$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: MJTowMOI4Qwy6Kv3cU0w/OA7VmKfF0meb/ksCVe1Kqg= Subject key identifier: D9:38:99:AE:08:A9:95:6A:D1:FE:FB:4A:A2:AF:37:16:9E:AB:8F:0E Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 01F8 Signing time: Mon 03 Nov 2025 02:25:10 +0000 Manifest this update: Mon 03 Nov 2025 02:25:09 +0000 Manifest next update: Mon 10 Nov 2025 02:25:09 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: U5zFgooxQhyZE2aWs15ySubXMh3USxtq6HqY4LzV1pM=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Nov 3 02:25:09 2025 GMT Not After : Nov 10 02:25:09 2025 GMT Subject: CN=69081286-5fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:d8:58:7e:d2:f4:42:ba:46:da:75:d9:80: 70:e9:57:e6:27:24:b4:d6:8d:62:3e:bc:c2:05:dc: 8b:9f:f5:8a:d2:5d:bb:2b:f9:78:cb:64:ea:40:eb: af:0d:52:f5:1c:64:67:a2:dd:30:bb:fa:90:be:3b: 97:90:d8:eb:71:e7:24:b9:75:9f:16:e1:ee:eb:80: dc:fd:9a:f2:c1:d1:8a:83:b8:02:b0:d3:b6:c7:93: f8:f0:be:77:b2:67:b6:18:18:a9:b0:3d:76:44:cc: c2:11:0b:85:4d:0e:cc:22:15:ba:1b:1d:3d:5c:1d: b5:ca:1a:68:07:2c:ae:3f:91:44:e9:05:a8:8a:8e: 0d:68:be:b7:1c:37:4c:c7:f1:9c:44:ea:fe:8f:ce: c4:aa:4f:d1:81:56:0f:d2:ef:54:9a:38:df:bc:64: 18:99:91:94:b8:9e:fd:bb:d4:11:99:5e:e4:bb:a0: 22:1d:c4:b7:8f:48:86:d1:b7:19:58:5d:ae:64:36: 6d:cd:9e:fd:2d:7f:62:07:bd:4e:2c:1b:c9:dc:31: dd:11:03:3a:c6:7c:a0:cc:5d:c8:26:0e:72:a2:77: d4:9a:47:a1:2c:36:c4:f0:0b:5c:4d:96:92:cf:63: a5:8c:15:4d:bb:25:28:12:ad:4b:07:59:73:46:a0: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:38:99:AE:08:A9:95:6A:D1:FE:FB:4A:A2:AF:37:16:9E:AB:8F:0E X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:e7:a0:2a:32:f5:a9:0f:55:c2:a0:4f:20:2d:fb:44:50: 1e:fb:4e:ae:59:7a:a6:ff:5a:32:f8:e1:0b:f6:3e:a7:ff:d8: ac:4e:1c:b8:dc:0c:25:1d:38:2a:b3:d2:bf:50:47:9f:1c:1f: 3d:54:7a:9a:c8:99:9f:60:ef:3b:e6:bc:45:8b:36:47:b0:bf: 5c:fd:66:8a:0d:f8:ce:4b:d2:f1:83:a4:ea:de:4c:60:88:a7: 8a:a6:29:3b:46:1c:58:59:c8:6f:84:a4:76:17:07:78:ae:3e: ac:e8:bd:c0:8f:28:fa:a4:c8:2c:f3:21:aa:3d:dc:f8:82:5a: 30:8a:2a:63:47:ac:48:8f:3d:6c:2e:56:77:43:f8:82:83:cc: 02:57:31:33:7e:d6:e7:50:9f:77:a6:01:ad:5f:54:3e:23:1c: 19:63:2c:cc:2d:02:61:f5:0f:d9:ed:73:ff:09:05:7d:6f:5e: 01:16:3e:c2:ee:34:a8:1c:4e:a0:27:eb:06:fb:a3:6e:8b:3b: 05:d5:24:87:08:db:e7:1d:d7:7d:e9:21:e1:b3:c8:38:22:9b: 62:3d:46:20:ea:85:de:2b:cb:3f:db:fe:5c:cc:52:f6:c1:32: 74:d3:e3:a9:98:78:72:05:e9:b1:1c:2d:0f:49:93:ee:ec:88: b1:33:6d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUxMTAzMDIyNTA5WhcNMjUxMTEwMDIyNTA5WjAYMRYwFAYD VQQDEw02OTA4MTI4Ni01ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hbYWH7S9EK6Rtp12YBw6VfmJyS01o1iPrzCBdyLn/WK0l27K/l4y2TqQOuv DVL1HGRnot0wu/qQvjuXkNjrceckuXWfFuHu64Dc/ZrywdGKg7gCsNO2x5P48L53 sme2GBipsD12RMzCEQuFTQ7MIhW6Gx09XB21yhpoByyuP5FE6QWoio4NaL63HDdM x/GcROr+j87Eqk/RgVYP0u9UmjjfvGQYmZGUuJ79u9QRmV7ku6AiHcS3j0iG0bcZ WF2uZDZtzZ79LX9iB71OLBvJ3DHdEQM6xnygzF3IJg5yonfUmkehLDbE8AtcTZaS z2OljBVNuyUoEq1LB1lzRqBMPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk4ma4I qZVq0f77SqKvNxaeq48OMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH8+egKjL1qQ9VwqBPIC37RFAe+06uWXqm/1oy+OEL9j6n/9isThy4 3AwlHTgqs9K/UEefHB89VHqayJmfYO875rxFizZHsL9c/WaKDfjOS9Lxg6Tq3kxg iKeKpik7RhxYWchvhKR2Fwd4rj6s6L3Ajyj6pMgs8yGqPdz4glowiipjR6xIjz1s LlZ3Q/iCg8wCVzEzftbnUJ93pgGtX1Q+IxwZYyzMLQJh9Q/Z7XP/CQV9b14BFj7C 7jSoHE6gJ+sG+6NuizsF1SSHCNvnHdd96SHhs8g4IptiPUYg6oXeK8s/2/5czFL2 wTJ00+OpmHhyBemxHC0PSZPu7IixM22s -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:17 2025 by rpki-client