$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: Ub8i+m9/2aZRgZkgp3lRugPkeFUwcRbB0eJ7vUteHj4= Subject key identifier: 5B:C9:4E:07:95:69:7F:9C:66:F6:C5:41:CC:23:9F:53:44:33:8D:43 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0926 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 08F8 Signing time: Tue 04 Nov 2025 20:28:00 +0000 Manifest this update: Tue 04 Nov 2025 20:28:00 +0000 Manifest next update: Tue 11 Nov 2025 20:28:00 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: CsjsVePAArWSMT1vuQZnkqYTQzc7Jvf91X1Ci4Ba+TQ=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: FNdfZCcbxe3V2OAQFLZGqdKXBJ6o0UkfGqCv1XFBIe4=) 3: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: 3PD/x5elGPt/NTqjyFL6QFT8slsuLxNOAQu2SL4y1Fo=) 4: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: xykraSV8kLGomChcl9m8aUsM7WTxk2kDX+8/BfVDf4g=) 5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: emHp7Xzsh3MvD05QY3vvsc/JIauIxxqNW7MxPaZ5E+I=) 6: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: Dx71OVIwLra0qJzFPwaosr95WYYv+7Bg/7InXVNYyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Nov 4 20:28:00 2025 GMT Not After : Nov 11 20:28:00 2025 GMT Subject: CN=690a61d0-17cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1e:1d:e9:d3:a5:f0:d4:1a:2f:7c:f1:7f:61: d0:91:fb:9b:0a:71:d0:24:b3:f3:0b:44:6d:19:18: c7:93:29:05:2a:dc:2b:2f:30:72:e9:dd:50:b1:b9: 20:98:d6:34:58:27:21:f3:3d:78:82:b8:12:f2:f1: 44:f7:3b:91:af:9f:71:43:8d:57:c9:35:fc:0e:ee: 8c:06:9e:64:ea:ee:aa:29:37:e1:cd:c0:05:41:0a: 3f:9f:88:15:82:a3:c0:e8:3f:3b:d2:d2:42:59:89: 80:22:fd:41:a6:42:08:c7:8a:15:06:e7:d4:5c:a9: 3d:49:21:67:69:f3:e5:8a:55:8b:de:c7:bb:86:07: 09:1b:ff:cf:9e:db:82:01:37:74:76:2a:18:2d:47: f6:30:de:d0:e2:6c:7c:5b:de:e7:09:57:f4:c4:e9: 7f:a5:e7:fc:50:d1:9a:72:34:4e:91:7a:fd:c3:b4: 51:14:42:6c:52:65:ee:76:6f:50:1e:b1:24:eb:91: 0e:d7:0e:b2:66:dd:87:b4:91:72:52:e8:86:99:6a: 8c:51:33:4e:ec:ea:14:ba:93:9e:46:25:1f:30:1f: 4f:da:20:40:89:18:ed:c5:c7:bb:10:0d:c7:52:58: 46:1d:1f:c7:b4:6d:d9:8c:d5:7f:71:36:52:88:85: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C9:4E:07:95:69:7F:9C:66:F6:C5:41:CC:23:9F:53:44:33:8D:43 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:62:12:6c:24:12:a9:0a:71:c5:33:ff:fa:0f:f8:03:d5:6d: d9:77:07:86:f1:e1:dc:04:33:f6:f8:97:1d:09:3b:d4:27:1b: 8b:43:6d:43:7d:bd:53:e6:34:53:be:ba:ff:f7:b1:8d:95:f3: 4e:e5:43:36:a5:94:5e:55:11:af:d8:00:cc:7e:17:03:66:f4: f5:29:7e:40:a8:43:ac:c6:7c:58:b8:45:3c:d8:2f:d6:45:44: a1:ba:a4:15:33:ad:4a:d0:15:e9:ae:29:74:16:28:8f:21:f5: 03:3b:af:1f:9a:f7:40:d7:4c:7e:b8:d0:ec:c0:8f:05:c5:17: 0d:3b:42:1c:43:bb:e1:d0:68:6b:86:9d:dd:d6:63:30:f7:68: 45:50:a8:e7:ad:15:95:3c:75:f1:d2:ad:43:c4:fc:13:84:7a: 74:e1:11:97:fd:00:40:d9:01:4a:90:79:df:52:29:90:40:ce: 34:5f:ee:4a:29:90:d3:da:c4:24:29:c2:60:87:42:5c:83:c4: d0:fb:f5:34:ea:3e:b1:06:66:94:38:d3:b2:cf:7e:d1:b3:4e: bc:a7:10:73:b9:d5:4c:59:bd:b3:3c:1d:c5:42:35:9d:06:d8: 84:d4:99:29:0a:50:e6:ab:3a:e4:2b:1e:2f:97:6b:a6:5a:46: 7c:9c:8c:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUxMTA0MjAyODAwWhcNMjUxMTExMjAyODAwWjAYMRYwFAYD VQQDEw02OTBhNjFkMC0xN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x4d6dOl8NQaL3zxf2HQkfubCnHQJLPzC0RtGRjHkykFKtwrLzBy6d1Qsbkg mNY0WCch8z14grgS8vFE9zuRr59xQ41XyTX8Du6MBp5k6u6qKTfhzcAFQQo/n4gV gqPA6D870tJCWYmAIv1BpkIIx4oVBufUXKk9SSFnafPlilWL3se7hgcJG//PntuC ATd0dioYLUf2MN7Q4mx8W97nCVf0xOl/pef8UNGacjROkXr9w7RRFEJsUmXudm9Q HrEk65EO1w6yZt2HtJFyUuiGmWqMUTNO7OoUupOeRiUfMB9P2iBAiRjtxce7EA3H UlhGHR/HtG3ZjNV/cTZSiIU2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvJTgeV aX+cZvbFQcwjn1NEM41DMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDYhJsJBKpCnHFM//6D/gD1W3ZdweG8eHcBDP2+JcdCTvUJxuLQ21D fb1T5jRTvrr/97GNlfNO5UM2pZReVRGv2ADMfhcDZvT1KX5AqEOsxnxYuEU82C/W RUShuqQVM61K0BXpril0FiiPIfUDO68fmvdA10x+uNDswI8FxRcNO0IcQ7vh0Ghr hp3d1mMw92hFUKjnrRWVPHXx0q1DxPwThHp04RGX/QBA2QFKkHnfUimQQM40X+5K KZDT2sQkKcJgh0Jcg8TQ+/U06j6xBmaUONOyz37Rs068pxBzudVMWb2zPB3FQjWd BtiE1JkpClDmqzrkKx4vl2umWkZ8nIzK -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:31 2025 by rpki-client