$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: qjIETNnc1GPvVFldFE3g59SXhy/twy0tdci/TJKQFVE= Subject key identifier: 2C:01:63:0C:59:9F:E4:E4:A1:E3:89:18:92:F0:D8:39:49:FA:0F:3D Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 3551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 3513 Signing time: Mon 20 Oct 2025 14:43:47 +0000 Manifest this update: Mon 20 Oct 2025 14:43:47 +0000 Manifest next update: Mon 27 Oct 2025 14:43:47 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: peEJSgcW7JZk9GqvWgScjYbkiw7tlXWZ+7k5OMTutnM=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13649 (0x3551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Oct 20 14:43:47 2025 GMT Not After : Oct 27 14:43:47 2025 GMT Subject: CN=68f64aa3-82c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:05:23:e3:e1:6d:47:bd:cb:68:cb:26:81:9b: cb:a4:80:6b:f3:b2:57:a3:1b:05:cd:d4:26:be:af: cb:2b:93:6a:0b:7e:1d:ec:c7:6b:c3:78:e2:99:c8: fa:e9:c8:28:cf:3b:c8:d8:26:f4:59:7b:94:60:f7: a0:25:92:40:6c:87:ca:0d:18:62:ca:d5:f5:1e:92: ad:b4:9f:f6:b1:9e:49:1d:4e:4c:92:fa:0d:da:ce: e5:ce:e4:ca:1b:a4:b8:5a:92:fe:01:a4:d3:01:79: de:1b:d0:60:96:67:e4:15:38:33:b1:48:0f:b8:0c: 74:cf:f7:e5:98:e8:fa:28:81:ae:b8:95:71:c9:19: 67:f7:33:3c:43:7f:99:a7:7b:09:d9:f4:2c:9d:59: 81:b6:3f:1d:d2:46:d2:e6:e2:57:77:17:ca:0f:db: 0f:91:66:20:c1:91:89:70:76:86:34:fd:20:41:81: 76:1a:48:05:03:bc:5d:35:c9:6c:8a:dc:a1:fe:c7: a4:f4:04:0c:cd:cc:ea:e7:43:c7:5b:81:3b:41:e0: 9b:ee:da:da:d9:c0:22:83:f6:c5:c8:7f:bc:d2:eb: e8:4a:e0:5c:38:e9:9e:a6:13:93:cc:27:ba:2b:e8: f5:0b:4d:ef:4c:3a:4b:94:d0:62:5b:2a:84:bf:b4: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:01:63:0C:59:9F:E4:E4:A1:E3:89:18:92:F0:D8:39:49:FA:0F:3D X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:aa:e8:12:ac:ed:21:a5:d2:2f:7b:44:1f:e2:7f:5c:60:f8: c8:0e:a5:d9:f9:3c:41:0a:e4:ec:25:8c:ba:86:42:63:77:46: 40:a1:7b:c7:5c:f7:73:f7:a2:53:77:56:9e:f0:93:b5:c7:ad: e0:e5:20:96:1f:37:1e:8d:8f:44:5c:e5:67:74:e3:d1:43:fc: 29:f9:40:70:91:ed:d3:29:12:40:e1:f8:2c:11:59:da:84:63: b4:ff:e9:76:74:03:35:35:cf:3a:6a:46:38:6d:fd:a7:0c:14: 68:c4:05:37:a3:63:64:8e:ab:81:1e:09:49:f9:27:ff:9d:c1: 57:0e:17:14:f2:6a:84:7f:1b:27:7d:30:93:b7:5c:1f:67:7f: 52:34:68:e9:23:b4:f2:5d:76:52:c9:bb:e2:c5:09:98:88:d2: 97:f3:65:b2:d9:e8:9a:70:66:e7:09:2c:94:54:e9:33:ce:12: ea:18:a7:81:e8:c6:6c:f2:fa:74:c6:22:2e:06:6f:ce:f4:39: 4c:38:48:e4:5c:96:91:ad:58:e0:c4:9d:64:6d:ca:17:f0:07: d9:f5:bf:e5:57:9e:77:14:3d:f1:15:ed:60:46:7e:d7:86:32: ac:b8:56:36:10:35:df:9e:df:a0:38:e8:ef:f3:e7:73:1a:b1: 4c:33:ac:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUxMDIwMTQ0MzQ3WhcNMjUxMDI3MTQ0MzQ3WjAYMRYwFAYD VQQDEw02OGY2NGFhMy04MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wUj4+FtR73LaMsmgZvLpIBr87JXoxsFzdQmvq/LK5NqC34d7Mdrw3jimcj6 6cgozzvI2Cb0WXuUYPegJZJAbIfKDRhiytX1HpKttJ/2sZ5JHU5MkvoN2s7lzuTK G6S4WpL+AaTTAXneG9BglmfkFTgzsUgPuAx0z/flmOj6KIGuuJVxyRln9zM8Q3+Z p3sJ2fQsnVmBtj8d0kbS5uJXdxfKD9sPkWYgwZGJcHaGNP0gQYF2GkgFA7xdNcls ityh/sek9AQMzczq50PHW4E7QeCb7tra2cAig/bFyH+80uvoSuBcOOmephOTzCe6 K+j1C03vTDpLlNBiWyqEv7QYSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwBYwxZ n+TkoeOJGJLw2DlJ+g89MB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+qugSrO0hpdIve0Qf4n9cYPjIDqXZ+TxBCuTsJYy6hkJjd0ZAoXvH XPdz96JTd1ae8JO1x63g5SCWHzcejY9EXOVndOPRQ/wp+UBwke3TKRJA4fgsEVna hGO0/+l2dAM1Nc86akY4bf2nDBRoxAU3o2NkjquBHglJ+Sf/ncFXDhcU8mqEfxsn fTCTt1wfZ39SNGjpI7TyXXZSybvixQmYiNKX82Wy2eiacGbnCSyUVOkzzhLqGKeB 6MZs8vp0xiIuBm/O9DlMOEjkXJaRrVjgxJ1kbcoX8AfZ9b/lV553FD3xFe1gRn7X hjKsuFY2EDXfnt+gOOjv8+dzGrFMM6xJ -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:10 2025 by rpki-client