$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: DyYXlXRvtWJ2C1rzGkFqllcPqC2YEFksuV+JG1sIQF4= Subject key identifier: 12:1C:9B:F2:BD:BC:32:02:B1:96:B7:1F:69:5C:D4:4A:C5:04:00:41 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0E1D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0E09 Signing time: Tue 04 Nov 2025 14:45:15 +0000 Manifest this update: Tue 04 Nov 2025 14:45:14 +0000 Manifest next update: Tue 11 Nov 2025 14:45:14 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: rVqyv3yqGvuZeceDEYEC5mXxTidI3LM3hixwXWeHQB4=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3613 (0xe1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Nov 4 14:45:14 2025 GMT Not After : Nov 11 14:45:14 2025 GMT Subject: CN=690a117b-c82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:d1:20:1f:09:d9:ba:f0:4f:7f:b7:dd:dc: ce:a8:ee:7f:f5:c2:67:ee:88:38:d4:82:f7:9a:f9: 73:3b:36:f7:5a:a9:b3:8c:ba:66:a6:e4:1c:c9:dd: b4:38:50:75:18:c8:c6:fc:c2:35:67:3f:f4:0a:28: e7:99:a3:25:87:46:db:1c:61:7c:87:65:fe:ac:ec: b0:cd:df:c2:09:6d:19:d9:0e:80:ce:c7:a8:10:26: 42:83:47:f2:d9:ef:20:15:26:fe:06:5c:ea:f0:5a: b6:cb:4c:10:83:17:0b:f6:19:de:f9:d0:46:4a:4b: 2f:c1:66:55:48:9c:03:25:e3:35:90:cb:00:bf:33: 8e:ff:7c:b9:e9:8d:0d:84:e3:42:6f:e6:8f:00:4b: 10:1a:5f:15:9e:0a:3c:ea:80:7f:76:a1:75:2b:eb: 96:5f:e8:b7:ad:e4:e3:4e:ff:7e:d5:e0:12:bf:6d: 40:67:df:cd:49:bd:1c:ad:2a:3d:a5:a4:03:26:13: a1:5a:82:3d:73:a0:68:ff:af:54:4b:df:cb:d5:7c: 26:13:27:1f:0a:aa:83:0a:2b:59:35:9d:dc:41:64: a0:ef:2d:7d:43:b3:6f:17:06:e3:03:c9:40:8f:f0: 47:0a:0a:3d:70:96:f3:50:00:c8:e4:18:9a:68:ca: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1C:9B:F2:BD:BC:32:02:B1:96:B7:1F:69:5C:D4:4A:C5:04:00:41 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f3:7a:db:6f:56:14:85:0b:2e:b8:01:f9:67:c2:9b:1d:92: df:42:a9:b7:68:39:fd:01:a2:49:8c:7e:24:75:0a:9a:11:dc: 50:f0:4c:9d:1d:9d:af:f7:d0:22:f4:26:45:16:79:93:33:a2: 58:b4:ef:53:52:18:8d:8c:1b:69:ed:08:5d:ec:0f:2b:4f:a5: 2d:33:44:b7:09:c2:73:f4:bf:82:b3:f7:b6:0e:fb:61:2c:f6: e6:8d:5f:cb:c3:8e:58:98:95:d9:2e:c4:13:a0:67:89:87:eb: fb:7d:41:e2:b8:3c:93:26:cb:f8:0d:a9:23:7d:fb:19:cd:07: fb:28:0a:2f:c6:51:7d:92:50:5f:7f:64:66:24:08:32:e1:dc: f9:d2:d1:0b:1b:65:48:ce:4c:e4:be:73:60:97:35:25:a3:39: a4:34:2f:5d:b2:1e:35:aa:c2:4f:ea:99:e2:ed:31:b2:aa:b7: ff:ea:f4:c9:55:55:f3:7b:91:de:12:1a:f0:9c:a6:e2:ab:ab: ff:e1:52:5b:f5:b8:43:75:41:58:81:50:1b:07:d4:e0:8b:2f: 60:20:d1:d0:8a:19:2a:1d:f9:6b:ae:eb:4f:25:5c:2e:18:16: 27:ab:12:6d:6a:0e:98:cc:6e:13:dc:14:b5:f1:b5:48:55:4b: 21:72:7a:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUxMTA0MTQ0NTE0WhcNMjUxMTExMTQ0NTE0WjAYMRYwFAYD VQQDEw02OTBhMTE3Yi1jODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qTRIB8J2brwT3+33dzOqO5/9cJn7og41IL3mvlzOzb3WqmzjLpmpuQcyd20 OFB1GMjG/MI1Zz/0CijnmaMlh0bbHGF8h2X+rOywzd/CCW0Z2Q6AzseoECZCg0fy 2e8gFSb+Blzq8Fq2y0wQgxcL9hne+dBGSksvwWZVSJwDJeM1kMsAvzOO/3y56Y0N hONCb+aPAEsQGl8Vngo86oB/dqF1K+uWX+i3reTjTv9+1eASv21AZ9/NSb0crSo9 paQDJhOhWoI9c6Bo/69US9/L1XwmEycfCqqDCitZNZ3cQWSg7y19Q7NvFwbjA8lA j/BHCgo9cJbzUADI5BiaaMoJewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIcm/K9 vDICsZa3H2lc1ErFBABBMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA383rbb1YUhQsuuAH5Z8KbHZLfQqm3aDn9AaJJjH4kdQqaEdxQ8Eyd HZ2v99Ai9CZFFnmTM6JYtO9TUhiNjBtp7Qhd7A8rT6UtM0S3CcJz9L+Cs/e2Dvth LPbmjV/Lw45YmJXZLsQToGeJh+v7fUHiuDyTJsv4DakjffsZzQf7KAovxlF9klBf f2RmJAgy4dz50tELG2VIzkzkvnNglzUlozmkNC9dsh41qsJP6pni7TGyqrf/6vTJ VVXze5HeEhrwnKbiq6v/4VJb9bhDdUFYgVAbB9Tgiy9gINHQihkqHflrrutPJVwu GBYnqxJtag6YzG4T3BS18bVIVUshcnqL -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:01 2025 by rpki-client