$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json) Hash identifier: bbMt8y5D8qEqxPuNxR4vQH9VK+Z9grKPVDW4jZ40J3s= Subject key identifier: 73:76:44:3D:80:4B:94:90:F0:44:63:3D:5A:F2:90:A8:01:EF:BC:C5 Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft Manifest number: 74 Signing time: Sun 19 Oct 2025 10:19:57 +0000 Manifest this update: Sun 19 Oct 2025 10:19:56 +0000 Manifest next update: Sun 26 Oct 2025 10:19:56 +0000 Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: PlfbQy5WtUKNn6xCJZ7I9u8FLFm39tLfmQbu9/rkUfg=) 2: 069483747E7F11F091356E86C4F9AE02.roa (hash: Yrv7o+i08VMkPfTsO9wW2G4Ntl0tTtmIsoOx+zJY4Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272 Validity Not Before: Oct 19 10:19:56 2025 GMT Not After : Oct 26 10:19:56 2025 GMT Subject: CN=68f4bb4d-fe13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:03:b2:c8:69:0a:17:ca:0f:9f:1b:6f:79: 10:98:6c:80:65:50:72:41:65:9b:7f:5f:dd:b3:04: 1e:0c:95:78:ee:b0:7e:64:af:30:90:64:88:7d:c7: 8a:2e:83:16:4d:a7:57:be:f5:33:e1:d5:85:8f:64: 1c:7b:b6:80:76:00:5d:82:6a:99:4d:8f:b1:c4:f3: 50:5b:aa:58:5b:22:74:2a:36:10:31:76:73:d5:14: 25:23:55:21:0a:14:d5:f9:d6:f9:e6:b2:fa:a9:34: 0f:79:f0:26:84:d7:57:03:6d:ed:1c:b0:f2:27:39: d5:49:79:73:03:a9:81:f6:4f:53:f7:30:dc:10:c6: 21:aa:d0:ff:25:94:b1:00:86:8e:48:07:8f:7a:88: 99:c9:83:57:ac:f3:40:06:73:98:c0:d9:0e:99:1d: 25:57:ef:45:8e:74:3c:34:46:dd:b8:90:fc:75:97: 3c:79:40:0b:9e:77:cb:bd:18:9b:3e:47:3b:06:68: fc:d0:81:aa:55:4d:07:8a:90:04:d8:e4:42:23:6f: 65:2b:e1:8a:7b:8c:64:9c:db:16:34:5f:9a:71:43: c9:0c:b4:78:b6:4e:6b:0d:be:ef:78:3a:4b:34:c3: e8:3b:b8:2c:1b:83:10:61:d3:95:7b:be:35:a7:56: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:44:3D:80:4B:94:90:F0:44:63:3D:5A:F2:90:A8:01:EF:BC:C5 X509v3 Authority Key Identifier: keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d0:b6:62:2c:c0:82:06:16:82:b4:db:be:7b:43:97:9e:61: b2:55:4a:e4:44:bd:62:53:66:1f:bb:ef:86:c1:98:f0:0b:30: bd:a8:44:7d:a6:1c:33:bd:a6:32:f7:70:8f:e6:20:7f:f1:78: 77:48:06:23:e7:e3:e3:ce:73:a1:65:be:92:d9:74:a4:47:88: 6b:94:0d:b9:66:58:ad:c6:bc:c8:5f:fc:29:af:56:2c:c0:99: 56:c6:6d:aa:8f:56:de:17:ad:a5:d8:a2:f0:fe:aa:b3:8c:8e: 15:24:63:8b:5a:4e:48:b9:3f:1c:6f:11:08:c2:50:a4:d7:d8: 32:d4:8c:d6:28:ea:b4:d1:e3:f1:99:cb:71:20:47:ac:51:9a: ad:a5:a2:4e:c5:a4:c3:b4:d0:78:1d:d0:03:e3:fb:09:3f:22: 2f:23:8d:38:3b:75:87:bc:d0:d2:ec:4a:e0:40:bd:c1:62:fe: e9:5d:b5:fa:0b:0a:61:12:33:a5:3c:c4:07:01:28:a5:0d:e2: bb:1e:56:09:23:b7:dd:b0:16:59:06:8d:91:67:3c:be:23:81: 0c:e6:0d:a7:08:a8:9f:4e:1a:10:45:e2:d7:ec:8d:a0:a0:33: af:f1:a7:a9:d6:32:8a:0b:bc:5a:5d:85:4e:ff:8c:75:65:38: 4e:62:d7:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDM4MjExMC8GA1UEBRMoNzY4ODc0NjlENjQxMEJFNDY4MDc3NTg3ODQ3RUVBQTA4 MEI0MjI3MjAeFw0yNTEwMTkxMDE5NTZaFw0yNTEwMjYxMDE5NTZaMBgxFjAUBgNV BAMTDTY4ZjRiYjRkLWZlMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM9QOyyGkKF8oPnxtveRCYbIBlUHJBZZt/X92zBB4MlXjusH5krzCQZIh9x4ou gxZNp1e+9TPh1YWPZBx7toB2AF2CaplNj7HE81BbqlhbInQqNhAxdnPVFCUjVSEK FNX51vnmsvqpNA958CaE11cDbe0csPInOdVJeXMDqYH2T1P3MNwQxiGq0P8llLEA ho5IB496iJnJg1es80AGc5jA2Q6ZHSVX70WOdDw0Rt24kPx1lzx5QAued8u9GJs+ RzsGaPzQgapVTQeKkATY5EIjb2Ur4Yp7jGSc2xY0X5pxQ8kMtHi2TmsNvu94Oks0 w+g7uCwbgxBh05V7vjWnVn/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc3ZEPYBL lJDwRGM9WvKQqAHvvMUwHwYDVR0jBBgwFoAUdoh0adZBC+RoB3WHhH7qoIC0InIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0MzgyLzQ0QjVGQTFDMEFD MDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMElu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZG9oMGFkWkJDLVJvQjNXSGhIN3FvSUMwSW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 MzgyLzQ0QjVGQTFDMEFDMDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1S b0IzV0hoSDdxb0lDMEluSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrQtmIswIIGFoK02757Q5eeYbJVSuREvWJTZh+774bBmPALML2oRH2m HDO9pjL3cI/mIH/xeHdIBiPn4+POc6FlvpLZdKRHiGuUDblmWK3GvMhf/CmvVizA mVbGbaqPVt4XraXYovD+qrOMjhUkY4taTki5PxxvEQjCUKTX2DLUjNYo6rTR4/GZ y3EgR6xRmq2lok7FpMO00Hgd0APj+wk/Ii8jjTg7dYe80NLsSuBAvcFi/uldtfoL CmESM6U8xAcBKKUN4rseVgkjt92wFlkGjZFnPL4jgQzmDacIqJ9OGhBF4tfsjaCg M6/xp6nWMooLvFpdhU7/jHVlOE5i13w= -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:16 2025 by rpki-client