$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: hsvFkM6Iw9nCzeXuJdA9nxCYhOOqwgIez5M3SjP37ho= Subject key identifier: 5E:FE:50:60:11:E2:BF:BC:35:E8:20:BD:33:A8:90:CC:58:51:FD:FF Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1AAF Signing time: Tue 04 Nov 2025 17:13:56 +0000 Manifest this update: Tue 04 Nov 2025 17:13:55 +0000 Manifest next update: Tue 11 Nov 2025 17:13:55 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: FBsIAPnunZQPZhffwXY2WkuaJbjlvi9u++9fMeKkVRI=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Nov 4 17:13:55 2025 GMT Not After : Nov 11 17:13:55 2025 GMT Subject: CN=690a3454-07d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ec:d2:4b:b9:c0:26:8a:1e:bb:ae:62:83:14: 87:93:48:c2:c9:c8:ee:b2:88:97:65:0b:4d:f2:47: 44:66:0c:fe:fc:65:38:da:d2:eb:fc:e8:6f:a2:42: da:e9:83:b6:61:44:34:f3:a9:59:6c:ec:cc:99:ea: 5f:08:da:36:96:14:b8:8b:6a:6a:1a:b6:f1:da:af: df:82:8a:66:6f:04:2c:5c:21:73:56:51:3e:0f:89: 0c:65:96:cf:5e:8b:d1:7f:4f:9c:54:7f:04:50:18: 35:88:7e:82:3a:aa:76:5f:3f:1d:a3:64:2c:a6:31: 2a:a3:87:60:19:b1:67:07:9b:6e:e8:08:56:02:5b: 6d:c0:e4:df:03:37:20:14:20:a8:32:52:1b:6a:a4: 23:36:a0:39:83:4c:67:36:b8:23:6d:35:da:79:7b: fa:7b:85:22:ea:c4:78:20:b6:e7:46:04:ed:ad:15: 20:60:3c:2b:2b:1b:6a:da:79:9f:f8:85:92:e0:f0: 36:88:c4:d2:8a:24:03:93:4c:73:cf:51:bc:02:93: a0:63:81:9a:9f:a3:59:0d:47:62:ab:c8:82:94:b5: 88:dc:8d:2f:24:1b:73:b4:6e:2e:b6:bb:1c:57:eb: 04:dd:ab:e9:9d:8d:5e:95:4b:66:5a:a6:6f:9e:27: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:50:60:11:E2:BF:BC:35:E8:20:BD:33:A8:90:CC:58:51:FD:FF X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e3:10:63:f7:07:82:43:dc:94:7a:cf:bf:7f:b6:c9:31:66: cf:33:04:5b:f2:2e:02:49:b8:c0:b2:36:c0:3d:ca:21:5e:a2: 0c:c5:f5:5a:ea:a5:8c:6a:c7:b7:3e:90:07:2a:c7:a2:b0:fc: 33:5d:67:b2:de:8c:98:a5:c8:67:3d:c6:18:49:93:52:89:81: 7e:17:b3:7f:b7:c0:8e:9d:18:04:a1:f2:eb:49:46:0e:20:cb: 41:da:36:62:c8:b9:02:25:dc:90:e6:9a:50:2f:90:e4:60:e4: 7e:d0:ce:f6:48:d7:94:08:b3:ff:36:3a:94:99:3f:c7:4c:83: 2e:a5:08:8a:57:90:2b:10:60:5f:bd:33:69:44:c5:80:6f:42: ac:42:ff:d6:b8:b3:9d:eb:54:14:37:86:d4:e6:73:f2:11:b5: c5:b8:3d:fb:ed:ff:5c:ec:50:84:34:fd:d2:95:9c:dd:e7:ac: 86:95:18:fe:c5:b9:d4:58:e5:79:91:51:9d:3d:30:e4:e9:18: a5:a6:85:5a:83:81:cc:65:22:3a:89:2f:4b:83:1c:37:d2:37: 71:49:51:28:fb:64:7e:47:01:e9:92:17:bb:9e:a4:b7:99:65: 04:cf:36:88:c2:7f:69:24:c4:9c:a4:8e:36:68:a5:f0:88:ac: 0e:c4:63:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUxMTA0MTcxMzU1WhcNMjUxMTExMTcxMzU1WjAYMRYwFAYD VQQDEw02OTBhMzQ1NC0wN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ezSS7nAJooeu65igxSHk0jCycjusoiXZQtN8kdEZgz+/GU42tLr/OhvokLa 6YO2YUQ086lZbOzMmepfCNo2lhS4i2pqGrbx2q/fgopmbwQsXCFzVlE+D4kMZZbP XovRf0+cVH8EUBg1iH6COqp2Xz8do2QspjEqo4dgGbFnB5tu6AhWAlttwOTfAzcg FCCoMlIbaqQjNqA5g0xnNrgjbTXaeXv6e4Ui6sR4ILbnRgTtrRUgYDwrKxtq2nmf +IWS4PA2iMTSiiQDk0xzz1G8ApOgY4Gan6NZDUdiq8iClLWI3I0vJBtztG4utrsc V+sE3avpnY1elUtmWqZvniekoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7+UGAR 4r+8NeggvTOokMxYUf3/MB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR4xBj9weCQ9yUes+/f7bJMWbPMwRb8i4CSbjAsjbAPcohXqIMxfVa 6qWMase3PpAHKseisPwzXWey3oyYpchnPcYYSZNSiYF+F7N/t8COnRgEofLrSUYO IMtB2jZiyLkCJdyQ5ppQL5DkYOR+0M72SNeUCLP/NjqUmT/HTIMupQiKV5ArEGBf vTNpRMWAb0KsQv/WuLOd61QUN4bU5nPyEbXFuD377f9c7FCENP3SlZzd56yGlRj+ xbnUWOV5kVGdPTDk6RilpoVag4HMZSI6iS9Lgxw30jdxSVEo+2R+RwHpkhe7nqS3 mWUEzzaIwn9pJMScpI42aKXwiKwOxGP2 -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:26 2025 by rpki-client