$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: mF8VcGXR8UasOZljvsdNy/IiheOFSGYs3/dNu0Do6kE= Subject key identifier: A7:69:AA:16:B2:1B:13:02:4E:9A:13:64:A0:67:D5:90:36:9D:90:11 Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0D97 Signing time: Tue 04 Nov 2025 17:59:56 +0000 Manifest this update: Tue 04 Nov 2025 17:59:56 +0000 Manifest next update: Tue 11 Nov 2025 17:59:56 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: nfojsQQNWQ2sS4Mes4XZCF7ci+VuV9MgLqhyXV1WnHw=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kfnndHzaWyTnp8z7+y1i5jZZ9EYcGBwsAArn1r5+vLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: Nov 4 17:59:56 2025 GMT Not After : Nov 11 17:59:56 2025 GMT Subject: CN=690a3f1c-1b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:c6:d3:5e:16:61:f8:e9:40:70:eb:49:ac: 88:9e:55:bf:e9:28:39:a6:b5:5d:47:14:38:ac:fc: 26:9a:05:d6:97:45:6a:27:83:17:e5:72:ed:f2:38: aa:7e:e1:b7:fe:2f:20:25:d9:ee:cc:0e:1f:26:3e: 2a:86:b9:89:26:3f:b5:37:6a:5d:55:d3:51:45:c8: ac:dc:4e:c0:27:85:34:1a:67:dd:65:65:16:42:f7: 0d:a1:e3:5e:b1:a2:2f:39:0a:8b:01:7a:60:f5:06: 0b:53:8d:72:63:70:1e:56:e8:20:c3:55:5f:ec:f2: 6e:5c:d9:08:35:5e:92:da:d2:6b:3c:cd:e0:2d:cc: 2c:8c:f2:7e:64:18:b8:55:98:28:1a:e6:11:1c:d8: d8:55:5d:c5:90:ba:25:e8:dc:ed:ac:2f:ed:d7:ed: 4c:b1:96:13:75:97:35:91:49:e2:3f:f8:96:33:b0: 14:a7:48:b5:45:e0:7d:77:89:da:2c:fd:52:50:c7: df:94:42:76:6b:f5:0a:8b:56:9a:f3:1d:21:ee:ec: c4:89:71:bd:fb:2e:30:05:4e:7e:45:89:24:29:65: 4a:af:57:a3:f9:4e:2e:cf:ad:de:c3:17:02:da:9d: 61:57:1d:75:20:56:9a:35:9e:c1:85:5d:b3:05:9c: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:AA:16:B2:1B:13:02:4E:9A:13:64:A0:67:D5:90:36:9D:90:11 X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5b:c5:07:b8:7f:ca:96:0a:2f:61:d9:af:5e:ff:bc:19:21: b0:d8:c2:1e:99:e3:37:0c:52:e7:dd:fe:6a:85:9b:49:8a:db: ab:5e:07:d6:ad:25:9c:11:4f:10:a5:82:0c:20:8a:81:b1:1a: 5b:ac:8a:8f:16:96:ea:2c:8b:80:c0:8a:a8:ab:64:5e:46:36: 37:37:7a:32:63:95:ee:3e:c9:ed:f3:3c:c6:4e:a4:f8:b2:37: bc:1e:f4:af:d9:20:70:50:af:0e:4a:fd:b5:36:18:e6:25:c5: cc:01:12:90:8a:5d:ee:c8:b5:cd:a2:2f:1a:d7:d4:8d:0e:4d: 8e:2a:17:83:51:13:22:93:c7:30:66:b8:17:9d:48:5a:69:02: 9a:6f:96:48:60:ab:f7:22:bf:18:04:55:3a:87:f6:22:96:87: d7:89:16:d5:35:b5:4f:1a:c0:17:91:80:14:58:be:a4:5f:5e: 6a:ed:80:04:ee:ed:0d:af:9f:9f:8c:92:a2:e0:34:d8:25:ef: a4:1b:2f:ed:4a:dd:0d:22:59:3e:e3:59:d7:94:ae:40:6d:28: 0f:82:43:30:6b:cc:8a:b6:67:62:31:a9:6a:71:4b:25:d4:83: d2:f4:b6:83:83:97:d2:bb:b8:48:1a:07:49:fb:36:c9:3e:4b: 04:6f:9d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjUxMTA0MTc1OTU2WhcNMjUxMTExMTc1OTU2WjAYMRYwFAYD VQQDEw02OTBhM2YxYy0xYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEDG014WYfjpQHDrSayInlW/6Sg5prVdRxQ4rPwmmgXWl0VqJ4MX5XLt8jiq fuG3/i8gJdnuzA4fJj4qhrmJJj+1N2pdVdNRRcis3E7AJ4U0GmfdZWUWQvcNoeNe saIvOQqLAXpg9QYLU41yY3AeVuggw1Vf7PJuXNkINV6S2tJrPM3gLcwsjPJ+ZBi4 VZgoGuYRHNjYVV3FkLol6NztrC/t1+1MsZYTdZc1kUniP/iWM7AUp0i1ReB9d4na LP1SUMfflEJ2a/UKi1aa8x0h7uzEiXG9+y4wBU5+RYkkKWVKr1ej+U4uz63ewxcC 2p1hVx11IFaaNZ7BhV2zBZyAUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdpqhay GxMCTpoTZKBn1ZA2nZARMB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeW8UHuH/KlgovYdmvXv+8GSGw2MIemeM3DFLn3f5qhZtJiturXgfW rSWcEU8QpYIMIIqBsRpbrIqPFpbqLIuAwIqoq2ReRjY3N3oyY5XuPsnt8zzGTqT4 sje8HvSv2SBwUK8OSv21NhjmJcXMARKQil3uyLXNoi8a19SNDk2OKheDURMik8cw ZrgXnUhaaQKab5ZIYKv3Ir8YBFU6h/YilofXiRbVNbVPGsAXkYAUWL6kX15q7YAE 7u0Nr5+fjJKi4DTYJe+kGy/tSt0NIlk+41nXlK5AbSgPgkMwa8yKtmdiMalqcUsl 1IPS9LaDg5fSu7hIGgdJ+zbJPksEb525 -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:27 2025 by rpki-client