$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: LX7BITtgHJBidUKTfB0BHpxuFc/zleCl3KOGI2L4tms= Subject key identifier: 1A:BE:08:B2:64:F8:EB:69:F6:4F:AC:82:97:32:05:A9:8C:F4:CD:A4 Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 53 Signing time: Sun 19 Oct 2025 10:40:14 +0000 Manifest this update: Sun 19 Oct 2025 10:40:13 +0000 Manifest next update: Sun 26 Oct 2025 10:40:13 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: ULJUt5nry7wmFP5ch6ECIweiV0X7hu6+VzRPAoQCg1U=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Oct 19 10:40:13 2025 GMT Not After : Oct 26 10:40:13 2025 GMT Subject: CN=68f4c00d-cadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:5f:d8:10:68:ea:d5:a1:e3:50:4a:03:44: 61:e6:d7:aa:56:0b:5a:a8:e8:ed:5a:45:0d:3b:63: 02:f3:30:68:e3:f2:f6:82:f3:2c:af:7c:1d:97:40: 76:54:d2:f7:15:59:d9:97:5a:99:d8:5c:ed:fe:89: 5c:66:52:e2:b8:83:e2:bf:b4:7a:11:ab:23:3d:29: 92:af:1f:2b:07:86:46:db:17:20:49:2e:f0:6e:19: 5b:9b:4b:34:88:6a:64:01:af:cf:2a:86:96:06:6e: 65:1b:e7:bd:44:66:f5:ed:91:8f:cc:69:ca:37:c3: db:5d:2f:8c:f0:27:68:1f:37:c3:2e:f1:73:58:fe: 78:40:66:61:20:fe:75:dc:fd:52:fd:c9:22:b8:a1: 26:f6:73:d3:92:60:4f:87:5b:e4:9b:89:9a:25:a2: 02:f0:47:ff:fe:4d:2a:26:c3:3e:fb:41:4e:f1:45: 0d:82:91:e2:66:67:90:c4:69:4d:2a:38:be:24:3d: d0:b6:81:35:93:bf:53:13:9c:6f:b5:e7:03:8b:bf: 1f:ac:ef:c8:36:c9:5f:e6:d9:1a:cb:a7:0c:0e:7f: 8c:af:9e:cc:14:d1:21:0d:03:3c:1f:83:ac:8e:70: 44:06:20:82:a4:89:b4:d9:0a:86:ab:bd:77:f7:21: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:08:B2:64:F8:EB:69:F6:4F:AC:82:97:32:05:A9:8C:F4:CD:A4 X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fa:62:26:42:c7:a3:00:86:47:76:ff:62:0c:4b:a1:2f:fc: 51:19:05:d5:44:16:d2:ad:eb:08:fd:2f:d6:2e:6f:9b:07:70: 16:7e:c3:23:40:b3:1f:c5:38:7e:af:8a:06:e4:26:04:81:f7: 15:b9:8a:9d:13:cb:34:40:e4:28:be:d5:80:6f:8d:63:6a:20: cf:5f:c3:6a:1b:f5:10:4b:05:49:4c:68:74:b8:f7:13:7b:5c: fb:65:f0:68:e7:de:ec:4c:65:f8:89:32:30:8c:08:df:0c:84: 80:47:41:e3:d2:fa:16:ca:98:a5:e8:6e:c0:2c:82:f4:21:91: 60:6c:2d:c5:b1:51:ea:fe:15:36:7d:da:26:dd:e4:eb:23:7b: 7a:a8:ff:ba:d8:f0:4a:25:e4:27:cc:ab:55:06:e9:b8:4e:ea: 65:f8:fb:8e:d7:0a:09:19:f5:c2:0d:14:63:da:ef:a5:ea:80: 24:fe:69:31:6a:ce:3c:fb:41:24:5c:85:4c:c3:1f:9f:bb:96: 34:3c:bd:82:0c:b2:51:bf:cf:65:b7:05:93:05:43:0f:13:3b: b8:0d:86:8c:c7:25:cb:2d:bf:a6:73:45:56:21:ce:bf:91:ac: 70:f3:c4:d1:1c:fb:9a:d0:80:af:07:40:3d:b2:f1:73:f7:31: a4:f7:31:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTEwMTkxMDQwMTNaFw0yNTEwMjYxMDQwMTNaMBgxFjAUBgNV BAMTDTY4ZjRjMDBkLWNhZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCynV/YEGjq1aHjUEoDRGHm16pWC1qo6O1aRQ07YwLzMGjj8vaC8yyvfB2XQHZU 0vcVWdmXWpnYXO3+iVxmUuK4g+K/tHoRqyM9KZKvHysHhkbbFyBJLvBuGVubSzSI amQBr88qhpYGbmUb571EZvXtkY/Maco3w9tdL4zwJ2gfN8Mu8XNY/nhAZmEg/nXc /VL9ySK4oSb2c9OSYE+HW+SbiZologLwR//+TSomwz77QU7xRQ2CkeJmZ5DEaU0q OL4kPdC2gTWTv1MTnG+15wOLvx+s78g2yV/m2RrLpwwOf4yvnswU0SENAzwfg6yO cEQGIIKkibTZCoarvXf3Idz1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGr4IsmT4 62n2T6yClzIFqYz0zaQwHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA76YiZCx6MAhkd2/2IMS6Ev/FEZBdVEFtKt6wj9L9Yub5sHcBZ+wyNA sx/FOH6vigbkJgSB9xW5ip0TyzRA5Ci+1YBvjWNqIM9fw2ob9RBLBUlMaHS49xN7 XPtl8Gjn3uxMZfiJMjCMCN8MhIBHQePS+hbKmKXobsAsgvQhkWBsLcWxUer+FTZ9 2ibd5Osje3qo/7rY8Eol5CfMq1UG6bhO6mX4+47XCgkZ9cINFGPa76XqgCT+aTFq zjz7QSRchUzDH5+7ljQ8vYIMslG/z2W3BZMFQw8TO7gNhozHJcstv6ZzRVYhzr+R rHDzxNEc+5rQgK8HQD2y8XP3MaT3MZU= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:45 2025 by rpki-client