$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: OzhKDzBlo7o8k1CQ/WT3H86Zh9MqNkdzm7DJyOJnJuY= Subject key identifier: E7:E1:91:32:CE:1C:EB:BF:DD:73:8E:E6:CA:61:BF:7F:8E:DD:49:54 Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 01A6 Signing time: Mon 03 Nov 2025 03:13:27 +0000 Manifest this update: Mon 03 Nov 2025 03:13:27 +0000 Manifest next update: Mon 10 Nov 2025 03:13:27 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: rdrralEQvoz6fc3IalvfzGN+oGMj4KSDAJbXcRSYngY=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: Nov 3 03:13:27 2025 GMT Not After : Nov 10 03:13:27 2025 GMT Subject: CN=69081dd7-2720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:e3:ca:c6:48:6f:9c:cd:53:1d:e1:81:12: eb:bb:37:b2:05:43:f7:08:d6:25:ca:67:86:d5:59: b6:dd:87:d9:7e:13:4f:b0:f9:51:3e:94:36:e1:f7: 88:07:b1:07:d2:3d:0c:2c:ff:43:eb:6d:57:0f:a5: 67:db:53:90:81:7b:a0:63:55:8c:62:c2:61:f1:ab: ca:40:c6:8d:01:6c:b5:5a:d7:e0:01:d4:f6:2a:94: f9:7b:2f:aa:6a:a2:84:f1:d4:ac:2d:28:34:4d:f0: f9:fa:0d:91:54:bd:bf:97:c7:09:bb:33:ca:0b:8d: ef:7a:80:a6:69:81:ec:b6:48:79:ca:3e:41:4f:68: d1:bb:c4:f3:3d:c3:c3:2c:79:7a:1c:2f:e0:4f:c6: 51:f8:b9:b7:02:ee:f2:03:34:b3:aa:8a:fe:c6:db: f1:0a:08:97:b8:4a:01:65:37:48:f7:99:37:4b:68: 60:c3:5c:eb:e9:96:6d:e2:68:a0:1a:47:48:2d:01: b9:9f:90:95:ce:33:cf:47:51:f1:40:43:80:0b:45: 70:5e:84:8f:9d:34:62:90:44:62:80:30:84:f2:f6: a0:d8:47:4f:30:24:22:da:1f:c9:2f:14:a3:b6:42: 4a:3d:d1:6c:69:c7:d1:29:fd:ee:a4:9c:72:59:24: a9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:91:32:CE:1C:EB:BF:DD:73:8E:E6:CA:61:BF:7F:8E:DD:49:54 X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0f:49:d9:6f:1d:6e:e8:91:da:79:0c:4e:98:80:86:c2:61: 2c:a6:f7:f9:cb:24:7c:d4:68:bb:fe:6a:d2:9d:cd:95:4f:52: f1:84:fc:58:7f:3d:a1:d9:25:87:9d:de:e6:c7:7a:26:d1:21: 72:23:df:18:ba:ad:63:a6:17:b4:fe:89:d8:6f:6e:40:49:f9: e9:ef:c7:2e:de:be:fc:ac:4a:8b:14:fe:1c:46:e5:d4:d6:32: 7e:18:0b:ab:00:28:eb:d1:7d:f6:bb:b0:4d:21:f0:07:88:59: 7a:1f:05:e2:71:d4:f2:0c:dd:08:91:12:75:58:c6:8d:2e:d4: bd:00:59:d2:94:75:da:87:ec:07:cc:2c:7d:d8:8a:4d:67:29: 05:9e:90:f9:c2:5a:b5:8c:ba:ff:94:d8:2e:f9:11:de:ca:fd: a1:63:a3:fd:8d:d8:de:d7:4a:78:7f:8c:62:f8:9a:25:1c:01: 5f:2c:4e:16:0a:ea:6e:68:de:72:96:6f:2e:61:78:ec:33:ee: fc:49:b4:21:77:78:40:c1:77:64:88:d2:93:3d:29:aa:e1:88: 75:1c:f9:c8:66:4b:9e:8c:90:3d:3c:2a:c1:b0:7b:2a:43:69: 36:2e:68:ed:41:18:99:14:f8:c0:6f:cc:71:df:ac:16:2d:96: bf:75:ec:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjUxMTAzMDMxMzI3WhcNMjUxMTEwMDMxMzI3WjAYMRYwFAYD VQQDEw02OTA4MWRkNy0yNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DPjysZIb5zNUx3hgRLruzeyBUP3CNYlymeG1Vm23YfZfhNPsPlRPpQ24feI B7EH0j0MLP9D621XD6Vn21OQgXugY1WMYsJh8avKQMaNAWy1WtfgAdT2KpT5ey+q aqKE8dSsLSg0TfD5+g2RVL2/l8cJuzPKC43veoCmaYHstkh5yj5BT2jRu8TzPcPD LHl6HC/gT8ZR+Lm3Au7yAzSzqor+xtvxCgiXuEoBZTdI95k3S2hgw1zr6ZZt4mig GkdILQG5n5CVzjPPR1HxQEOAC0VwXoSPnTRikERigDCE8vag2EdPMCQi2h/JLxSj tkJKPdFsacfRKf3upJxyWSSptQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfhkTLO HOu/3XOO5sphv3+O3UlUMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaD0nZbx1u6JHaeQxOmICGwmEspvf5yyR81Gi7/mrSnc2VT1LxhPxY fz2h2SWHnd7mx3om0SFyI98Yuq1jphe0/onYb25ASfnp78cu3r78rEqLFP4cRuXU 1jJ+GAurACjr0X32u7BNIfAHiFl6HwXicdTyDN0IkRJ1WMaNLtS9AFnSlHXah+wH zCx92IpNZykFnpD5wlq1jLr/lNgu+RHeyv2hY6P9jdje10p4f4xi+JolHAFfLE4W CupuaN5ylm8uYXjsM+78SbQhd3hAwXdkiNKTPSmq4Yh1HPnIZkuejJA9PCrBsHsq Q2k2LmjtQRiZFPjAb8xx36wWLZa/dewv -----END CERTIFICATE-----Generated at Tue Nov 4 12:33:09 2025 by rpki-client