$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft File: A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json) Hash identifier: NPgqo9cEipartWC2tPZOuSuiaKzBEUoXoHfIl8H32EU= Subject key identifier: CD:57:99:FB:7A:6C:92:21:CB:A3:9E:73:D0:86:8C:83:0C:4F:30:0E Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2 Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft Manifest number: 2C Signing time: Mon 03 Nov 2025 07:39:54 +0000 Manifest this update: Mon 03 Nov 2025 07:39:53 +0000 Manifest next update: Mon 10 Nov 2025 07:39:53 +0000 Files and hashes: 1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: nCj2TqvziVxW3iOM3dIpivwUEIlqq5Jlu31ch6zrl9U=) 2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: Top1RS38Q6RG/Bo0KeriCxYaYwIm8AI46xZdJa/NP8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2 Validity Not Before: Nov 3 07:39:53 2025 GMT Not After : Nov 10 07:39:53 2025 GMT Subject: CN=69085c49-cd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:e6:cd:f8:e6:6a:b9:44:ff:9b:fb:ac:b7: 98:06:7a:b1:a8:6d:6b:51:3b:a2:61:05:e5:22:3e: 83:de:c3:bc:93:70:ff:b2:90:a8:7c:99:01:cd:0d: 46:69:0e:be:f7:5c:55:3d:ba:9a:f6:11:4b:90:c0: 6f:c5:75:ef:b9:51:7f:a8:de:27:1c:99:85:be:52: f2:82:a6:d9:33:7d:40:5b:56:89:e9:46:a1:5a:ee: e8:2d:84:5c:9b:f4:ac:fe:c2:f7:e6:eb:7b:aa:fc: ca:df:5c:83:6e:7c:f0:03:d6:96:af:55:3c:b9:8b: 7c:08:b3:65:0f:b3:80:a8:ac:eb:a2:66:fe:3c:8a: 0e:93:01:2a:ee:e2:d0:19:1d:96:cf:4e:78:50:b7: 3a:09:c4:34:2d:9a:d7:05:e1:06:0a:f5:f0:ea:48: a1:0a:e3:5a:dc:57:07:d1:06:cf:cc:a4:96:00:22: 38:86:63:f3:b0:15:5b:ce:3e:bf:47:11:19:4e:8a: df:3d:bf:bd:ab:f4:2d:f5:40:8c:fc:ef:fb:82:8d: cb:b3:0b:73:6b:6d:a7:d2:73:37:5d:92:14:fb:b3: 53:00:ca:63:6e:89:d9:28:24:59:7e:92:bf:57:df: 56:64:57:6c:2b:af:e0:68:cb:79:af:15:d7:4c:f9: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:99:FB:7A:6C:92:21:CB:A3:9E:73:D0:86:8C:83:0C:4F:30:0E X509v3 Authority Key Identifier: keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c1:97:a5:43:35:ab:c1:a7:50:1c:30:1d:c6:13:83:fd:91: 75:86:0c:97:6d:af:9f:d1:83:ca:04:d8:6a:71:ad:54:b1:e1: fc:dd:ce:cb:ad:2a:95:09:cd:b1:1f:97:79:ce:46:49:12:b2: 61:7e:71:e1:ff:7a:c6:68:f1:a2:d5:93:72:32:21:d1:f2:8f: 05:60:b0:96:e5:f4:0f:5e:06:cc:82:48:ef:96:e4:0c:9a:58: 66:3a:dd:1c:cb:6f:e3:94:04:69:7a:a6:fa:52:24:94:5d:fc: 64:9b:b7:97:3f:7c:f4:4a:3d:29:d1:91:2f:cc:53:75:43:30: 89:61:49:86:a6:8b:92:e9:6c:b9:9a:9f:f4:69:cb:11:a8:a6: 32:62:23:9f:2b:93:8b:30:29:3e:e0:52:f8:c6:47:23:82:ba: 7d:41:33:22:ea:90:a8:b2:71:f1:9e:ad:29:19:f2:f9:f9:fc: 05:73:7d:d6:f8:33:79:10:d5:0b:95:f4:38:a2:ea:a8:b2:06: 7a:88:58:90:bd:5f:96:66:da:eb:b9:15:6f:5d:bc:9a:82:14: 85:f9:8e:70:66:84:c3:a0:3d:71:e1:76:97:ab:b7:ef:0b:73: 8b:ff:5f:e6:59:24:fa:9a:1c:84:46:9c:3c:4b:a7:71:02:aa: e6:6a:a5:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTAxRTExMC8GA1UEBRMoMDNEODc0RkYyRjVEMzIwOEU3RUI2MjVBNzczN0ZDRDQ0 Q0VFMkFDMjAeFw0yNTExMDMwNzM5NTNaFw0yNTExMTAwNzM5NTNaMBgxFjAUBgNV BAMTDTY5MDg1YzQ5LWNkOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp5ObN+OZquUT/m/ust5gGerGobWtRO6JhBeUiPoPew7yTcP+ykKh8mQHNDUZp Dr73XFU9upr2EUuQwG/Fde+5UX+o3iccmYW+UvKCptkzfUBbVonpRqFa7ugthFyb 9Kz+wvfm63uq/MrfXINufPAD1pavVTy5i3wIs2UPs4CorOuiZv48ig6TASru4tAZ HZbPTnhQtzoJxDQtmtcF4QYK9fDqSKEK41rcVwfRBs/MpJYAIjiGY/OwFVvOPr9H ERlOit89v72r9C31QIz87/uCjcuzC3NrbafSczddkhT7s1MAymNuidkoJFl+kr9X 31ZkV2wrr+Boy3mvFddM+XwPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzVeZ+3ps kiHLo55z0IaMgwxPMA4wHwYDVR0jBBgwFoAUA9h0/y9dMgjn62Jadzf81EzuKsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5MDFFL0RFMkQ2NEVBNzhE QTExRjBCMEZCRTIxNkM0RjlBRTAyL0E5aDBfeTlkTWdqbjYySmFkemY4MUV6dUtz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQTloMF95OWRNZ2puNjJKYWR6ZjgxRXp1S3NJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 MDFFL0RFMkQ2NEVBNzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyL0E5aDBfeTlkTWdq bjYySmFkemY4MUV6dUtzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPBl6VDNavBp1AcMB3GE4P9kXWGDJdtr5/Rg8oE2GpxrVSx4fzdzsut KpUJzbEfl3nORkkSsmF+ceH/esZo8aLVk3IyIdHyjwVgsJbl9A9eBsyCSO+W5Aya WGY63RzLb+OUBGl6pvpSJJRd/GSbt5c/fPRKPSnRkS/MU3VDMIlhSYami5LpbLma n/RpyxGopjJiI58rk4swKT7gUvjGRyOCun1BMyLqkKiycfGerSkZ8vn5/AVzfdb4 M3kQ1QuV9Dii6qiyBnqIWJC9X5Zm2uu5FW9dvJqCFIX5jnBmhMOgPXHhdpert+8L c4v/X+ZZJPqaHIRGnDxLp3ECquZqpSo= -----END CERTIFICATE-----Generated at Wed Nov 5 04:24:10 2025 by rpki-client