$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: hf627XeiTK3jH0UsQQw1AjiIFhbskicZwaB5MjSZZTM= Subject key identifier: 4D:D0:3C:2C:B8:27:CE:02:69:E0:5D:1E:25:7F:51:B1:15:1B:78:B9 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 042D Signing time: Wed 05 Nov 2025 00:29:26 +0000 Manifest this update: Wed 05 Nov 2025 00:29:26 +0000 Manifest next update: Wed 12 Nov 2025 00:29:26 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: nnxyKgFiU9nMPqtrGHv6+atIAjI5K/blYdrX8bvnlzs=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: Rg7/HWvbLuN8QkYRlBgqkedDJt7Lv8j0nbDNMsIVYIo=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: IBTL0V7J1tBYqG7NDXusQxEwJubmZUah6ZmQZ+9P3Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Nov 5 00:29:26 2025 GMT Not After : Nov 12 00:29:26 2025 GMT Subject: CN=690a9a66-60ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:e3:ea:43:69:42:77:39:94:12:43:a9:a3: cd:ba:95:4d:73:3c:3a:72:20:46:de:8d:95:1e:42: dd:7e:df:f3:b8:c6:0b:67:c2:6c:cf:73:58:f3:d2: 06:87:19:37:a5:ed:4e:2c:7d:9b:87:e9:34:60:25: c0:e2:85:5b:fc:c4:ac:5a:6c:d7:77:01:06:d5:79: f1:e6:91:92:66:c1:e0:b7:96:80:1c:b0:e6:23:bb: 84:19:33:34:21:70:1b:b2:07:a8:b7:d5:39:0b:9f: a6:7c:1a:86:53:c4:4f:78:67:ce:ba:02:94:db:a8: 36:14:64:50:48:3d:a0:d7:62:ce:2b:b1:0d:37:02: fb:7f:75:9a:7f:fc:12:8f:cc:59:02:b9:d0:b1:3a: ea:ef:41:51:47:4a:84:b5:81:b0:63:e7:47:81:0c: 4a:cc:42:77:4a:97:7c:6f:57:79:3c:3c:ec:ef:e8: ac:a1:7c:de:2d:89:5b:f9:e9:d3:a8:26:41:31:65: f3:41:16:00:07:95:21:6f:57:5f:b5:d7:fa:bf:76: bc:b2:cb:b6:90:bd:59:cd:29:23:ab:4e:09:88:35: a9:86:c5:ca:60:37:c4:4f:73:c8:d3:18:20:72:f6: 50:fd:8e:b7:21:af:31:4e:69:eb:7a:a4:d2:37:3a: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:3C:2C:B8:27:CE:02:69:E0:5D:1E:25:7F:51:B1:15:1B:78:B9 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:50:54:2c:25:df:de:4e:da:a9:5c:2d:c7:c5:a5:63:42:35: af:6a:fa:7a:e9:3b:35:cd:8e:4a:c4:62:3b:4d:15:1a:33:8a: be:ef:e4:b3:e9:3e:81:d1:e9:19:36:31:44:05:f6:2d:9e:44: 1c:d0:75:4b:6f:30:40:6e:c4:27:b0:66:a4:79:b4:3c:e1:5c: 1e:6f:44:f3:ce:6e:f3:64:19:99:a6:a4:01:2c:b3:00:0d:cb: 19:6f:82:62:5a:d7:45:f4:5d:20:db:de:2f:b6:71:37:26:43: 3f:27:7c:57:b8:e0:90:69:b1:83:86:8e:18:77:e4:54:18:8e: d2:c7:0b:d1:65:5e:aa:65:86:71:46:23:3c:df:8d:0f:45:08: 98:46:b0:b3:c7:f1:2b:b7:a1:df:f0:d3:98:02:07:0b:e1:d5: 95:db:b0:48:26:34:3d:ad:0e:0f:03:7e:39:ff:d3:47:aa:59: 6f:a6:1b:63:c1:75:3c:e7:40:b4:ac:f3:2e:6e:77:51:05:07: fd:4d:7a:41:b1:9f:49:95:c4:b5:58:c5:a7:74:2a:d5:46:76: 45:79:fc:3f:dd:07:47:1b:0d:ad:02:10:1a:93:65:6c:ab:c2: ad:d5:ac:90:3a:bd:78:f5:63:7d:af:d5:78:2d:7b:bb:9a:4f: 5e:01:9a:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjUxMTA1MDAyOTI2WhcNMjUxMTEyMDAyOTI2WjAYMRYwFAYD VQQDEw02OTBhOWE2Ni02MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Tj6kNpQnc5lBJDqaPNupVNczw6ciBG3o2VHkLdft/zuMYLZ8Jsz3NY89IG hxk3pe1OLH2bh+k0YCXA4oVb/MSsWmzXdwEG1Xnx5pGSZsHgt5aAHLDmI7uEGTM0 IXAbsgeot9U5C5+mfBqGU8RPeGfOugKU26g2FGRQSD2g12LOK7ENNwL7f3Waf/wS j8xZArnQsTrq70FRR0qEtYGwY+dHgQxKzEJ3Spd8b1d5PDzs7+isoXzeLYlb+enT qCZBMWXzQRYAB5Uhb1dftdf6v3a8ssu2kL1ZzSkjq04JiDWphsXKYDfET3PI0xgg cvZQ/Y63Ia8xTmnreqTSNzrjlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3QPCy4 J84CaeBdHiV/UbEVG3i5MB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABUFQsJd/eTtqpXC3HxaVjQjWvavp66Ts1zY5KxGI7TRUaM4q+7+Sz 6T6B0ekZNjFEBfYtnkQc0HVLbzBAbsQnsGakebQ84Vweb0Tzzm7zZBmZpqQBLLMA DcsZb4JiWtdF9F0g294vtnE3JkM/J3xXuOCQabGDho4Yd+RUGI7SxwvRZV6qZYZx RiM8340PRQiYRrCzx/Ert6Hf8NOYAgcL4dWV27BIJjQ9rQ4PA345/9NHqllvphtj wXU850C0rPMubndRBQf9TXpBsZ9JlcS1WMWndCrVRnZFefw/3QdHGw2tAhAak2Vs q8Kt1ayQOr149WN9r9V4LXu7mk9eAZpO -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:00 2025 by rpki-client