$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: BqPBk2xH55PxXFwebNfF7bmL+hXt39e+WtjUGd7gakA= Subject key identifier: 68:17:66:B3:C2:49:D7:7C:0E:C7:AD:77:55:9D:31:94:27:25:79:E4 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: D7 Signing time: Wed 05 Nov 2025 05:47:06 +0000 Manifest this update: Wed 05 Nov 2025 05:47:06 +0000 Manifest next update: Wed 12 Nov 2025 05:47:06 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: 7rqX2sibo5LLw7VUjtnuNkN4vWU5oTcdJigEL9inNHw=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: qE9tjMsEAm5+y32itfsH2PJPM2TbnYvfRnIFB/pK9/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Nov 5 05:47:06 2025 GMT Not After : Nov 12 05:47:06 2025 GMT Subject: CN=690ae4da-7ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:69:ca:8f:dd:d8:64:d2:d9:e6:83:87:53: bc:56:72:c4:11:f3:ed:98:b1:f7:d6:94:f9:a9:3a: c6:1b:c9:42:67:6c:09:ce:83:13:51:45:76:4b:b6: cb:7f:a0:c0:03:69:b8:00:3c:6c:f1:ae:70:7e:39: 81:70:eb:30:2b:e1:88:04:3e:0c:3e:25:a2:1a:21: fe:51:7b:b2:a6:31:57:44:28:c9:75:80:b5:ba:75: 75:ff:bd:71:17:09:30:99:6b:51:41:fe:58:43:43: 00:de:b8:68:33:91:22:30:74:5a:c8:c6:33:bb:a7: b1:14:f5:dc:42:0c:77:17:3b:f4:ca:79:64:77:97: 04:8a:26:3a:c1:d0:80:6a:b7:08:70:a0:f0:0c:85: d7:01:e9:22:06:9a:77:32:35:76:c8:36:d5:6c:2b: 67:4c:85:fe:47:a9:a2:f4:d1:d0:96:a8:b6:ed:3b: 01:bc:2e:62:6b:27:38:d1:bf:fc:e2:cc:48:98:4a: 89:9a:19:bd:50:dc:12:05:81:ff:6a:30:05:28:d2: 91:e6:d1:0e:8b:cd:9a:d5:ef:6d:b5:b5:bd:93:41: 16:10:01:d6:fe:73:ab:c3:7d:bb:c8:32:ab:16:89: 93:81:06:02:a5:a9:dc:b9:00:5c:57:14:d2:d1:76: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:66:B3:C2:49:D7:7C:0E:C7:AD:77:55:9D:31:94:27:25:79:E4 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0a:77:4b:f0:18:6b:c1:61:d4:fd:bb:c6:7b:07:11:78:06: 96:c0:96:bb:3d:ae:3f:ce:bb:51:04:b6:4a:2f:c2:a0:4c:ff: ec:bc:58:d2:76:64:23:87:be:65:cd:72:74:85:6b:a9:c7:24: 80:d2:10:8d:f6:dc:f6:da:32:31:fd:b1:4b:f8:3f:7c:1d:fb: 7f:3a:96:26:ec:28:eb:69:ae:27:05:9a:6d:0f:8a:4c:df:76: d5:54:3d:0b:69:9d:46:e2:2c:c9:0c:80:29:8b:f9:4a:b2:ad: 66:e3:3e:8a:be:c5:f4:c2:2e:d0:0b:8b:cc:3c:9b:52:bc:45: 03:95:6c:20:bf:54:57:1c:6f:b7:ef:76:b3:39:c6:2c:26:8e: 5b:88:53:67:4e:77:77:e3:5a:95:2f:71:9a:5c:25:f2:f8:4e: 26:cf:fd:d9:99:64:cb:16:89:2c:71:65:37:c0:5e:de:5d:f9: 1b:a6:3f:5b:6e:ed:ec:b0:1b:0d:53:07:96:e8:67:b2:2c:1f: 52:8a:bb:1e:35:7b:07:df:92:8a:89:40:3c:7f:ac:50:89:04: 92:4e:02:6a:76:70:54:36:72:a8:6d:e9:c9:a5:d2:6c:f9:45: 4f:47:c9:4f:91:32:9c:88:f1:f6:17:09:9f:bb:f9:44:85:2d: 28:76:b4:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjUxMTA1MDU0NzA2WhcNMjUxMTEyMDU0NzA2WjAYMRYwFAYD VQQDEw02OTBhZTRkYS03YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17Zpyo/d2GTS2eaDh1O8VnLEEfPtmLH31pT5qTrGG8lCZ2wJzoMTUUV2S7bL f6DAA2m4ADxs8a5wfjmBcOswK+GIBD4MPiWiGiH+UXuypjFXRCjJdYC1unV1/71x FwkwmWtRQf5YQ0MA3rhoM5EiMHRayMYzu6exFPXcQgx3Fzv0ynlkd5cEiiY6wdCA arcIcKDwDIXXAekiBpp3MjV2yDbVbCtnTIX+R6mi9NHQlqi27TsBvC5iayc40b/8 4sxImEqJmhm9UNwSBYH/ajAFKNKR5tEOi82a1e9ttbW9k0EWEAHW/nOrw327yDKr FomTgQYCpancuQBcVxTS0XYwrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgXZrPC Sdd8Dsetd1WdMZQnJXnkMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPCndL8BhrwWHU/bvGewcReAaWwJa7Pa4/zrtRBLZKL8KgTP/svFjS dmQjh75lzXJ0hWupxySA0hCN9tz22jIx/bFL+D98Hft/OpYm7Cjraa4nBZptD4pM 33bVVD0LaZ1G4izJDIApi/lKsq1m4z6KvsX0wi7QC4vMPJtSvEUDlWwgv1RXHG+3 73azOcYsJo5biFNnTnd341qVL3GaXCXy+E4mz/3ZmWTLFokscWU3wF7eXfkbpj9b bu3ssBsNUweW6GeyLB9SirseNXsH35KKiUA8f6xQiQSSTgJqdnBUNnKobenJpdJs +UVPR8lPkTKciPH2Fwmfu/lEhS0odrTr -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:32 2025 by rpki-client