxx/hHqV8dvKuSdwaI+vFxI= Subject key identifier: D9:4E:5D:A3:91:82:EC:D1:FA:22:B9:F9:C1:F3:BA:65:A9:68:37:6F Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0496 Signing time: Mon 03 Nov 2025 00:00:50 +0000 Manifest this update: Mon 03 Nov 2025 00:00:49 +0000 Manifest next update: Mon 10 Nov 2025 00:00:49 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: MxB7mUGLywvQbsEkzJgvaneNgJZFthdgDTQ/qBZ0n30=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Nov 3 00:00:49 2025 GMT Not After : Nov 10 00:00:49 2025 GMT Subject: CN=6907f0b1-763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:1e:5d:a4:e4:e2:04:45:8a:75:ea:42:a9: ac:9b:ad:b7:5a:07:29:b1:65:b7:d4:16:84:b9:91: b3:8f:6c:9c:52:b6:d0:24:25:b1:c4:26:be:10:bf: 2c:b1:24:ad:99:37:0b:70:af:d0:8f:8f:a1:c3:c5: 2e:62:22:1f:ba:08:36:73:30:15:fb:29:52:f5:45: b2:3a:ca:c7:21:75:12:82:b3:92:88:e6:55:a3:71: 3f:36:a8:7e:8b:3c:00:8c:28:b6:9f:ad:af:e3:28: 4f:d1:6f:10:81:f3:d0:da:0b:e7:45:4a:a5:bc:54: 53:b7:83:94:9e:86:91:b7:4c:98:a0:f6:ff:e6:87: 42:79:22:b2:25:52:5b:c6:84:2b:d7:f3:9f:73:e6: a4:16:97:ec:be:a7:4f:5a:32:48:c4:c3:b5:e2:93: fc:aa:66:47:0e:71:2b:9e:ce:e8:30:be:a7:59:9e: 81:3c:1c:b2:18:aa:20:84:b6:d7:d6:6b:2e:09:f6: 44:eb:25:f3:16:cb:a2:a9:1c:90:f5:39:29:87:ad: b2:50:2c:86:5a:93:38:3e:eb:74:58:53:37:ae:1c: c1:0a:4a:d8:fc:78:b1:c5:cc:f4:af:67:b6:3e:11: ce:48:70:57:8a:57:f6:b2:93:a8:4f:22:f4:85:9e: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4E:5D:A3:91:82:EC:D1:FA:22:B9:F9:C1:F3:BA:65:A9:68:37:6F X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:93:9a:6f:98:7f:3f:57:aa:cb:d7:16:e7:c7:6c:16:a3:6b: 50:03:d9:6a:da:7c:2e:78:84:18:48:9d:17:10:4b:1e:8c:af: 80:eb:bf:d5:a0:d4:5d:d9:a9:03:36:32:ee:ac:ef:5c:dd:30: a9:da:32:49:ff:b6:da:a6:56:6e:1a:37:66:e3:4a:b2:99:10: 7f:a4:a6:17:76:e4:d2:75:9e:f9:7f:f3:61:1a:9e:5b:45:07: ee:26:c1:83:f8:54:dd:4b:00:1a:23:09:bf:42:32:94:8d:b1: 3d:3c:30:74:3a:e6:e8:83:8e:72:fe:31:f3:ac:76:52:61:5d: d1:3a:4d:9a:d1:4e:71:cf:d8:a5:81:5e:ae:e9:78:d3:7d:56: 13:8d:96:1c:d6:d5:39:1a:5e:96:8d:15:a5:21:0a:ef:e1:03: 33:c4:28:a4:64:7e:e8:db:3d:12:df:05:42:c9:32:04:68:72: ff:cb:8f:58:3b:90:12:e1:23:98:45:24:c6:96:f4:0b:90:12: 79:38:99:82:fb:da:6c:68:d5:31:b1:28:fe:5b:1d:be:22:39: a6:30:01:7a:14:66:18:cd:20:d8:16:e8:92:05:23:65:9a:cf: e6:b2:aa:78:eb:d3:1e:1e:58:d4:7e:e9:f2:25:66:0d:9a:40: 02:56:3b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUxMTAzMDAwMDQ5WhcNMjUxMTEwMDAwMDQ5WjAYMRYwFAYD VQQDEw02OTA3ZjBiMS03NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN8eXaTk4gRFinXqQqmsm623WgcpsWW31BaEuZGzj2ycUrbQJCWxxCa+EL8s sSStmTcLcK/Qj4+hw8UuYiIfugg2czAV+ylS9UWyOsrHIXUSgrOSiOZVo3E/Nqh+ izwAjCi2n62v4yhP0W8QgfPQ2gvnRUqlvFRTt4OUnoaRt0yYoPb/5odCeSKyJVJb xoQr1/Ofc+akFpfsvqdPWjJIxMO14pP8qmZHDnErns7oML6nWZ6BPByyGKoghLbX 1msuCfZE6yXzFsuiqRyQ9Tkph62yUCyGWpM4Put0WFM3rhzBCkrY/Hixxcz0r2e2 PhHOSHBXilf2spOoTyL0hZ411QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlOXaOR guzR+iK5+cHzumWpaDdvMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBck5pvmH8/V6rL1xbnx2wWo2tQA9lq2nwueIQYSJ0XEEsejK+A67/V oNRd2akDNjLurO9c3TCp2jJJ/7baplZuGjdm40qymRB/pKYXduTSdZ75f/NhGp5b RQfuJsGD+FTdSwAaIwm/QjKUjbE9PDB0Oubog45y/jHzrHZSYV3ROk2a0U5xz9il gV6u6XjTfVYTjZYc1tU5Gl6WjRWlIQrv4QMzxCikZH7o2z0S3wVCyTIEaHL/y49Y O5AS4SOYRSTGlvQLkBJ5OJmC+9psaNUxsSj+Wx2+IjmmMAF6FGYYzSDYFuiSBSNl ms/msqp469MeHljUfunyJWYNmkACVjvs -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:57 2025 by rpki-client