$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: MoKZc6W+980ZdXACkS+HnagSRy33keEkt6GTfdON0A4= Subject key identifier: 86:F8:F3:51:6E:B8:E5:F0:9F:09:57:9D:40:78:9C:F7:E6:B9:8A:37 Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 07D0 Signing time: Sun 02 Nov 2025 21:12:32 +0000 Manifest this update: Sun 02 Nov 2025 21:12:31 +0000 Manifest next update: Sun 09 Nov 2025 21:12:31 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: ggC/BRO3ILGCt4R0nMMtDdCG0owyx2tPOKZQT+VMYX0=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: SqNXqLNgkpLICxW/LBSYL1V/21ZqqGqKzf6yPi47f5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Nov 2 21:12:31 2025 GMT Not After : Nov 9 21:12:31 2025 GMT Subject: CN=6907c940-4548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:24:49:99:de:ec:16:f2:8b:37:15:8c:01: 8e:46:ae:99:79:69:11:fd:e8:dd:99:e1:dd:fb:5e: c6:5c:68:c4:c8:96:bc:b1:5a:1a:12:77:9c:17:e0: d9:ba:b8:bf:19:bc:f0:83:85:38:2b:15:74:20:be: 2e:96:5c:9b:7e:e0:2d:af:50:38:6f:be:d5:18:ae: 02:ed:57:cd:7a:37:c4:96:8b:92:e0:7b:ed:39:c8: f1:74:ce:46:c1:c3:67:46:44:75:8f:47:a9:c8:3e: c9:93:c7:46:25:0d:7a:48:b0:c5:70:3c:d2:79:64: 73:f4:26:98:0d:41:f1:bb:48:76:27:ff:3f:fe:48: e1:8d:a8:3a:9b:b8:5a:70:67:f3:85:6f:2f:e5:4c: fe:64:48:11:ea:35:79:b8:03:f8:f5:1e:aa:ec:7c: 18:f6:ad:60:db:d2:6a:df:b2:bf:8e:a7:28:f3:d3: 1c:3e:1b:39:32:af:87:08:07:f1:32:bd:38:58:03: aa:77:b7:17:e2:0a:ca:47:59:d3:a6:8c:ef:19:ca: 60:c3:c8:1a:34:57:f5:8e:94:68:fc:85:53:41:45: 14:fe:06:a6:08:e1:91:69:4a:73:ec:7f:2d:c5:86: 1c:14:65:44:5e:b7:99:17:cf:ec:bd:6f:2d:f6:08: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F8:F3:51:6E:B8:E5:F0:9F:09:57:9D:40:78:9C:F7:E6:B9:8A:37 X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:be:60:a5:45:9f:9c:5b:40:ae:2d:43:24:1b:c4:c8:e5:4e: 11:52:3a:93:5e:6a:c4:59:13:90:d5:71:10:01:b7:db:af:91: 58:be:c3:6c:83:b5:5a:c8:20:ba:3a:93:4f:71:ee:ec:f6:53: 29:73:9e:27:8e:83:34:7e:74:78:ce:3c:b6:18:ec:6c:b8:05: ea:5c:ad:1d:c2:ec:22:b8:e9:bd:5c:a5:17:04:7c:8a:41:84: 70:f3:b4:66:f7:7c:e8:6b:fe:59:d9:ec:40:48:d9:e9:2d:93: db:ee:57:71:79:9a:1f:da:1e:52:a7:2b:21:41:4d:90:c6:38: f7:4d:01:00:e0:d6:bc:d9:2c:6f:bc:d2:dc:2f:9e:54:15:17: 99:dd:96:c5:a1:ad:8c:e1:4f:36:50:45:41:ef:e2:90:54:95: db:ca:71:f0:26:1e:a2:83:32:f0:a5:f4:62:be:27:43:c6:66: 56:1a:d0:1f:29:f3:f3:0d:35:6a:10:b4:d7:6e:e2:78:04:11: 05:c4:da:ee:57:b5:43:00:95:da:fc:e8:3b:7d:87:d1:c9:b9: f2:ac:d0:e2:e9:4f:b5:f5:b3:0d:24:df:9a:a0:d1:ab:d0:1f: 18:35:81:52:99:63:35:ae:5c:51:cb:04:40:5c:38:45:93:7e: 18:85:b8:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjUxMTAyMjExMjMxWhcNMjUxMTA5MjExMjMxWjAYMRYwFAYD VQQDEw02OTA3Yzk0MC00NTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp60kSZne7BbyizcVjAGORq6ZeWkR/ejdmeHd+17GXGjEyJa8sVoaEnecF+DZ uri/Gbzwg4U4KxV0IL4ullybfuAtr1A4b77VGK4C7VfNejfElouS4HvtOcjxdM5G wcNnRkR1j0epyD7Jk8dGJQ16SLDFcDzSeWRz9CaYDUHxu0h2J/8//kjhjag6m7ha cGfzhW8v5Uz+ZEgR6jV5uAP49R6q7HwY9q1g29Jq37K/jqco89McPhs5Mq+HCAfx Mr04WAOqd7cX4grKR1nTpozvGcpgw8gaNFf1jpRo/IVTQUUU/gamCOGRaUpz7H8t xYYcFGVEXreZF8/svW8t9gj14QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb481Fu uOXwnwlXnUB4nPfmuYo3MB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQvmClRZ+cW0CuLUMkG8TI5U4RUjqTXmrEWROQ1XEQAbfbr5FYvsNs g7VayCC6OpNPce7s9lMpc54njoM0fnR4zjy2GOxsuAXqXK0dwuwiuOm9XKUXBHyK QYRw87Rm93zoa/5Z2exASNnpLZPb7ldxeZof2h5SpyshQU2Qxjj3TQEA4Na82Sxv vNLcL55UFReZ3ZbFoa2M4U82UEVB7+KQVJXbynHwJh6igzLwpfRividDxmZWGtAf KfPzDTVqELTXbuJ4BBEFxNruV7VDAJXa/Og7fYfRybnyrNDi6U+19bMNJN+aoNGr 0B8YNYFSmWM1rlxRywRAXDhFk34Yhbg3 -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:51 2025 by rpki-client