$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: p4vFYWngtdzm9KyD0uT3R9KWLxRUZCDckuCEtMSIzXc= Subject key identifier: FD:65:C5:BB:BF:79:0E:C9:24:68:98:DA:D6:DB:55:13:47:EF:23:7F Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 03AF Signing time: Wed 05 Nov 2025 00:47:23 +0000 Manifest this update: Wed 05 Nov 2025 00:47:23 +0000 Manifest next update: Wed 12 Nov 2025 00:47:23 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: R9tz2X9OuYCzE/g1Hb40VVxJz3OW00l4f9w11xKstE0=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: q4NAjQjTJMFxxldl/AAiP8pDMUCdKKJhMRmCf+Jtl3M=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: ICtuLoIJdvxcdfC6YrLD+/53y4ZZXc5VV+d4pptI4w0=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: sTauF35xc8SZpRjcL8yNs6xEdRvTaoYQZFwMt4H/aTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Nov 5 00:47:23 2025 GMT Not After : Nov 12 00:47:23 2025 GMT Subject: CN=690a9e9b-de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:1b:6f:14:fa:35:2e:55:86:43:5e:ba:8f: 1e:f8:3c:f4:4c:d4:fc:4c:7f:d9:41:3a:e6:41:2e: b3:02:4e:a6:67:87:03:c5:c5:a4:7b:b1:bb:3d:03: 01:e2:fd:ca:16:cb:d0:5f:48:f9:01:fd:77:c7:ce: 14:f0:fd:7d:85:1f:1e:64:79:ad:8e:88:fa:91:3a: 25:ff:74:43:64:4b:fd:3c:bb:f0:16:be:df:a0:6c: b2:73:1d:fc:1d:a6:fa:c1:6f:0f:e6:00:39:15:9b: 42:7e:f0:24:ff:95:af:b5:36:73:f8:e8:92:4c:c8: 60:0a:16:8c:d0:fa:1d:95:1e:0b:d4:ca:48:04:1c: d9:ca:b6:df:91:61:5b:15:ef:c1:92:dc:05:8e:4a: 19:82:a9:56:94:da:71:c6:89:02:69:f7:da:eb:07: d3:dc:0b:74:2c:93:de:47:4a:76:b5:71:1a:7b:e2: 6c:af:98:c5:e3:fc:34:d2:47:c6:33:b3:f7:5c:b8: 3b:f6:ad:8b:a6:21:59:75:ae:ca:9a:d4:62:70:5c: 5b:7f:63:d5:c6:3b:4a:38:58:69:81:22:3c:fc:5a: 66:5a:ac:ad:8a:4b:3a:5b:ea:c1:66:11:5b:b5:f5: 55:db:49:ed:1c:4d:0a:0a:25:82:12:31:9c:81:e4: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:C5:BB:BF:79:0E:C9:24:68:98:DA:D6:DB:55:13:47:EF:23:7F X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:98:a5:e1:ce:8d:af:74:dd:4f:25:d6:24:f7:24:cd:8c:76: 04:1a:73:67:1a:d8:02:5b:7d:66:18:ce:7e:f9:fb:68:74:67: dd:74:8c:6e:1b:1f:23:28:99:04:b0:f6:af:9f:1e:b4:ae:ff: 2c:98:40:c2:de:40:3d:53:26:ef:ea:de:2e:82:35:ab:1f:37: 38:9b:12:b7:e4:21:5c:2a:f3:5e:93:1d:91:6d:dd:52:00:11: 8d:51:df:f2:b3:be:1c:28:9a:ae:75:d9:d0:05:41:8f:88:fd: bc:c3:44:ec:ce:54:8c:40:7e:a1:ae:1d:9d:01:7d:42:0e:0f: d4:cb:f4:ef:01:35:8f:69:f1:cf:b6:02:f5:35:e6:ac:57:93: 2a:c9:b3:2d:c3:8c:1e:23:15:48:1c:43:18:20:07:1e:d7:78: 47:86:61:9a:e0:bb:05:83:e5:ec:7d:fb:1b:b1:37:42:f7:0e: f1:bf:e6:22:34:96:fd:d6:b1:d7:88:21:3a:1b:fb:02:9e:c1: 59:1c:01:e4:14:fe:13:9b:74:da:9e:99:12:c5:72:b1:47:da: 8f:c4:fe:d3:56:6e:1b:10:e0:3b:cb:03:07:f6:49:5a:a2:44: 98:d6:a1:9c:0c:c5:56:7c:43:bb:b1:b1:89:35:73:b4:7b:a9: 9c:2b:2b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjUxMTA1MDA0NzIzWhcNMjUxMTEyMDA0NzIzWjAYMRYwFAYD VQQDEw02OTBhOWU5Yi1kZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpUbbxT6NS5VhkNeuo8e+Dz0TNT8TH/ZQTrmQS6zAk6mZ4cDxcWke7G7PQMB 4v3KFsvQX0j5Af13x84U8P19hR8eZHmtjoj6kTol/3RDZEv9PLvwFr7foGyycx38 Hab6wW8P5gA5FZtCfvAk/5WvtTZz+OiSTMhgChaM0PodlR4L1MpIBBzZyrbfkWFb Fe/BktwFjkoZgqlWlNpxxokCaffa6wfT3At0LJPeR0p2tXEae+Jsr5jF4/w00kfG M7P3XLg79q2LpiFZda7KmtRicFxbf2PVxjtKOFhpgSI8/FpmWqytiks6W+rBZhFb tfVV20ntHE0KCiWCEjGcgeRNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1lxbu/ eQ7JJGiY2tbbVRNH7yN/MB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBomKXhzo2vdN1PJdYk9yTNjHYEGnNnGtgCW31mGM5++ftodGfddIxu Gx8jKJkEsPavnx60rv8smEDC3kA9Uybv6t4ugjWrHzc4mxK35CFcKvNekx2Rbd1S ABGNUd/ys74cKJquddnQBUGPiP28w0TszlSMQH6hrh2dAX1CDg/Uy/TvATWPafHP tgL1NeasV5MqybMtw4weIxVIHEMYIAce13hHhmGa4LsFg+XsffsbsTdC9w7xv+Yi NJb91rHXiCE6G/sCnsFZHAHkFP4Tm3TanpkSxXKxR9qPxP7TVm4bEOA7ywMH9kla okSY1qGcDMVWfEO7sbGJNXO0e6mcKytW -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:22 2025 by rpki-client