$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: Wg0HRGsQfwDwrEHL09MCRqUOnJPIVIkX8Ml7HcF7Vrc= Subject key identifier: 7E:16:02:44:3D:87:CA:C5:43:34:41:44:61:35:6E:AE:7A:6B:8F:F4 Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 0235 Signing time: Mon 03 Nov 2025 01:58:59 +0000 Manifest this update: Mon 03 Nov 2025 01:58:59 +0000 Manifest next update: Mon 10 Nov 2025 01:58:59 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: 40GbeKfKvD+FtXPd9qYyGaUoW6wTrKWb+/SB+2kKDh4=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: CgMPU2zKmFQv28rwsx7lyUdY/WjeUcfrzEMiRjZzUr8=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: l/45mJzVlvrXkvMnYsTOqET7KEWpbH/MA+sFMBUmJ+A=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: FMfFksLuvdDh719tgVb78yQXrHhuawjPdGhDWuzq2VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 3 01:58:59 2025 GMT Not After : Nov 10 01:58:59 2025 GMT Subject: CN=69080c63-5453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:22:47:73:6d:cf:7c:d4:f7:b0:63:6e:fa: fa:1b:3b:e5:04:52:ef:40:f6:b2:1e:21:3d:19:bc: 34:ad:fc:3c:c3:b6:52:78:8d:3c:5b:3c:c3:c2:4c: d4:93:d8:de:dd:9d:8d:02:5f:a9:de:6d:c4:c3:2a: e9:b5:33:44:28:79:26:23:83:c3:e6:ee:bc:24:bc: c9:90:aa:30:3d:f4:a6:90:4d:9e:49:11:34:1e:95: 1f:95:c4:0a:92:7e:3c:ab:09:1c:41:3c:77:6c:c4: fa:bd:5a:36:6d:8f:e8:e2:e6:ac:98:e9:4e:8e:95: 23:01:f0:64:83:df:5f:52:a5:ca:62:80:f7:a3:15: 14:b0:5a:8a:da:2d:99:7f:db:2e:6f:73:c0:58:ab: 62:fa:20:6a:77:d2:73:78:cf:01:f9:64:d5:2c:9c: 65:df:a4:54:af:7b:07:73:c7:3f:a7:8a:9b:81:e2: 43:67:59:79:63:df:d5:23:f2:e4:15:fb:7f:58:a9: 97:f7:db:aa:b5:11:d8:7e:c4:d9:2f:cf:03:00:27: b7:e9:a4:b6:f7:80:0f:fa:35:8c:e0:9c:00:5c:06: 3c:55:aa:75:d7:32:2e:cf:59:05:37:28:21:39:d9: fe:2b:21:42:60:eb:83:05:e7:f8:5d:17:d0:81:a4: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:02:44:3D:87:CA:C5:43:34:41:44:61:35:6E:AE:7A:6B:8F:F4 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2c:f9:d7:93:41:c4:f9:74:d5:73:65:d1:50:b7:01:3d:95: 08:10:dd:0c:ec:23:a2:03:41:6a:55:9c:7b:bd:dd:45:05:37: 51:8e:99:5d:09:65:36:da:0b:44:64:6a:43:15:ba:59:8f:91: 2b:20:ae:22:7b:c5:a7:aa:52:a7:69:5b:78:7b:c2:de:4d:ca: 97:26:ac:01:83:0f:91:cc:f2:62:29:b1:41:b3:ce:1e:e2:75: 9a:c2:c2:bb:4b:4a:e2:78:85:db:bd:10:18:9e:47:0a:74:04: dc:ab:1c:96:26:f4:dc:b0:fa:47:d9:fd:47:ef:96:2b:db:3f: 34:1c:2b:bb:1a:f5:9b:36:fd:bd:b6:6b:0c:96:91:81:d0:78: bf:09:ba:af:b7:d8:5a:d3:71:9c:e8:02:15:2f:53:a1:58:fc: 79:10:72:0d:a9:fa:90:09:0e:2f:06:d0:ec:33:9e:a5:19:15: bb:7b:b3:5a:68:26:5c:57:f9:25:fa:be:12:2d:83:e8:db:6b: 43:c4:f7:7c:5b:95:7b:28:f1:3d:f2:bd:ba:8f:40:0f:bd:02: fa:20:a6:68:26:e4:07:b5:f0:3a:ba:3e:eb:dc:ab:d7:d8:e1: 1a:90:df:25:50:ee:e3:df:4d:6e:f2:e3:b7:ed:b2:34:9e:5a: 5d:49:72:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMTAzMDE1ODU5WhcNMjUxMTEwMDE1ODU5WjAYMRYwFAYD VQQDEw02OTA4MGM2My01NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiciR3Ntz3zU97Bjbvr6GzvlBFLvQPayHiE9Gbw0rfw8w7ZSeI08WzzDwkzU k9je3Z2NAl+p3m3EwyrptTNEKHkmI4PD5u68JLzJkKowPfSmkE2eSRE0HpUflcQK kn48qwkcQTx3bMT6vVo2bY/o4uasmOlOjpUjAfBkg99fUqXKYoD3oxUUsFqK2i2Z f9sub3PAWKti+iBqd9JzeM8B+WTVLJxl36RUr3sHc8c/p4qbgeJDZ1l5Y9/VI/Lk Fft/WKmX99uqtRHYfsTZL88DACe36aS294AP+jWM4JwAXAY8Vap11zIuz1kFNygh Odn+KyFCYOuDBef4XRfQgaTf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4WAkQ9 h8rFQzRBRGE1bq56a4/0MB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACLPnXk0HE+XTVc2XRULcBPZUIEN0M7COiA0FqVZx7vd1FBTdRjpld CWU22gtEZGpDFbpZj5ErIK4ie8WnqlKnaVt4e8LeTcqXJqwBgw+RzPJiKbFBs84e 4nWawsK7S0rieIXbvRAYnkcKdATcqxyWJvTcsPpH2f1H75Yr2z80HCu7GvWbNv29 tmsMlpGB0Hi/Cbqvt9ha03Gc6AIVL1OhWPx5EHINqfqQCQ4vBtDsM56lGRW7e7Na aCZcV/kl+r4SLYPo22tDxPd8W5V7KPE98r26j0APvQL6IKZoJuQHtfA6uj7r3KvX 2OEakN8lUO7j301u8uO37bI0nlpdSXKw -----END CERTIFICATE-----Generated at Tue Nov 4 15:56:31 2025 by rpki-client