$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: ffcLPVSDh3bq0qarv0FCjrPfid2H76nPpvNqA1dimiw= Subject key identifier: DB:15:0F:C8:7E:52:37:B9:17:FA:AE:8F:0C:18:73:43:3A:88:30:32 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 2303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 22C0 Signing time: Sat 18 Oct 2025 16:06:34 +0000 Manifest this update: Sat 18 Oct 2025 16:06:33 +0000 Manifest next update: Sat 25 Oct 2025 16:06:33 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: PRHtrNcsJ7HiDesXm9gi3bUKeRvIWvAN2dScCSo2Cow=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8963 (0x2303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Oct 18 16:06:33 2025 GMT Not After : Oct 25 16:06:33 2025 GMT Subject: CN=68f3bb09-b1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:b1:66:f8:c6:7b:65:a9:ba:4d:33:ac:3a: c8:43:41:20:08:df:8d:0d:6c:cd:2d:73:02:0c:d9: ae:bc:48:9d:9c:c2:a0:69:d6:0d:0c:8a:6f:5c:97: 75:1b:0a:b5:31:73:bb:8a:fe:a2:77:24:e1:31:34: 19:30:d6:5c:64:cb:1a:36:9b:0a:da:b4:42:d0:f0: b7:2d:cb:47:12:97:0c:c8:a5:bb:77:85:06:11:7c: 24:0d:ea:1a:8c:74:2f:51:88:b8:13:7a:4b:f1:49: d2:20:7a:66:41:da:7b:c6:24:6f:95:a4:09:be:26: a8:cf:0d:ae:6d:c6:2a:49:03:a9:79:58:44:aa:24: 08:ed:94:52:08:aa:80:cb:33:2f:0a:f7:a5:57:0a: 02:3b:58:0b:7b:b8:21:a8:fa:05:6e:73:ed:cb:bc: df:d1:4b:8b:88:25:4c:7c:88:b7:f4:2a:a7:d3:c4: 53:ec:e6:13:f5:63:40:2a:58:8b:d8:0c:d3:d6:59: 67:34:59:44:f9:d6:bf:93:3b:ce:2e:74:99:34:d8: 3a:76:a9:23:1c:9f:b5:21:3a:8a:14:c8:a2:41:70: 42:24:94:b5:49:09:3a:00:cb:c1:82:3f:4d:4f:05: 1d:b2:b2:f5:f0:42:8e:91:41:83:15:71:9b:cc:6d: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:0F:C8:7E:52:37:B9:17:FA:AE:8F:0C:18:73:43:3A:88:30:32 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:3b:e2:16:66:b1:53:4d:b2:3b:6e:53:22:cb:ef:ec:f0: 38:b3:a7:ee:af:1c:97:86:6c:72:44:76:c9:3b:8c:eb:45:6e: 6b:f7:02:41:11:64:9b:4b:4a:11:60:f6:3f:57:85:10:e0:fa: 02:e1:2e:01:11:70:62:20:86:b4:8e:98:46:4f:3a:85:8c:14: 9c:66:a9:ea:81:61:70:4c:3d:70:6d:f3:e2:a0:1c:6e:ce:cd: 18:b6:97:e9:6b:58:e1:69:3e:2a:bb:ce:02:84:5c:eb:58:55: 9f:f1:02:f5:93:85:9d:f6:31:4f:e7:30:85:b7:5c:16:16:62: 4b:47:df:eb:57:be:7d:45:51:05:13:27:74:8b:fe:9a:2d:48: 55:46:5a:d8:30:3c:36:e0:f7:da:74:10:35:7a:44:23:74:33: 6d:5c:89:b7:b4:f2:c6:a4:cf:e2:36:6c:fe:8e:5c:9c:4c:b7: b0:b1:3b:6f:1a:bc:fa:9e:d3:f6:5c:05:a3:34:98:4c:96:d0: 79:ce:32:ef:58:05:2d:8f:68:e1:56:b0:52:b4:13:0d:4a:01: f1:a4:26:7f:d5:d7:75:ce:f3:97:ef:56:8b:1e:b1:e9:9a:4a: de:e8:9a:5b:0c:cb:fb:fd:6d:3b:68:18:75:4b:52:56:d8:fd: f7:4d:92:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUxMDE4MTYwNjMzWhcNMjUxMDI1MTYwNjMzWjAYMRYwFAYD VQQDEw02OGYzYmIwOS1iMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqixZvjGe2Wpuk0zrDrIQ0EgCN+NDWzNLXMCDNmuvEidnMKgadYNDIpvXJd1 Gwq1MXO7iv6idyThMTQZMNZcZMsaNpsK2rRC0PC3LctHEpcMyKW7d4UGEXwkDeoa jHQvUYi4E3pL8UnSIHpmQdp7xiRvlaQJviaozw2ubcYqSQOpeVhEqiQI7ZRSCKqA yzMvCvelVwoCO1gLe7ghqPoFbnPty7zf0UuLiCVMfIi39Cqn08RT7OYT9WNAKliL 2AzT1llnNFlE+da/kzvOLnSZNNg6dqkjHJ+1ITqKFMiiQXBCJJS1SQk6AMvBgj9N TwUdsrL18EKOkUGDFXGbzG0d6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsVD8h+ Uje5F/qujwwYc0M6iDAyMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBilDviFmaxU02yO25TIsvv7PA4s6furxyXhmxyRHbJO4zrRW5r9wJB EWSbS0oRYPY/V4UQ4PoC4S4BEXBiIIa0jphGTzqFjBScZqnqgWFwTD1wbfPioBxu zs0Ytpfpa1jhaT4qu84ChFzrWFWf8QL1k4Wd9jFP5zCFt1wWFmJLR9/rV759RVEF Eyd0i/6aLUhVRlrYMDw24PfadBA1ekQjdDNtXIm3tPLGpM/iNmz+jlycTLewsTtv Grz6ntP2XAWjNJhMltB5zjLvWAUtj2jhVrBStBMNSgHxpCZ/1dd1zvOX71aLHrHp mkre6JpbDMv7/W07aBh1S1JW2P33TZLu -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:54 2025 by rpki-client