$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: QIggyu0LIQu/an8ckmi/u3VV3QV75+4s8dIaDW8T7HM= Subject key identifier: 8B:8E:07:B9:AE:0B:CA:2A:55:6D:B0:14:AF:26:2E:92:16:50:70:50 Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0B33 Signing time: Sun 02 Nov 2025 19:14:46 +0000 Manifest this update: Sun 02 Nov 2025 19:14:46 +0000 Manifest next update: Sun 09 Nov 2025 19:14:46 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: 1iFPk3UWNQ4ED4JV5wAAIN20a4G+9bvhKAX3pHnHUoM=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: y5jVPDMadEy/JM6FxqloNmeP9XdJ1KdXIhF/JvMZygo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC, serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: Nov 2 19:14:46 2025 GMT Not After : Nov 9 19:14:46 2025 GMT Subject: CN=6907ada6-c0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:30:b5:16:15:86:91:b9:98:a5:27:cf:6e: a5:fb:49:85:85:3a:08:18:4a:d3:5f:75:e9:62:2c: 53:39:19:4b:e3:2a:ed:49:0d:92:cf:d1:3a:96:0c: df:ff:51:65:65:a7:d0:65:84:17:e1:d7:35:9b:4e: a2:78:d0:c3:b3:4f:bb:0d:35:89:35:d0:1f:76:ab: 02:93:31:9c:f7:c0:b8:28:28:50:b1:dd:3a:37:a9: 3f:fc:18:04:a9:2b:d4:aa:cf:d1:f4:78:27:62:5a: 42:02:ff:dc:b4:ca:b4:d8:bb:bd:f8:82:df:ac:75: 18:9b:35:55:d2:cf:93:97:d3:ef:ab:48:1c:0f:1b: d8:c6:33:1e:9c:74:f4:a6:ef:cc:76:ae:f8:15:a9: 44:89:4b:7b:a9:59:52:d3:f0:f0:bf:f7:32:aa:31: 54:6f:14:1f:f5:78:a9:1e:fc:fe:b8:ee:b1:5f:da: 63:43:6d:db:53:be:da:a0:f6:c7:52:a9:83:95:88: 67:ac:eb:05:fc:a2:29:5f:3a:38:6d:ae:b1:e3:a7: cc:38:c8:97:b0:c9:55:a2:66:9c:f2:67:05:32:ba: fe:48:67:fc:7c:30:05:be:12:79:5f:27:1d:9c:4c: 5f:ac:26:17:ee:9c:65:c6:e2:a5:66:88:da:15:93: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:07:B9:AE:0B:CA:2A:55:6D:B0:14:AF:26:2E:92:16:50:70:50 X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:72:e0:c8:5c:63:f8:47:15:a3:bd:af:cf:79:78:63:e5:93: cd:20:66:9d:5f:11:a3:b4:c6:46:a7:59:6a:75:17:e5:5e:df: 3d:ce:c7:e8:2f:12:d4:7f:68:33:72:bc:a4:82:38:4b:ce:6a: 12:fc:09:9b:9f:7f:29:1f:da:e0:5c:7a:b5:c0:f4:c2:bb:f8: 3e:af:4f:38:91:cf:38:60:90:d5:09:3b:93:e6:c1:7c:65:c2: 28:55:ae:c0:de:e7:4b:62:19:d7:21:1e:c9:01:c3:bc:58:d3: af:ee:53:14:5f:f7:47:3e:b1:ec:41:8d:a7:08:79:a8:9c:5d: 70:9f:25:df:5b:39:45:0e:5e:35:a1:50:4c:b1:49:17:39:8e: cb:ca:07:cb:25:73:7d:c9:f0:cf:8d:e9:26:19:2a:f4:dd:20: 82:21:a9:d4:5d:02:f2:7d:b7:aa:73:08:eb:d3:f2:d1:c2:2f: 5a:5a:87:50:da:e2:fa:07:7d:eb:b0:1e:fe:f5:37:c8:d7:60: 98:75:15:c3:9e:4f:a3:78:fd:56:dc:5a:fd:2a:9a:95:bc:70: d3:d3:92:4d:8a:37:e8:a7:d2:87:66:59:eb:62:f4:bd:bf:6d: df:45:6e:10:35:7f:6e:12:80:e6:38:de:7e:e4:1b:29:07:4f: 5a:a4:bf:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjUxMTAyMTkxNDQ2WhcNMjUxMTA5MTkxNDQ2WjAYMRYwFAYD VQQDEw02OTA3YWRhNi1jMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KowtRYVhpG5mKUnz26l+0mFhToIGErTX3XpYixTORlL4yrtSQ2Sz9E6lgzf /1FlZafQZYQX4dc1m06ieNDDs0+7DTWJNdAfdqsCkzGc98C4KChQsd06N6k//BgE qSvUqs/R9HgnYlpCAv/ctMq02Lu9+ILfrHUYmzVV0s+Tl9Pvq0gcDxvYxjMenHT0 pu/Mdq74FalEiUt7qVlS0/Dwv/cyqjFUbxQf9XipHvz+uO6xX9pjQ23bU77aoPbH UqmDlYhnrOsF/KIpXzo4ba6x46fMOMiXsMlVomac8mcFMrr+SGf8fDAFvhJ5Xycd nExfrCYX7pxlxuKlZojaFZNqeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuOB7mu C8oqVW2wFK8mLpIWUHBQMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzcuDIXGP4RxWjva/PeXhj5ZPNIGadXxGjtMZGp1lqdRflXt89zsfo LxLUf2gzcrykgjhLzmoS/Ambn38pH9rgXHq1wPTCu/g+r084kc84YJDVCTuT5sF8 ZcIoVa7A3udLYhnXIR7JAcO8WNOv7lMUX/dHPrHsQY2nCHmonF1wnyXfWzlFDl41 oVBMsUkXOY7LygfLJXN9yfDPjekmGSr03SCCIanUXQLyfbeqcwjr0/LRwi9aWodQ 2uL6B33rsB7+9TfI12CYdRXDnk+jeP1W3Fr9KpqVvHDT05JNijfop9KHZlnrYvS9 v23fRW4QNX9uEoDmON5+5BspB09apL/M -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:46 2025 by rpki-client