$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: FtuP1PCF+PEvJelFe2Khe7mv4ZzvReEWXdx16pXle9M= Subject key identifier: 20:84:DC:F9:5F:7B:A3:89:BA:AB:9D:37:16:4B:BA:AF:3F:FF:65:CA Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 038A Signing time: Mon 03 Nov 2025 00:48:33 +0000 Manifest this update: Mon 03 Nov 2025 00:48:32 +0000 Manifest next update: Mon 10 Nov 2025 00:48:32 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: EFr0lkkzfWTvZbjtZGRK0Eq8SfXqwVU0lYEd+KgjnLM=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: F+cI71SpMl71bLQgnMUz6K4+MsaifrlPMt2J8GaVcJ8=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: RWlaRiVFKIIV/wakCOCZQQ+zk9bO5MWkgTakC7o+ErY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Nov 3 00:48:32 2025 GMT Not After : Nov 10 00:48:32 2025 GMT Subject: CN=6907fbe0-395d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:67:c3:ec:05:86:95:f9:d0:81:c4:80:9e:94: 99:f0:95:9e:88:37:91:9a:cf:f8:dc:09:84:92:a8: 2e:a5:01:5c:5b:27:8a:9b:17:fe:9c:66:77:af:24: f7:92:0b:1e:4c:92:c6:1f:31:f3:e2:9d:6c:08:8f: ed:be:37:26:39:14:42:7e:8d:45:e2:cb:b0:89:ea: 5e:44:f3:56:d3:9e:38:69:a9:fb:de:77:0a:ba:7d: cb:58:1f:92:8c:ce:84:a3:e5:b0:88:8d:37:77:4b: ef:0f:f2:bf:c1:c8:cf:d7:fd:25:ad:16:78:80:50: 40:6e:47:5f:e2:a8:6c:80:40:ea:2c:ee:17:04:88: 75:5f:bc:8c:7b:d4:82:83:5f:bc:e4:a9:f8:fd:a9: 9f:d2:2a:a7:8c:aa:3d:9f:91:96:fe:42:56:ac:de: 80:89:36:0e:4d:38:70:e7:18:0b:76:74:27:3a:6a: 13:b5:f3:a1:e8:ef:66:e3:7d:36:78:f8:9a:98:4b: 8f:7a:b7:fd:89:f4:cd:02:26:e9:cc:7f:8a:37:24: 9d:ca:93:0d:a9:4a:0b:79:fd:41:81:a7:b9:90:66: 4f:70:b0:b5:c3:4d:e3:44:2f:c2:d8:0a:45:56:3c: 05:ea:74:89:a6:05:04:0b:4c:8f:67:d6:c8:7b:60: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:DC:F9:5F:7B:A3:89:BA:AB:9D:37:16:4B:BA:AF:3F:FF:65:CA X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:83:9f:26:74:2b:09:29:ff:8a:c9:7a:b2:ab:9a:f1:60:b4: e5:c3:eb:6d:33:bc:8b:53:c9:65:82:75:4b:1b:f6:f2:8c:f5: f3:c6:15:79:a8:28:ce:5c:13:06:13:7c:24:17:4c:ec:90:bb: 6d:d8:86:dc:ae:b8:73:cd:88:d5:a7:fa:a0:19:4d:de:7c:50: 4a:53:83:da:ce:eb:b9:28:63:d9:6f:f2:d8:2c:3c:5c:7e:21: c3:60:5f:02:b9:ba:a8:39:13:be:99:15:d0:ce:39:ef:85:90: b7:1e:78:c5:27:d2:1e:c6:e4:ed:0c:cb:12:e0:e6:94:51:d8: 3b:f4:ac:4c:ec:7b:d8:4c:51:0f:23:a9:53:bc:ac:a2:e6:90: 16:ca:4b:32:08:5f:e8:65:1d:84:dd:c8:c9:cd:52:36:e8:af: cf:e0:98:1b:6a:89:92:1e:56:d5:e2:87:ce:95:a2:5b:48:13: f7:4c:03:01:97:b7:c6:df:61:02:1d:49:dd:e5:38:61:bf:dd: ad:e5:97:37:90:f2:fa:a6:69:e4:8c:e1:87:40:dc:8f:0c:55: a9:db:3b:21:c3:a4:8b:54:1a:69:13:82:67:9f:ca:f9:dc:de: 29:a0:20:8b:2e:f7:91:82:ef:c0:94:d7:e3:6c:e7:4f:f2:bc: 53:1f:77:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUxMTAzMDA0ODMyWhcNMjUxMTEwMDA0ODMyWjAYMRYwFAYD VQQDEw02OTA3ZmJlMC0zOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+WfD7AWGlfnQgcSAnpSZ8JWeiDeRms/43AmEkqgupQFcWyeKmxf+nGZ3ryT3 kgseTJLGHzHz4p1sCI/tvjcmORRCfo1F4suwiepeRPNW0544aan73ncKun3LWB+S jM6Eo+WwiI03d0vvD/K/wcjP1/0lrRZ4gFBAbkdf4qhsgEDqLO4XBIh1X7yMe9SC g1+85Kn4/amf0iqnjKo9n5GW/kJWrN6AiTYOTThw5xgLdnQnOmoTtfOh6O9m4302 ePiamEuPerf9ifTNAibpzH+KNySdypMNqUoLef1Bgae5kGZPcLC1w03jRC/C2ApF VjwF6nSJpgUEC0yPZ9bIe2DC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCE3Plf e6OJuqudNxZLuq8//2XKMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHg58mdCsJKf+KyXqyq5rxYLTlw+ttM7yLU8llgnVLG/byjPXzxhV5 qCjOXBMGE3wkF0zskLtt2IbcrrhzzYjVp/qgGU3efFBKU4Pazuu5KGPZb/LYLDxc fiHDYF8CubqoORO+mRXQzjnvhZC3HnjFJ9IexuTtDMsS4OaUUdg79KxM7HvYTFEP I6lTvKyi5pAWyksyCF/oZR2E3cjJzVI26K/P4JgbaomSHlbV4ofOlaJbSBP3TAMB l7fG32ECHUnd5Thhv92t5Zc3kPL6pmnkjOGHQNyPDFWp2zshw6SLVBppE4Jnn8r5 3N4poCCLLveRgu/AlNfjbOdP8rxTH3en -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:36 2025 by rpki-client