$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: S8783gZ3TDWjpJUq0BudTsxb8Y+NaKg7X9SaLWsxBCI= Subject key identifier: 1B:DA:6F:09:F8:66:A8:B2:CC:B8:B5:15:57:55:27:A2:EC:ED:D0:E3 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0284 Signing time: Mon 03 Nov 2025 01:37:54 +0000 Manifest this update: Mon 03 Nov 2025 01:37:54 +0000 Manifest next update: Mon 10 Nov 2025 01:37:54 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: hDz+yUvA+rEm/ntGjPuzJM8FezEGneyiJqBM/H1PSxI=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Nov 3 01:37:54 2025 GMT Not After : Nov 10 01:37:54 2025 GMT Subject: CN=69080772-ddcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a7:c9:8d:03:82:1d:19:a9:0d:d0:e9:06:02: a3:57:3e:3c:9f:67:33:aa:1d:50:2c:43:f0:90:c8: 3d:53:8c:2e:ba:e3:c1:9d:a2:5a:1a:86:14:b7:2e: 65:aa:69:75:b2:ee:fb:e3:c8:13:b2:ab:62:1b:8e: 53:2b:1c:54:76:0d:bc:de:9d:3f:2d:51:9f:46:12: de:8f:30:95:05:85:34:b0:a8:c9:fc:b3:80:aa:3c: c0:f7:3a:21:e9:bb:8f:36:f3:eb:aa:0b:00:4a:03: f6:ef:8b:2b:26:e7:41:72:c6:64:ea:70:c6:22:e5: 79:ed:2c:84:f3:20:0f:23:a2:c7:3a:a6:92:41:6f: ef:50:54:a6:7b:3c:22:ef:32:67:09:ec:df:a3:cc: a2:fd:de:58:8e:b7:79:22:95:09:fe:43:59:31:eb: 16:d3:7b:69:1f:7d:d5:1b:67:d4:1d:03:92:d5:ae: 90:ca:c5:49:25:22:f4:46:e0:ed:f6:cd:c5:93:ed: f0:c5:bd:d0:ce:18:26:11:c6:67:1b:6f:c9:32:0e: 1e:03:5d:9b:fd:28:82:5a:6c:3e:21:18:88:35:ae: f4:80:78:9e:e5:3c:11:97:95:59:56:62:2b:2e:fd: da:43:52:fa:bf:db:6a:69:d9:f8:81:6f:ab:bf:d8: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:6F:09:F8:66:A8:B2:CC:B8:B5:15:57:55:27:A2:EC:ED:D0:E3 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ce:41:90:02:3a:f2:30:90:32:13:eb:7f:b7:9c:cc:28:60: b1:e2:ff:39:ff:e1:83:3a:54:be:f7:a3:29:a3:40:67:d9:88: 57:25:99:98:f9:03:83:c1:49:dd:7b:37:a9:51:e8:05:81:7e: d5:39:d2:be:74:69:97:bf:89:7b:d7:c3:7c:0b:72:34:a4:dc: a2:3d:4a:57:d1:a3:1c:ef:e1:e9:fc:7b:e0:35:2b:0b:be:3c: fb:b8:16:59:13:de:cc:32:95:e3:41:7a:09:78:bc:23:b9:55: 9c:cb:0c:ca:d8:90:7b:3a:41:ab:91:5c:4b:7f:26:c3:7f:2f: 45:75:1a:d9:b2:10:25:ad:c5:a3:e4:91:fb:70:31:0d:39:38: e0:d1:c4:f6:35:7e:60:54:6c:8b:0e:a7:01:56:28:b3:0b:f5: f9:e5:a8:dc:d4:cd:7d:42:76:67:84:f0:5f:e2:85:93:fb:26: 75:0e:b9:ef:6a:94:b6:20:9a:3e:03:cd:fd:55:37:64:e0:ba: 52:a1:c5:15:68:c9:d9:92:5a:3b:df:22:47:dc:ab:d3:21:40: 19:cf:56:4e:3f:c3:65:68:38:6c:64:cb:a4:48:b3:32:f3:fc: ea:c0:ce:66:15:c2:5b:8e:ad:2f:6d:8d:fd:01:33:37:41:7d: 75:0a:52:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUxMTAzMDEzNzU0WhcNMjUxMTEwMDEzNzU0WjAYMRYwFAYD VQQDEw02OTA4MDc3Mi1kZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4afJjQOCHRmpDdDpBgKjVz48n2czqh1QLEPwkMg9U4wuuuPBnaJaGoYUty5l qml1su7748gTsqtiG45TKxxUdg283p0/LVGfRhLejzCVBYU0sKjJ/LOAqjzA9zoh 6buPNvPrqgsASgP274srJudBcsZk6nDGIuV57SyE8yAPI6LHOqaSQW/vUFSmezwi 7zJnCezfo8yi/d5Yjrd5IpUJ/kNZMesW03tpH33VG2fUHQOS1a6QysVJJSL0RuDt 9s3Fk+3wxb3QzhgmEcZnG2/JMg4eA12b/SiCWmw+IRiINa70gHie5TwRl5VZVmIr Lv3aQ1L6v9tqadn4gW+rv9gk+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvabwn4 ZqiyzLi1FVdVJ6Ls7dDjMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCczkGQAjryMJAyE+t/t5zMKGCx4v85/+GDOlS+96Mpo0Bn2YhXJZmY +QODwUndezepUegFgX7VOdK+dGmXv4l718N8C3I0pNyiPUpX0aMc7+Hp/HvgNSsL vjz7uBZZE97MMpXjQXoJeLwjuVWcywzK2JB7OkGrkVxLfybDfy9FdRrZshAlrcWj 5JH7cDENOTjg0cT2NX5gVGyLDqcBViizC/X55ajc1M19QnZnhPBf4oWT+yZ1Drnv apS2IJo+A839VTdk4LpSocUVaMnZklo73yJH3KvTIUAZz1ZOP8NlaDhsZMukSLMy 8/zqwM5mFcJbjq0vbY39ATM3QX11ClKk -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:32 2025 by rpki-client