$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json) Hash identifier: adYd+jErtIeQKr7vRh6dTM6/GRBIfCD4Q/CZ+Sw/Law= Subject key identifier: CC:AE:93:70:31:A3:A4:08:25:95:82:2F:FD:50:85:24:D3:DE:A1:06 Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft Manifest number: A9 Signing time: Mon 03 Nov 2025 06:17:27 +0000 Manifest this update: Mon 03 Nov 2025 06:17:26 +0000 Manifest next update: Mon 10 Nov 2025 06:17:26 +0000 Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: gzsB+sLGgDZ3aLHew0/RHRGVOexTAXWfV6SHDwnNMfY=) 2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: gL/pv5Q4H259tRW/M/fWgTAynaK4mXLMVK09D4O3Mmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Validity Not Before: Nov 3 06:17:26 2025 GMT Not After : Nov 10 06:17:26 2025 GMT Subject: CN=690848f6-cd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:81:14:1b:e3:ac:95:c0:c7:b4:ee:47:a5: bf:35:77:3c:0b:5d:b9:5d:70:01:a8:1b:a0:27:35: 17:74:48:91:b0:c9:34:90:6f:fc:43:6a:65:f3:d7: f7:2a:39:a2:c0:9e:61:6a:3a:8a:a6:61:ec:cc:30: 0a:27:86:04:a8:96:7c:9d:99:02:96:4e:49:e6:7f: 9f:e1:0c:77:b8:6f:8c:ad:85:03:a7:99:27:0b:8d: 99:93:7d:e7:9f:78:e7:bf:86:d9:88:7a:81:95:c6: 7d:13:9b:ae:4d:f2:26:90:f9:66:39:7a:8e:cb:3b: 4a:0e:91:ac:fd:2f:02:6d:c0:42:cc:9a:7c:20:a3: 66:b2:d4:12:b0:00:53:10:3c:d6:0d:82:db:2a:cc: d0:9b:4a:3d:89:1d:71:4b:77:34:8b:ab:0c:57:e4: da:2c:66:9e:4d:9c:f2:c8:ce:96:9f:12:01:9c:74: c9:92:ef:2c:26:72:c4:9a:0c:e5:80:4c:fd:fa:16: 89:b5:bd:01:52:5f:e5:4b:13:31:3e:e6:f9:44:85: 7f:69:72:77:97:57:a8:15:b3:5a:ba:67:76:aa:54: 25:48:37:66:e3:3a:37:d7:f5:5f:28:b2:68:77:9b: 44:5d:bc:d7:d5:04:c3:9a:89:d6:2d:b3:bf:ec:39: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AE:93:70:31:A3:A4:08:25:95:82:2F:FD:50:85:24:D3:DE:A1:06 X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a8:d5:1d:9f:b0:46:9c:eb:86:64:cf:96:09:c9:4e:92:6d: 7f:a8:74:0a:95:66:71:01:c4:38:b7:4b:45:1e:9e:f0:91:f6: de:e8:43:64:7b:25:dc:0e:83:27:ec:b4:15:88:32:78:14:72: d3:11:08:64:d8:d1:e0:05:b9:7f:64:d9:59:47:f4:ee:43:af: 36:c6:4c:cb:82:31:f1:20:49:51:07:11:fb:63:bf:2b:21:24: 2d:a9:e9:d1:d7:1f:84:b1:5e:e4:bd:8f:0f:4d:cc:9c:eb:1c: 99:01:f1:cb:d5:cb:6b:c6:6c:76:ec:a6:0b:c4:c1:76:0a:41: 63:db:38:20:f9:34:96:80:3f:de:86:7d:e8:26:a5:02:f8:05: df:86:36:f0:74:16:91:17:ad:20:a6:21:99:38:88:a9:5b:f2: 0a:09:2f:8b:73:3f:e2:aa:43:45:c3:a1:f3:91:ed:f3:c6:46: cc:6b:ec:8c:38:74:32:7c:79:6b:6c:14:2b:ef:a4:5b:32:ed: d4:40:b3:3e:6f:6b:74:e6:2a:60:9d:07:4c:30:90:bf:c9:ab: f6:91:bf:24:f7:37:b6:b9:d2:90:79:2d:b0:70:8f:d1:2a:9d: 54:08:d4:51:28:52:43:e5:d9:5e:b8:31:62:7d:d4:04:39:3c: 96:9f:82:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky NzBCQUNCMDcwHhcNMjUxMTAzMDYxNzI2WhcNMjUxMTEwMDYxNzI2WjAYMRYwFAYD VQQDEw02OTA4NDhmNi1jZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9SBFBvjrJXAx7TuR6W/NXc8C125XXABqBugJzUXdEiRsMk0kG/8Q2pl89f3 KjmiwJ5hajqKpmHszDAKJ4YEqJZ8nZkClk5J5n+f4Qx3uG+MrYUDp5knC42Zk33n n3jnv4bZiHqBlcZ9E5uuTfImkPlmOXqOyztKDpGs/S8CbcBCzJp8IKNmstQSsABT EDzWDYLbKszQm0o9iR1xS3c0i6sMV+TaLGaeTZzyyM6WnxIBnHTJku8sJnLEmgzl gEz9+haJtb0BUl/lSxMxPub5RIV/aXJ3l1eoFbNaumd2qlQlSDdm4zo31/VfKLJo d5tEXbzX1QTDmonWLbO/7DmHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyuk3Ax o6QIJZWCL/1QhSTT3qEGMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5 YmhlN25QMk84bWtuQzZ5d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNqNUdn7BGnOuGZM+WCclOkm1/qHQKlWZxAcQ4t0tFHp7wkfbe6ENk eyXcDoMn7LQViDJ4FHLTEQhk2NHgBbl/ZNlZR/TuQ682xkzLgjHxIElRBxH7Y78r ISQtqenR1x+EsV7kvY8PTcyc6xyZAfHL1ctrxmx27KYLxMF2CkFj2zgg+TSWgD/e hn3oJqUC+AXfhjbwdBaRF60gpiGZOIipW/IKCS+Lcz/iqkNFw6Hzke3zxkbMa+yM OHQyfHlrbBQr76RbMu3UQLM+b2t05ipgnQdMMJC/yav2kb8k9ze2udKQeS2wcI/R Kp1UCNRRKFJD5dleuDFifdQEOTyWn4JK -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:46 2025 by rpki-client