$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json) Hash identifier: 3VDLpUhN1RH/TG6JeuxaecyHDE3YZlUcA2tGIg1NWNs= Subject key identifier: A5:39:D4:F1:F7:BD:26:D8:3C:6A:59:A7:57:14:76:77:18:02:B7:4A Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft Manifest number: 8A Signing time: Mon 03 Nov 2025 06:34:14 +0000 Manifest this update: Mon 03 Nov 2025 06:34:14 +0000 Manifest next update: Mon 10 Nov 2025 06:34:14 +0000 Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: K8LHTTJySNttragnaJbjMiml832JncAkLrqGGGmjLbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7 Validity Not Before: Nov 3 06:34:14 2025 GMT Not After : Nov 10 06:34:14 2025 GMT Subject: CN=69084ce6-0d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:90:7e:93:4a:00:38:a5:ef:04:86:a1:9e: 9d:47:59:f5:b8:5e:ad:d0:64:7b:d3:73:b6:b4:c0: f3:51:59:83:e8:ea:71:4f:6f:0c:32:85:9c:31:4e: 50:42:8a:9c:ef:6d:7a:7d:5d:af:91:19:e0:6b:bb: 63:d1:c2:3c:d3:4a:46:06:06:ae:43:73:6c:30:51: 49:4e:53:03:be:bb:8a:04:15:4f:31:4e:0a:14:30: b8:c9:23:4e:bc:0e:a5:8a:79:61:21:40:a0:b1:95: ad:53:a2:08:1c:37:38:a7:83:26:97:98:06:b4:ec: 13:92:0a:6d:cf:97:4b:5d:da:55:8c:44:ec:83:d1: 9b:3e:83:33:e7:ee:da:e9:49:dd:7c:c3:fc:f7:d3: 76:ba:df:dc:2c:08:88:a8:41:5a:04:19:07:de:f5: db:85:d2:ee:d3:bc:a2:9e:13:98:1b:9c:37:50:2a: 82:08:af:dd:6b:0a:0f:be:96:18:6b:4a:b0:30:4e: 3e:85:eb:08:d9:ae:07:e2:5f:96:62:55:e4:29:70: e5:18:62:fa:34:ff:3e:d5:ef:d4:39:51:a8:9f:c9: 4a:13:9c:a1:c2:0e:24:ac:e6:50:b3:a0:fa:56:18: b8:32:82:0d:d3:d0:b3:a1:50:f1:20:4d:09:15:93: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:39:D4:F1:F7:BD:26:D8:3C:6A:59:A7:57:14:76:77:18:02:B7:4A X509v3 Authority Key Identifier: keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d2:75:e1:12:8c:2a:b9:8d:ca:33:5f:03:0f:9a:3d:b0:61: 26:44:66:b2:39:23:92:b3:c2:cf:2b:8d:8c:b2:f0:7c:2d:7f: 01:4c:4a:10:64:d4:e5:3e:56:88:02:82:dc:d0:e9:73:dc:39: 7b:b7:3f:47:e3:d0:43:e8:a2:2c:0d:56:10:cb:47:3d:ba:a0: 12:c9:ec:f5:d1:23:0e:c6:ab:08:41:15:15:85:01:17:85:c1: 72:3f:ee:07:f5:45:2a:9c:99:74:f4:ba:ca:c1:6f:fd:9c:7e: 8b:3f:bd:15:e9:6a:3d:03:df:e5:4e:01:1f:a5:7d:18:b8:10: 97:60:0e:66:ec:26:d0:f7:26:56:69:ca:85:bb:35:51:bb:8a: c0:0e:3b:e1:f3:45:9d:80:ae:28:6d:b3:01:95:70:95:7f:4e: ec:a2:16:5d:c3:4a:3b:a4:b1:41:87:23:1b:ed:2d:1e:3d:ec: d9:6b:87:b5:b2:77:45:4c:1f:af:38:27:35:af:6c:43:a2:c0: 91:2f:d9:d2:25:43:dc:73:ce:03:80:0f:fd:28:20:d1:69:5d: 42:c2:6b:10:c9:a0:4b:68:b4:67:fa:20:00:27:a2:84:ba:a5: 75:22:b4:2d:8c:d0:b0:e6:95:26:be:83:3f:7d:8e:fd:47:47: 56:40:02:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRBODAxMTAvBgNVBAUTKDNGRDdGNTU1RkM3RDZGQzIzNTM5QTNBNjIxRUYyRDA0 OEQ0QzdDQzcwHhcNMjUxMTAzMDYzNDE0WhcNMjUxMTEwMDYzNDE0WjAYMRYwFAYD VQQDEw02OTA4NGNlNi0wZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1faQfpNKADil7wSGoZ6dR1n1uF6t0GR703O2tMDzUVmD6OpxT28MMoWcMU5Q Qoqc7216fV2vkRnga7tj0cI800pGBgauQ3NsMFFJTlMDvruKBBVPMU4KFDC4ySNO vA6linlhIUCgsZWtU6IIHDc4p4Mml5gGtOwTkgptz5dLXdpVjETsg9GbPoMz5+7a 6UndfMP899N2ut/cLAiIqEFaBBkH3vXbhdLu07yinhOYG5w3UCqCCK/dawoPvpYY a0qwME4+hesI2a4H4l+WYlXkKXDlGGL6NP8+1e/UOVGon8lKE5yhwg4krOZQs6D6 Vhi4MoIN09CzoVDxIE0JFZNV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU51PH3 vSbYPGpZp1cUdncYArdKMB8GA1UdIwQYMBaAFD/X9VX8fW/CNTmjpiHvLQSNTHzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEE4MC8yOUVDNzNCQUU0 RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4STFPYU9tSWU4dEJJMU1m TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5ZjFWZng5YjhJMU9hT21JZTh0QkkxTWZNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEE4MC8yOUVDNzNCQUU0RUYxMUVGQjcxNEU1NkNDNEY5QUUwMi9QOWYxVmZ4OWI4 STFPYU9tSWU4dEJJMU1mTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq0nXhEowquY3KM18DD5o9sGEmRGayOSOSs8LPK42MsvB8LX8BTEoQ ZNTlPlaIAoLc0Olz3Dl7tz9H49BD6KIsDVYQy0c9uqASyez10SMOxqsIQRUVhQEX hcFyP+4H9UUqnJl09LrKwW/9nH6LP70V6Wo9A9/lTgEfpX0YuBCXYA5m7CbQ9yZW acqFuzVRu4rADjvh80WdgK4obbMBlXCVf07sohZdw0o7pLFBhyMb7S0ePezZa4e1 sndFTB+vOCc1r2xDosCRL9nSJUPcc84DgA/9KCDRaV1CwmsQyaBLaLRn+iAAJ6KE uqV1IrQtjNCw5pUmvoM/fY79R0dWQAI9 -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:14 2025 by rpki-client