$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: /usynN5d5BDaMpqzktRwmk9/F+uNKLsYpyfmAGGJe80= Subject key identifier: 5C:F5:84:83:CF:21:E3:0A:AE:3C:E4:95:BF:EE:76:FB:D4:92:CC:FA Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 0206 Signing time: Mon 03 Nov 2025 02:20:51 +0000 Manifest this update: Mon 03 Nov 2025 02:20:51 +0000 Manifest next update: Mon 10 Nov 2025 02:20:51 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: PzA6Hk+P2/tyHqeYI85le0WEaYt3eK5YOI3EySD6euE=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Nov 3 02:20:51 2025 GMT Not After : Nov 10 02:20:51 2025 GMT Subject: CN=69081183-7b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:7b:22:db:db:c2:d7:37:9d:45:53:bd:7c: 7f:4c:77:49:90:31:f0:94:ee:ff:8b:be:db:fa:68: 89:43:5a:6c:c8:40:6d:13:06:5e:cf:4a:62:57:6b: 19:0b:a7:7c:06:e8:d7:e0:66:a0:81:4d:2d:89:05: 7c:a3:2b:3f:21:7f:13:f8:b7:60:a7:db:d1:9c:70: 03:fa:11:b9:90:db:95:f5:64:00:99:d1:39:c0:65: a4:94:10:8e:f2:0c:77:ee:56:5d:3a:46:f8:7c:98: 55:5b:c3:b5:95:bd:fa:30:57:8a:70:78:96:94:a9: 11:69:7a:70:34:bb:14:2f:cc:01:2d:a0:72:3d:fb: 30:92:71:27:5e:6a:ad:4f:6c:23:17:fc:68:64:2d: 1b:8d:23:d7:10:d5:41:70:5f:58:7c:4a:5a:0d:02: 0a:8b:fe:13:7c:02:f1:a9:48:c8:1f:70:79:58:9d: 94:b4:fa:64:93:5b:60:ae:ca:95:a4:2f:ec:aa:28: b4:80:47:d7:48:5e:4c:0d:37:97:e1:66:22:1a:fc: 04:45:d7:86:6a:ec:a5:23:1e:22:8a:3d:96:b2:d7: 6f:1f:12:5e:f4:2b:77:c1:3e:ff:11:1e:b3:18:ed: 0c:9a:9e:2e:0d:44:17:d4:07:26:3c:8a:d2:ef:c4: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F5:84:83:CF:21:E3:0A:AE:3C:E4:95:BF:EE:76:FB:D4:92:CC:FA X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:96:8b:7e:79:78:cf:b1:07:9a:71:f8:f8:b6:63:1b:09:03: 18:e0:46:2c:66:d7:43:8b:0a:74:01:fc:14:d7:e7:fb:1a:e2: e3:32:a3:0d:de:13:18:5b:22:e5:6e:fa:60:de:9e:c1:47:1a: ae:94:30:e1:1f:0e:51:27:08:64:59:f5:4e:d1:65:71:16:4d: 9c:06:e5:1b:7e:6f:42:37:51:72:b3:cf:71:3e:71:41:ee:c3: 9d:d6:8b:7d:0f:91:78:0d:6d:28:ad:8e:48:61:25:b4:0c:f2: 09:03:39:55:0c:52:96:fc:9a:24:72:0f:4b:88:a1:13:39:73: 6a:46:ec:b1:3a:77:01:34:67:93:14:bb:f1:15:07:d1:50:29: 21:c5:44:81:d9:67:e6:8f:b0:ef:d0:d2:01:3b:94:e0:fc:e3: ea:5d:44:f1:6c:d7:3a:0f:a6:bc:51:9b:b7:f9:10:48:35:ba: 3a:0c:58:18:29:22:69:1a:b5:c6:dd:1d:23:c5:7c:66:aa:ea: 55:74:6d:d1:43:09:a1:bb:99:fb:55:20:0a:55:ac:c4:72:37: c2:2c:ed:3a:31:21:5b:a3:d0:a3:b6:54:5f:dd:e5:bb:e7:db: 89:b4:4a:a2:4e:55:58:62:63:e5:6b:16:f8:88:12:1c:af:a8: 9f:db:5f:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjUxMTAzMDIyMDUxWhcNMjUxMTEwMDIyMDUxWjAYMRYwFAYD VQQDEw02OTA4MTE4My03YjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGV7Itvbwtc3nUVTvXx/THdJkDHwlO7/i77b+miJQ1psyEBtEwZez0piV2sZ C6d8BujX4GaggU0tiQV8oys/IX8T+Ldgp9vRnHAD+hG5kNuV9WQAmdE5wGWklBCO 8gx37lZdOkb4fJhVW8O1lb36MFeKcHiWlKkRaXpwNLsUL8wBLaByPfswknEnXmqt T2wjF/xoZC0bjSPXENVBcF9YfEpaDQIKi/4TfALxqUjIH3B5WJ2UtPpkk1tgrsqV pC/sqii0gEfXSF5MDTeX4WYiGvwERdeGauylIx4iij2WstdvHxJe9Ct3wT7/ER6z GO0Mmp4uDUQX1AcmPIrS78TVlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz1hIPP IeMKrjzklb/udvvUksz6MB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrlot+eXjPsQeacfj4tmMbCQMY4EYsZtdDiwp0AfwU1+f7GuLjMqMN 3hMYWyLlbvpg3p7BRxqulDDhHw5RJwhkWfVO0WVxFk2cBuUbfm9CN1Fys89xPnFB 7sOd1ot9D5F4DW0orY5IYSW0DPIJAzlVDFKW/Jokcg9LiKETOXNqRuyxOncBNGeT FLvxFQfRUCkhxUSB2Wfmj7Dv0NIBO5Tg/OPqXUTxbNc6D6a8UZu3+RBINbo6DFgY KSJpGrXG3R0jxXxmqupVdG3RQwmhu5n7VSAKVazEcjfCLO06MSFbo9CjtlRf3eW7 59uJtEqiTlVYYmPlaxb4iBIcr6if21+m -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:22 2025 by rpki-client