$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft (raw, json) Hash identifier: rVilA1Xh2PzQxEG+vZ/ZUxZh3P9f3axk2XNB7Z1KcOk= Subject key identifier: 9A:C2:01:0C:A3:EB:30:83:05:93:6C:29:2E:99:4A:8D:CB:DC:13:01 Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Certificate issuer: /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft Manifest number: 2D Signing time: Wed 05 Nov 2025 07:53:24 +0000 Manifest this update: Wed 05 Nov 2025 07:53:23 +0000 Manifest next update: Wed 12 Nov 2025 07:53:23 +0000 Files and hashes: 1: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl (hash: b/10r3YGZcZjJY6VNbos17QdVOSrL+xvbeu0v3lpHe4=) 2: 62B3880C7E5D11F0ACC14A80C4F9AE02.roa (hash: LMY9Owm9M+jckWwqhTZOVT7R1zK2QNKKxtGjqP1nA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Validity Not Before: Nov 5 07:53:23 2025 GMT Not After : Nov 12 07:53:23 2025 GMT Subject: CN=690b0273-bd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:de:c6:a7:0f:35:3b:79:2e:e3:b0:3f:c6: 9e:d2:ba:40:6d:7c:40:4c:1f:dc:43:1b:e4:f1:ac: ea:26:c9:9a:79:82:50:d6:3e:99:35:79:6b:ff:64: 74:21:8c:36:eb:47:27:79:20:4c:c2:78:78:35:a1: e7:7e:12:ac:d7:cc:b9:0c:b7:9b:b8:d2:1b:27:8f: 6c:6d:53:46:d6:67:92:56:ed:f5:f2:69:6b:82:47: 9b:ba:5a:8d:50:df:bd:90:47:45:56:a8:9e:ab:cc: 6b:37:cc:d7:63:33:1d:47:10:7c:d5:4d:87:c9:7f: 23:45:e7:7f:f0:2b:f9:02:f6:05:8a:f8:3a:39:1d: 7d:0d:66:a8:56:b1:87:4d:0b:2a:e1:7e:5c:f2:03: c3:99:ad:b6:80:dd:77:71:05:1f:59:a8:44:5e:be: a2:54:6d:64:ba:04:05:76:11:92:99:ca:fe:dd:dc: cd:7a:ad:3b:ec:30:78:f2:86:9b:49:cb:c0:9d:96: b6:4a:cc:4a:a8:ab:d5:87:a3:8f:57:23:e7:92:a8: 64:ad:b5:51:b3:38:62:3f:d9:47:7b:db:c2:90:df: da:cd:3b:9f:d0:17:3c:c7:c9:f0:d5:8c:27:0a:4f: 27:a5:43:2e:b1:c3:78:44:91:1d:e6:71:98:c0:1a: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C2:01:0C:A3:EB:30:83:05:93:6C:29:2E:99:4A:8D:CB:DC:13:01 X509v3 Authority Key Identifier: keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:13:53:55:f5:0f:02:f8:1c:87:91:4a:0e:ee:af:e9:47:6f: 67:18:8c:bf:21:41:a0:8c:a4:e7:09:13:2e:d5:33:6f:a3:e0: a7:00:e6:f8:94:3e:0e:0f:ed:4b:97:a1:54:95:b3:1b:34:78: 34:be:54:cf:65:9b:e1:79:8b:a9:19:d1:dc:37:43:53:fa:97: 9a:c1:3b:74:59:87:65:c6:15:9f:52:8b:b3:62:47:3b:21:bd: 2d:7a:33:4e:c1:c0:d9:7f:b8:9c:c9:61:35:13:4b:ec:e8:bb: c3:f5:9d:1f:98:bd:f7:28:1b:0b:f4:65:61:7a:b2:83:d3:61: 6e:cc:0e:2a:b7:94:56:ec:88:c2:23:1f:28:12:58:b5:aa:81: 31:aa:ae:d4:9b:fd:71:86:a4:ba:da:1d:42:88:62:7f:36:0e: f1:d4:f8:a7:6c:9b:27:2b:6b:e1:aa:34:14:9c:e3:02:d8:b6: db:8e:e2:b8:ed:f3:b9:1d:45:0c:ab:8b:e2:7a:f6:bf:69:81: 06:ad:57:5e:33:e1:da:09:d2:ab:c0:f8:71:c0:7e:9b:50:41: 2b:fe:b7:eb:08:53:8b:b8:c0:59:a3:22:e8:af:8c:30:88:f5: 13:d5:1f:44:1a:d5:18:64:19:ae:ba:ee:71:b3:7b:4a:52:38: 4c:3d:e3:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoMEMyRjQ1QjZDODg2MjIzMjQyRUM5QkY5M0IzNDY5N0Y2 NERERjY4MDAeFw0yNTExMDUwNzUzMjNaFw0yNTExMTIwNzUzMjNaMBgxFjAUBgNV BAMTDTY5MGIwMjczLWJkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIVd7Gpw81O3ku47A/xp7SukBtfEBMH9xDG+TxrOomyZp5glDWPpk1eWv/ZHQh jDbrRyd5IEzCeHg1oed+EqzXzLkMt5u40hsnj2xtU0bWZ5JW7fXyaWuCR5u6Wo1Q 372QR0VWqJ6rzGs3zNdjMx1HEHzVTYfJfyNF53/wK/kC9gWK+Do5HX0NZqhWsYdN CyrhflzyA8OZrbaA3XdxBR9ZqERevqJUbWS6BAV2EZKZyv7d3M16rTvsMHjyhptJ y8CdlrZKzEqoq9WHo49XI+eSqGSttVGzOGI/2Ud728KQ39rNO5/QFzzHyfDVjCcK TyelQy6xw3hEkR3mcZjAGtWxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmsIBDKPr MIMFk2wpLplKjcvcEwEwHwYDVR0jBBgwFoAUDC9FtsiGIjJC7Jv5OzRpf2Td9oAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0MwODUwNjkyN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREM5RnRzaUdJakpDN0p2NU96UnBmMlRkOW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0MwODUwNjkyN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL0RDOUZ0c2lHSWpK QzdKdjVPelJwZjJUZDlvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJITU1X1DwL4HIeRSg7ur+lHb2cYjL8hQaCMpOcJEy7VM2+j4KcA5viU Pg4P7UuXoVSVsxs0eDS+VM9lm+F5i6kZ0dw3Q1P6l5rBO3RZh2XGFZ9Si7NiRzsh vS16M07BwNl/uJzJYTUTS+zou8P1nR+YvfcoGwv0ZWF6soPTYW7MDiq3lFbsiMIj HygSWLWqgTGqrtSb/XGGpLraHUKIYn82DvHU+Kdsmycra+GqNBSc4wLYttuO4rjt 87kdRQyri+J69r9pgQatV14z4doJ0qvA+HHAfptQQSv+t+sIU4u4wFmjIuivjDCI 9RPVH0Qa1RhkGa667nGze0pSOEw94w0= -----END CERTIFICATE-----Generated at Wed Nov 5 22:43:41 2025 by rpki-client