$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: OAtvspSWUbgjInfGKAfcIQfrY+bl827XoUIWvjQi7GY= Subject key identifier: 63:D5:17:9C:CE:71:C5:E8:51:EE:DB:11:A6:35:43:B6:49:FE:92:2E Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 23BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 239E Signing time: Tue 04 Nov 2025 15:53:55 +0000 Manifest this update: Tue 04 Nov 2025 15:53:55 +0000 Manifest next update: Tue 11 Nov 2025 15:53:55 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: BtnhMIlSpg5z1tzTUPhm7L3ZaIxnSlLz9pIW7h0vVT8=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9151 (0x23bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Nov 4 15:53:55 2025 GMT Not After : Nov 11 15:53:55 2025 GMT Subject: CN=690a2193-457c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:84:76:be:62:8a:7d:65:11:31:2e:fa:b2:71: 23:91:c2:df:3c:42:d1:7a:9c:83:da:b8:26:9b:68: 8b:d9:54:2a:a1:ab:3f:a1:c6:27:62:c2:15:e0:42: f1:52:15:f6:e1:b9:8a:88:f2:61:36:3d:b7:c7:c1: 07:d1:31:78:1b:91:21:44:29:52:ec:55:90:f8:a0: 6c:b3:ef:b6:20:b3:2e:3a:a5:69:69:ad:de:d0:6a: d9:42:40:cc:43:e7:a2:de:17:a2:13:6e:0b:40:c6: b0:61:13:50:b6:13:58:c7:ac:21:de:5b:5d:0f:79: 8d:f1:a0:3b:c3:99:50:40:82:b9:53:2a:97:19:31: 11:e9:21:12:5d:0d:9c:50:53:00:71:cd:c6:38:e6: 41:c6:42:43:04:27:f6:ef:de:d1:08:61:fb:80:16: bf:72:30:83:52:66:24:77:b4:78:0a:b1:a2:be:fc: ad:ee:ec:e4:9c:bb:69:03:42:1c:a6:9b:42:80:21: 68:74:43:56:74:97:35:3b:66:d0:44:2c:93:1b:7c: d3:1f:78:64:40:d2:e1:cc:31:60:5f:50:13:1b:80: a7:44:fe:e7:90:9e:06:de:ad:9f:42:31:6a:25:bf: 09:8d:6d:ad:79:22:dc:fd:34:d9:5e:73:76:8f:7b: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D5:17:9C:CE:71:C5:E8:51:EE:DB:11:A6:35:43:B6:49:FE:92:2E X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:40:6a:65:5e:55:df:04:e3:2d:07:f6:25:37:70:45:55:20: 4d:07:dd:a2:5b:15:49:44:3f:0b:0f:e3:94:02:69:92:4c:2d: f8:ba:ec:73:b8:2d:18:30:44:28:e0:e0:09:e0:59:5a:8b:a7: 43:40:b3:d0:11:79:d2:4d:29:2a:0c:4a:d3:ab:1b:18:84:4f: ad:ce:8a:8c:bd:c2:ce:31:52:55:74:4d:73:bc:79:da:e5:c5: 9f:17:42:08:f3:9e:5a:de:0d:41:8e:1e:67:bb:d7:60:eb:96: 3b:ff:df:3f:56:88:b3:ce:6e:53:cc:ee:62:f2:3d:db:43:52: b7:64:ef:0e:7f:4b:4e:15:c6:05:33:f8:df:be:a8:9a:d5:64: f8:07:10:ef:9d:bf:e1:eb:b4:57:a6:4a:ed:8b:4b:70:75:07: a2:fc:73:7e:a3:ef:6e:f9:ff:d3:0a:2a:13:22:b8:cd:04:4b: 54:6f:6d:d1:40:b1:2b:8a:01:11:8d:a1:b4:a8:d0:9c:65:0b: d7:56:0d:c0:51:b0:13:bd:dd:10:62:82:35:96:94:37:ef:93: 92:61:0d:a4:67:f3:dd:4d:b1:7d:26:38:36:30:ed:37:8d:0e: d4:05:e9:4e:79:ce:fb:7b:00:e7:cd:e4:5e:fd:57:d1:87:59: fb:95:af:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUxMTA0MTU1MzU1WhcNMjUxMTExMTU1MzU1WjAYMRYwFAYD VQQDEw02OTBhMjE5My00NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YR2vmKKfWURMS76snEjkcLfPELRepyD2rgmm2iL2VQqoas/ocYnYsIV4ELx UhX24bmKiPJhNj23x8EH0TF4G5EhRClS7FWQ+KBss++2ILMuOqVpaa3e0GrZQkDM Q+ei3heiE24LQMawYRNQthNYx6wh3ltdD3mN8aA7w5lQQIK5UyqXGTER6SESXQ2c UFMAcc3GOOZBxkJDBCf2797RCGH7gBa/cjCDUmYkd7R4CrGivvyt7uzknLtpA0Ic pptCgCFodENWdJc1O2bQRCyTG3zTH3hkQNLhzDFgX1ATG4CnRP7nkJ4G3q2fQjFq Jb8JjW2teSLc/TTZXnN2j3ucMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPVF5zO ccXoUe7bEaY1Q7ZJ/pIuMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQGplXlXfBOMtB/YlN3BFVSBNB92iWxVJRD8LD+OUAmmSTC34uuxz uC0YMEQo4OAJ4Flai6dDQLPQEXnSTSkqDErTqxsYhE+tzoqMvcLOMVJVdE1zvHna 5cWfF0II855a3g1Bjh5nu9dg65Y7/98/Voizzm5TzO5i8j3bQ1K3ZO8Of0tOFcYF M/jfvqia1WT4BxDvnb/h67RXpkrti0twdQei/HN+o+9u+f/TCioTIrjNBEtUb23R QLErigERjaG0qNCcZQvXVg3AUbATvd0QYoI1lpQ375OSYQ2kZ/PdTbF9Jjg2MO03 jQ7UBelOec77ewDnzeRe/VfRh1n7la8w -----END CERTIFICATE-----Generated at Wed Nov 5 13:38:11 2025 by rpki-client