$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: /r+TGaobr5AZSEPTjLBVmK3zq5IpABU+7hk3m1h00ek= Subject key identifier: 09:93:47:7C:96:B5:CF:56:D2:60:C8:DF:E7:55:94:B0:E4:A5:95:C7 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 037E Signing time: Mon 03 Nov 2025 00:48:04 +0000 Manifest this update: Mon 03 Nov 2025 00:48:04 +0000 Manifest next update: Mon 10 Nov 2025 00:48:04 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: cr25wlBZN6uBy3wwwXyI1lw3MVg3REDAPeIy0x99P1o=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: hQOYHlCjx2ScuN+oMwFJ/ejTbPq4orU4F7qi3kUTHdM=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: 7Gmx6aG6mVa6tW4ZmRdx25+Dm056uxm4nK4BIHzJbm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Nov 3 00:48:04 2025 GMT Not After : Nov 10 00:48:04 2025 GMT Subject: CN=6907fbc4-cd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:59:84:a8:46:a8:fd:4e:b7:c5:e8:04:7e: 95:72:82:e9:51:1d:be:29:15:4f:ff:b6:f2:5f:f9: 7f:ba:c9:4c:a8:85:d2:5a:d2:d6:75:06:97:6e:7a: 60:84:e3:b5:c8:72:51:c2:96:6d:ed:34:67:ea:9a: 2e:0f:a7:ee:af:bc:1f:d3:5e:9c:dc:75:15:14:85: 8f:b1:e5:69:63:93:eb:ca:13:98:02:70:ef:20:e3: 76:84:4e:a2:1b:9b:da:5d:ce:d0:66:3d:bd:81:33: 72:8e:03:a8:61:27:37:05:09:7c:f0:41:d6:be:d1: 7c:34:96:37:e4:93:77:dc:fe:be:8e:6c:36:72:1b: a0:fd:98:e6:c8:47:36:6f:32:23:50:21:a9:ca:33: 16:34:00:7d:2a:1a:a1:a8:97:66:aa:fb:66:44:b6: 65:87:2a:de:dd:59:ee:e7:92:51:4b:4c:af:cd:fd: 72:fa:03:73:ed:34:67:76:a7:f2:70:76:fe:c6:cb: f4:93:e8:00:1a:62:e2:96:e1:2a:ec:1b:26:40:10: 4d:e5:00:64:e1:3e:c2:48:02:f8:86:f8:dc:19:2b: ec:60:a5:2c:e1:8e:43:d7:dd:12:f8:38:05:42:9e: 28:f2:cc:40:e0:9a:37:e1:4e:67:98:64:1b:f6:3d: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:93:47:7C:96:B5:CF:56:D2:60:C8:DF:E7:55:94:B0:E4:A5:95:C7 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:5d:a2:09:b8:94:ce:c7:a2:dc:4d:00:68:d3:9f:23:2f:66: 56:bb:eb:20:6d:51:12:5b:6a:d0:d2:9e:fd:ae:e2:ef:5a:ba: b1:51:9c:a4:f9:6f:6a:4f:ef:8f:a1:c2:8a:37:34:be:92:4e: 1f:6c:e6:20:9d:4a:24:14:b2:17:e8:36:09:81:17:99:4d:b3: 30:b2:74:c5:3e:67:94:85:3b:35:44:46:02:0a:65:5f:22:39: e1:d4:e8:6c:91:90:b5:89:b2:e1:03:ba:10:03:44:0f:f6:d7: 7d:08:af:19:01:ec:f4:b7:35:20:0a:53:01:88:92:db:6b:26: 3e:b6:72:08:33:64:2b:44:93:5e:5c:e5:3a:c7:64:4c:0a:27: a2:61:10:b7:e2:04:bb:97:e3:de:eb:31:26:c5:6c:7e:78:14: 33:83:eb:59:53:16:a7:8a:29:2a:17:ea:2a:3d:37:fc:89:99: 44:55:96:ca:79:8e:f6:9e:78:b6:5a:ee:f5:ef:b9:59:f1:92: 6a:d7:c4:db:08:60:ed:aa:c0:2e:67:85:f0:e3:2e:14:7f:85: f0:36:7f:3c:16:10:e8:9b:cf:7e:df:89:57:15:8d:81:fc:a3: 22:97:59:5e:46:ff:3a:02:5f:b0:f7:a8:fe:dc:30:e3:9a:71: e5:1d:92:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjUxMTAzMDA0ODA0WhcNMjUxMTEwMDA0ODA0WjAYMRYwFAYD VQQDEw02OTA3ZmJjNC1jZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB5ZhKhGqP1Ot8XoBH6VcoLpUR2+KRVP/7byX/l/uslMqIXSWtLWdQaXbnpg hOO1yHJRwpZt7TRn6pouD6fur7wf016c3HUVFIWPseVpY5PryhOYAnDvION2hE6i G5vaXc7QZj29gTNyjgOoYSc3BQl88EHWvtF8NJY35JN33P6+jmw2chug/ZjmyEc2 bzIjUCGpyjMWNAB9KhqhqJdmqvtmRLZlhyre3Vnu55JRS0yvzf1y+gNz7TRndqfy cHb+xsv0k+gAGmLiluEq7BsmQBBN5QBk4T7CSAL4hvjcGSvsYKUs4Y5D190S+DgF Qp4o8sxA4Jo34U5nmGQb9j0tnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmTR3yW tc9W0mDI3+dVlLDkpZXHMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABXaIJuJTOx6LcTQBo058jL2ZWu+sgbVESW2rQ0p79ruLvWrqxUZyk +W9qT++PocKKNzS+kk4fbOYgnUokFLIX6DYJgReZTbMwsnTFPmeUhTs1REYCCmVf Ijnh1OhskZC1ibLhA7oQA0QP9td9CK8ZAez0tzUgClMBiJLbayY+tnIIM2QrRJNe XOU6x2RMCieiYRC34gS7l+Pe6zEmxWx+eBQzg+tZUxaniikqF+oqPTf8iZlEVZbK eY72nni2Wu7177lZ8ZJq18TbCGDtqsAuZ4Xw4y4Uf4XwNn88FhDom89+34lXFY2B /KMil1leRv86Al+w96j+3DDjmnHlHZKY -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:44 2025 by rpki-client