$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: C8bUXINAO/KDyn0S2JUpd+RH2tjyko6m2eUy8SnuI5w= Subject key identifier: 3C:E9:8A:CE:CD:C8:2A:6A:F2:83:B9:B1:AC:FD:A9:39:2D:B6:57:F5 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 09D0 Signing time: Tue 04 Nov 2025 20:02:49 +0000 Manifest this update: Tue 04 Nov 2025 20:02:49 +0000 Manifest next update: Tue 11 Nov 2025 20:02:49 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: OTedU1lcCSEgrmXWEk82b3tcFDAVAQ/XVmtKFCgrFyA=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Nov 4 20:02:49 2025 GMT Not After : Nov 11 20:02:49 2025 GMT Subject: CN=690a5be9-a437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:3e:e3:d2:15:bd:10:ff:df:e5:03:a4:9a: 80:6a:b2:dc:04:da:cd:4d:33:cd:3b:1e:b5:b7:1f: 4f:31:17:25:32:b8:08:94:41:a1:29:3a:e4:dd:e9: 89:ce:35:9e:f4:48:a1:23:b7:f9:e4:81:ed:ed:86: 32:ec:84:d4:ac:37:92:35:83:e9:d9:07:8f:d0:96: fa:b8:d9:b7:ac:e8:ed:27:7f:22:7d:e5:4b:98:22: 9e:d6:cf:84:54:bd:f5:07:e1:cd:12:5c:64:1c:a8: b5:91:c2:b1:82:5e:30:52:04:a5:40:c7:4e:14:de: 28:dd:42:4b:23:6f:16:1a:61:c6:cb:5e:10:48:d9: b6:91:aa:4b:aa:3d:33:2e:e7:a1:fd:3d:23:ea:dc: 1b:1c:62:05:2d:ff:a8:f9:91:81:ac:d8:fa:0a:cb: 38:c9:d9:20:aa:16:23:c2:91:2a:32:c0:ac:8a:a0: ea:95:13:15:1b:51:1e:a6:64:f6:d9:43:5f:a1:1c: cc:0b:30:3f:22:6c:22:02:08:4b:1f:fa:f2:c9:be: 61:47:3c:1e:ec:8f:32:cc:17:77:bd:02:7b:fc:4f: 2a:6f:ce:69:6c:0b:b3:27:f2:1c:e0:53:07:1e:ea: 74:c2:fa:11:c1:fa:12:99:a4:c0:49:f7:9d:bc:bd: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E9:8A:CE:CD:C8:2A:6A:F2:83:B9:B1:AC:FD:A9:39:2D:B6:57:F5 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:de:b8:de:74:be:08:c6:69:b6:8f:0b:b0:a1:6a:8d:5b:04: b7:21:f4:06:a0:3f:1b:a3:39:a3:cb:6b:54:80:6d:cb:c9:82: ba:0e:1a:77:52:e9:cd:47:36:4a:39:58:d9:d1:00:22:d8:7a: 9d:6b:55:01:3f:6b:1e:89:b7:f8:db:d8:71:28:fd:35:75:5f: 99:07:80:05:f0:1e:9f:14:48:a7:2c:b5:ce:2a:0f:da:50:70: 53:59:df:1c:78:40:94:7b:16:85:4b:65:76:a8:7d:e3:28:a6: c2:0d:fa:3d:75:f9:f2:b2:9b:a5:f5:5c:2c:3e:7b:15:42:d3: da:51:e5:9e:35:91:e5:69:b9:89:1b:a4:96:35:f9:ad:f9:a6: 3e:69:3c:71:04:0a:73:89:32:3c:04:da:e9:45:e6:bb:ff:36: 39:db:93:e1:14:f0:25:2a:30:5a:b0:d8:32:dc:f8:d7:71:85: 31:6a:9d:dc:49:3c:96:1c:26:9c:5a:ac:19:f3:20:a7:9f:57: 74:bc:0a:bb:cf:05:a4:fa:bd:68:02:78:b4:e8:5f:6e:2c:2c: 1e:15:9b:90:b6:e6:f5:72:de:67:44:d9:e2:53:1f:ec:b5:6d: 09:37:d6:2a:9f:77:11:b0:a8:24:79:c9:a7:69:1f:8e:b1:10: 08:7d:6f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUxMTA0MjAwMjQ5WhcNMjUxMTExMjAwMjQ5WjAYMRYwFAYD VQQDEw02OTBhNWJlOS1hNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pc+49IVvRD/3+UDpJqAarLcBNrNTTPNOx61tx9PMRclMrgIlEGhKTrk3emJ zjWe9EihI7f55IHt7YYy7ITUrDeSNYPp2QeP0Jb6uNm3rOjtJ38ifeVLmCKe1s+E VL31B+HNElxkHKi1kcKxgl4wUgSlQMdOFN4o3UJLI28WGmHGy14QSNm2kapLqj0z Lueh/T0j6twbHGIFLf+o+ZGBrNj6Css4ydkgqhYjwpEqMsCsiqDqlRMVG1EepmT2 2UNfoRzMCzA/ImwiAghLH/ryyb5hRzwe7I8yzBd3vQJ7/E8qb85pbAuzJ/Ic4FMH Hup0wvoRwfoSmaTASfedvL0GSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzpis7N yCpq8oO5saz9qTkttlf1MB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX3rjedL4Ixmm2jwuwoWqNWwS3IfQGoD8bozmjy2tUgG3LyYK6Dhp3 UunNRzZKOVjZ0QAi2Hqda1UBP2seibf429hxKP01dV+ZB4AF8B6fFEinLLXOKg/a UHBTWd8ceECUexaFS2V2qH3jKKbCDfo9dfnyspul9VwsPnsVQtPaUeWeNZHlabmJ G6SWNfmt+aY+aTxxBApziTI8BNrpRea7/zY525PhFPAlKjBasNgy3PjXcYUxap3c STyWHCacWqwZ8yCnn1d0vAq7zwWk+r1oAni06F9uLCweFZuQtub1ct5nRNniUx/s tW0JN9Yqn3cRsKgkecmnaR+OsRAIfW+q -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:49 2025 by rpki-client