$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: uWjO2ACiUuHkUmQ8bguUOt/WtBmZJetDwYtQJddFNWw= Subject key identifier: 28:10:AE:4F:1C:CD:ED:24:CD:70:32:CB:57:88:0C:C5:EA:C0:1E:3D Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A34 Signing time: Tue 04 Nov 2025 19:51:36 +0000 Manifest this update: Tue 04 Nov 2025 19:51:36 +0000 Manifest next update: Tue 11 Nov 2025 19:51:36 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: /n+04h5KYeYJdb8CDKpXGDPN6eQZUw/BYYd8eKIkM+A=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Nov 4 19:51:36 2025 GMT Not After : Nov 11 19:51:36 2025 GMT Subject: CN=690a5948-e279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:3a:52:a2:12:83:d3:21:28:2f:dd:27:c8: ae:62:d9:84:0e:35:89:d4:da:15:dc:5c:b5:18:77: d4:5b:a4:82:45:50:d5:65:97:84:77:82:f7:bb:b0: e9:57:26:55:9f:f9:ff:64:0f:41:11:2c:1a:be:20: 04:72:2f:6e:d1:aa:a1:e0:22:07:30:07:e6:ed:6a: 09:8c:b5:25:86:a0:80:5c:fc:7e:c5:f5:67:f5:13: bb:8d:31:b6:3f:4e:18:f1:b9:62:c6:1b:07:68:47: 71:49:c5:2b:f4:63:6b:a4:92:ad:5c:a6:7b:b9:46: 95:87:33:47:d1:a7:e8:ca:64:cb:32:6f:45:21:67: 4b:a4:8e:a6:45:99:c4:fb:92:42:5b:15:37:d1:82: 9e:03:30:cb:c0:c8:b3:21:d7:5e:3a:d6:2e:cf:22: ef:62:fd:2b:0a:73:52:66:a4:05:07:a5:fe:58:23: 14:16:dd:d7:55:81:2b:88:be:f8:11:6a:88:7f:f2: ab:15:46:e4:32:c8:a2:58:76:d3:89:e3:db:00:64: 47:c2:cc:a6:83:70:99:58:29:a7:da:18:8d:81:cb: 0a:65:d0:a2:f5:87:64:02:0a:73:ea:a6:86:71:63: 58:b5:8a:16:9e:b1:d1:32:86:73:5b:f2:da:12:84: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:AE:4F:1C:CD:ED:24:CD:70:32:CB:57:88:0C:C5:EA:C0:1E:3D X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d0:f2:ac:a2:96:3a:64:f4:03:76:6f:0a:81:f6:f7:ad:c0: 92:92:d3:b1:fb:a2:ab:59:dd:25:12:4c:5e:bb:eb:29:f8:66: 53:8f:d2:fc:12:e2:27:81:95:9e:f8:4e:f9:8d:41:4d:29:41: 4b:8d:27:2a:5a:da:24:73:a4:8c:80:b2:52:cd:63:a2:e4:7a: d2:a8:b4:b1:b8:7a:e8:7a:9d:59:87:92:bc:91:66:05:8b:9e: d6:a1:18:4b:7a:1d:09:f4:15:59:49:51:5a:50:01:b8:e8:5f: bf:72:ca:5b:c5:f8:ac:95:f8:cb:56:4d:a4:cb:5c:75:10:c1: 3d:56:12:44:e3:09:72:78:b0:12:dd:19:d0:81:a2:be:ec:e9: 97:69:ee:87:a1:dc:c5:b9:10:88:7a:87:ed:98:63:48:12:a9: 86:1d:fb:43:0f:6b:fb:76:cc:53:fa:6a:2f:c9:df:0b:fe:6c: c5:b9:76:15:6e:76:67:87:06:44:4e:a4:a3:ba:82:59:ac:f0: 90:dd:b2:83:5c:32:9b:ab:ea:40:84:39:9d:f7:9f:75:7a:0a: 3f:24:5d:a9:11:fe:29:2a:4e:42:af:8c:cb:51:30:22:91:19: 31:e5:87:c3:85:9e:35:0b:b6:f4:da:f6:0c:9e:17:9b:cb:ab: 86:58:a6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUxMTA0MTk1MTM2WhcNMjUxMTExMTk1MTM2WjAYMRYwFAYD VQQDEw02OTBhNTk0OC1lMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLY6UqISg9MhKC/dJ8iuYtmEDjWJ1NoV3Fy1GHfUW6SCRVDVZZeEd4L3u7Dp VyZVn/n/ZA9BESwaviAEci9u0aqh4CIHMAfm7WoJjLUlhqCAXPx+xfVn9RO7jTG2 P04Y8blixhsHaEdxScUr9GNrpJKtXKZ7uUaVhzNH0afoymTLMm9FIWdLpI6mRZnE +5JCWxU30YKeAzDLwMizIddeOtYuzyLvYv0rCnNSZqQFB6X+WCMUFt3XVYEriL74 EWqIf/KrFUbkMsiiWHbTiePbAGRHwsymg3CZWCmn2hiNgcsKZdCi9YdkAgpz6qaG cWNYtYoWnrHRMoZzW/LaEoRFbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgQrk8c ze0kzXAyy1eIDMXqwB49MB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB90PKsopY6ZPQDdm8Kgfb3rcCSktOx+6KrWd0lEkxeu+sp+GZTj9L8 EuIngZWe+E75jUFNKUFLjScqWtokc6SMgLJSzWOi5HrSqLSxuHroep1Zh5K8kWYF i57WoRhLeh0J9BVZSVFaUAG46F+/cspbxfislfjLVk2ky1x1EME9VhJE4wlyeLAS 3RnQgaK+7OmXae6HodzFuRCIeoftmGNIEqmGHftDD2v7dsxT+movyd8L/mzFuXYV bnZnhwZETqSjuoJZrPCQ3bKDXDKbq+pAhDmd9591ego/JF2pEf4pKk5Cr4zLUTAi kRkx5YfDhZ41C7b02vYMnheby6uGWKZL -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:51 2025 by rpki-client