$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: f6yIJKb/pO+WWb/vxgEUz8yvsEljeiFDsXpTs2yavRo= Subject key identifier: 6C:4E:67:00:B1:77:A8:AD:A7:00:86:37:56:FA:F0:F4:82:D3:D7:6F Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: AD Signing time: Wed 05 Nov 2025 06:26:25 +0000 Manifest this update: Wed 05 Nov 2025 06:26:24 +0000 Manifest next update: Wed 12 Nov 2025 06:26:24 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: LgaDmiWTj2Z3MQNXQL4e5a6yuAn1X/0WyGtpRxpTq6w=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 96lGjI+rVLrvfkE2WsUYkz8c8INkPpGaZ8hTU2N39nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Nov 5 06:26:24 2025 GMT Not After : Nov 12 06:26:24 2025 GMT Subject: CN=690aee11-cb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:a5:81:79:67:ce:9a:a7:9e:81:68:31:ed: 43:f3:d6:34:4f:d2:45:9a:58:98:a3:a7:56:76:0d: af:13:31:6b:79:95:82:6b:e8:f1:bb:4b:20:19:16: 9a:7c:ee:67:f9:e2:e9:ea:65:31:1a:c5:63:ba:89: d3:84:5a:5d:52:da:c1:44:3d:a2:a1:5a:8c:66:da: 59:52:97:b7:dc:44:e6:bb:6d:b3:8a:41:86:23:35: c6:6b:e7:18:89:34:89:00:bd:5d:64:84:05:2a:a1: f1:a0:8a:bb:2b:6b:68:93:9b:93:38:af:d8:fd:7a: 27:39:d0:f8:2e:52:d0:08:a0:0e:59:c5:79:89:a0: e1:c6:dc:6b:2c:a9:96:dc:36:23:de:bf:82:88:b6: b0:4f:39:26:36:c2:73:54:84:9f:ab:b6:0a:6f:82: 34:7a:26:7a:ff:7e:20:af:ac:73:fa:40:93:4a:71: f4:86:28:88:75:cc:8f:64:6c:74:e2:37:2d:c8:49: 0e:f7:09:7d:44:a1:34:60:95:3e:ed:24:04:62:cb: 93:82:ad:0f:94:50:4d:6b:76:9b:a3:de:a5:22:01: 53:ad:62:f1:db:a8:f2:66:d8:e4:da:75:9a:b2:f5: dc:fd:d1:01:15:1c:b9:fe:36:51:3a:1a:e2:d0:08: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:67:00:B1:77:A8:AD:A7:00:86:37:56:FA:F0:F4:82:D3:D7:6F X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a1:f3:8c:d8:38:46:7d:a3:73:36:73:21:cb:70:f3:f3:31: 81:6b:1b:35:8c:b5:43:02:40:a2:ce:43:57:cf:03:d4:00:c7: aa:98:9e:ca:8d:4c:22:e9:e8:43:8a:92:b4:9d:22:b2:35:05: b8:e8:81:0b:8c:65:f3:d6:e9:41:43:36:7f:d7:7a:d0:d6:54: 44:49:fa:1a:c0:22:94:a8:6d:23:a7:be:e4:a5:ff:93:f1:b0: ae:03:86:b5:b2:e2:7a:c4:80:05:ec:16:8b:08:44:10:39:69: a2:20:85:49:dc:a5:7f:8c:6b:f8:61:38:f3:f4:57:87:a7:da: d1:1b:91:3f:23:9c:b5:ba:76:32:1f:27:b5:24:88:95:ab:13: 42:9b:dc:f4:8c:e8:11:9d:b5:18:66:01:10:5b:c4:5f:b4:a0: 38:67:54:9b:c9:98:21:44:a1:d9:e5:0f:54:e8:2b:7b:1e:78: 97:46:d1:e3:d6:da:23:bf:78:0f:dc:8e:c0:d7:81:1c:84:98: a1:ff:2b:fc:9a:01:91:a5:7a:97:4a:33:3c:24:de:be:9b:b2: 4e:15:34:49:2e:27:35:83:49:9a:ea:21:fa:65:eb:35:ee:1a: 0f:f9:79:19:73:9d:2d:3d:37:c4:cb:2c:0c:82:6a:5c:58:1c: 45:54:dc:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5 NzQwMkNERDcwHhcNMjUxMTA1MDYyNjI0WhcNMjUxMTEyMDYyNjI0WjAYMRYwFAYD VQQDEw02OTBhZWUxMS1jYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXulgXlnzpqnnoFoMe1D89Y0T9JFmliYo6dWdg2vEzFreZWCa+jxu0sgGRaa fO5n+eLp6mUxGsVjuonThFpdUtrBRD2ioVqMZtpZUpe33ETmu22zikGGIzXGa+cY iTSJAL1dZIQFKqHxoIq7K2tok5uTOK/Y/XonOdD4LlLQCKAOWcV5iaDhxtxrLKmW 3DYj3r+CiLawTzkmNsJzVISfq7YKb4I0eiZ6/34gr6xz+kCTSnH0hiiIdcyPZGx0 4jctyEkO9wl9RKE0YJU+7SQEYsuTgq0PlFBNa3abo96lIgFTrWLx26jyZtjk2nWa svXc/dEBFRy5/jZROhri0AgHQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxOZwCx d6itpwCGN1b68PSC09dvMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4 MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI dmxidTJCMmN5dzZYUUN6ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ofOM2DhGfaNzNnMhy3Dz8zGBaxs1jLVDAkCizkNXzwPUAMeqmJ7K jUwi6ehDipK0nSKyNQW46IELjGXz1ulBQzZ/13rQ1lRESfoawCKUqG0jp77kpf+T 8bCuA4a1suJ6xIAF7BaLCEQQOWmiIIVJ3KV/jGv4YTjz9FeHp9rRG5E/I5y1unYy Hye1JIiVqxNCm9z0jOgRnbUYZgEQW8RftKA4Z1SbyZghRKHZ5Q9U6Ct7HniXRtHj 1tojv3gP3I7A14EchJih/yv8mgGRpXqXSjM8JN6+m7JOFTRJLic1g0ma6iH6Zes1 7hoP+XkZc50tPTfEyywMgmpcWBxFVNyP -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:22 2025 by rpki-client