$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: 0bEDaD6iZcGnzad/DXvHMCg2AEeNrCh72QpYTfoX1N0= Subject key identifier: F5:2F:14:22:F0:06:E6:F2:C1:45:F6:23:D7:E3:74:DB:3A:72:10:35 Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 17C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 17B4 Signing time: Sat 18 Oct 2025 16:58:11 +0000 Manifest this update: Sat 18 Oct 2025 16:58:10 +0000 Manifest next update: Sat 25 Oct 2025 16:58:10 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: tt1y6nz5OUlEowbD8o8VmnlfCFWLr2xDz3DdZLehG2w=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6084 (0x17c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: Oct 18 16:58:10 2025 GMT Not After : Oct 25 16:58:10 2025 GMT Subject: CN=68f3c723-5d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:c1:dc:e0:36:7f:c9:a1:9d:67:4a:d8:af: 16:c0:8e:4b:1e:fe:56:b3:3f:f6:55:95:ba:28:4b: 12:a2:3e:22:d9:13:ac:cb:22:7f:56:c5:d9:54:08: 77:cc:97:aa:cb:5e:16:19:68:a1:bd:6d:d4:f5:ee: aa:9f:5a:60:39:05:5e:02:ec:67:48:68:f5:00:87: e3:2a:3b:4f:56:09:e3:bf:71:fb:89:bf:96:56:98: 7c:3a:26:4c:04:c7:a1:ce:4c:4c:d4:ec:04:83:ea: 4d:db:39:6d:a4:f3:ca:5b:53:ba:61:db:3a:6c:3a: a5:4c:c2:10:20:2f:91:84:be:c4:5a:2f:37:9f:c3: ab:75:52:46:16:16:29:55:5b:34:77:e9:32:18:d5: 1a:fb:32:2d:35:ca:21:6f:fc:af:27:61:65:b9:1d: 2d:33:6e:47:a1:31:9e:f3:47:34:d8:ef:40:b0:d1: 34:75:f1:e4:f3:02:19:4b:ff:bb:48:17:53:9c:f0: 3f:7f:4c:98:68:32:16:56:19:64:6a:ed:32:02:e2: a6:9b:e0:5e:ac:78:b1:61:cd:dd:b9:e3:72:7f:59: f6:a5:eb:89:a2:72:49:73:ae:78:95:2b:3b:60:f3: 42:98:19:75:37:c1:06:16:71:d8:24:80:f1:62:4e: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:14:22:F0:06:E6:F2:C1:45:F6:23:D7:E3:74:DB:3A:72:10:35 X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:58:2f:3b:c0:a7:fd:20:0d:ab:9a:18:75:9e:ec:6e:5b:43: 84:88:c6:38:3a:f7:00:9d:43:ba:97:92:ec:b1:b8:30:04:f0: a6:36:30:29:6c:5b:b2:96:f5:fd:1e:91:81:14:82:96:18:50: ef:49:32:62:b5:14:b3:29:31:c1:e8:28:33:32:c7:7d:c3:61: 06:f5:1e:6d:27:14:76:8c:96:41:d4:fc:78:bc:dd:0f:63:52: fc:e4:47:9e:87:f1:2f:67:69:7c:ad:ce:27:17:0e:ab:ca:02: 0b:ae:78:e6:89:ee:9b:31:b8:84:9e:0d:97:5f:8a:4b:5d:30: f2:32:2d:46:e7:c8:33:90:19:a3:c6:50:d3:36:10:b0:6a:c6: 51:b4:72:05:61:94:27:34:b3:bf:e4:23:e7:51:8f:58:83:86: 91:1d:05:ab:14:3d:7b:a5:e7:4b:20:09:b9:04:06:71:ef:40: 5b:3b:3e:14:73:01:0f:10:96:89:b9:d8:76:4d:a4:6f:c5:e8: 37:85:00:d5:04:72:1a:68:7d:b7:c8:b9:ca:50:5e:27:cc:8b: 9e:42:4d:80:e9:45:d3:bd:62:7f:fe:09:2e:63:7d:f9:89:07: a5:af:d3:8c:96:25:3d:4d:56:10:f5:99:8e:ec:a5:50:96:25: 04:b6:ad:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjUxMDE4MTY1ODEwWhcNMjUxMDI1MTY1ODEwWjAYMRYwFAYD VQQDEw02OGYzYzcyMy01ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvTB3OA2f8mhnWdK2K8WwI5LHv5Wsz/2VZW6KEsSoj4i2ROsyyJ/VsXZVAh3 zJeqy14WGWihvW3U9e6qn1pgOQVeAuxnSGj1AIfjKjtPVgnjv3H7ib+WVph8OiZM BMehzkxM1OwEg+pN2zltpPPKW1O6Yds6bDqlTMIQIC+RhL7EWi83n8OrdVJGFhYp VVs0d+kyGNUa+zItNcohb/yvJ2FluR0tM25HoTGe80c02O9AsNE0dfHk8wIZS/+7 SBdTnPA/f0yYaDIWVhlkau0yAuKmm+BerHixYc3dueNyf1n2peuJonJJc654lSs7 YPNCmBl1N8EGFnHYJIDxYk4afQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUvFCLw BubywUX2I9fjdNs6chA1MB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLWC87wKf9IA2rmhh1nuxuW0OEiMY4OvcAnUO6l5LssbgwBPCmNjAp bFuylvX9HpGBFIKWGFDvSTJitRSzKTHB6CgzMsd9w2EG9R5tJxR2jJZB1Px4vN0P Y1L85Eeeh/EvZ2l8rc4nFw6rygILrnjmie6bMbiEng2XX4pLXTDyMi1G58gzkBmj xlDTNhCwasZRtHIFYZQnNLO/5CPnUY9Yg4aRHQWrFD17pedLIAm5BAZx70BbOz4U cwEPEJaJudh2TaRvxeg3hQDVBHIaaH23yLnKUF4nzIueQk2A6UXTvWJ//gkuY335 iQelr9OMliU9TVYQ9ZmO7KVQliUEtq3T -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:07 2025 by rpki-client