$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json) Hash identifier: vuMETFtXj2hIOhtU78mkcxqx72QFi1gonkooNcA4wLQ= Subject key identifier: 50:AA:FB:53:B4:25:24:63:E3:A1:F2:F9:67:B9:1D:A4:B4:52:4B:3B Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft Manifest number: 069F Signing time: Sat 18 Oct 2025 23:48:59 +0000 Manifest this update: Sat 18 Oct 2025 23:48:59 +0000 Manifest next update: Sat 25 Oct 2025 23:48:59 +0000 Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: vN60xQ4PigAPRX7uR7x2OAJ/vATK6lrm1BaYlAxYYs0=) 2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: RzJGgawBbn3xUezpVG2c9suPVgigMwJa0fSwMeigVU8=) 3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: dsN/B56rqWk3m7WjQOyUkNCCDpI9L9GI0dqzzx2vJVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Validity Not Before: Oct 18 23:48:59 2025 GMT Not After : Oct 25 23:48:59 2025 GMT Subject: CN=68f4276b-5cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:e0:81:b3:a5:92:6e:67:cd:11:df:66:80: 09:9b:5a:18:fd:de:74:3d:9a:2e:7e:93:68:5d:e8: f8:c7:f5:ba:07:30:91:4a:fb:98:e5:a7:d5:03:79: b4:16:23:04:45:7f:14:b3:d2:89:60:e2:10:f3:a0: 4d:45:3d:04:12:53:a2:36:ba:b0:bf:61:5e:dd:28: 08:f5:d1:d3:52:c6:e4:e9:58:5e:af:0a:b3:c7:9f: 28:fe:3e:6d:40:82:c7:ad:e9:cd:fc:51:5e:39:e0: 8f:b7:14:22:05:ac:bb:9e:5c:17:c0:10:16:62:57: 7f:41:a8:6a:25:e6:07:5c:3c:37:c8:0c:49:5e:83: 56:25:60:35:e7:e0:61:b4:ab:1a:fd:d7:00:18:66: 90:34:06:94:64:86:a1:93:c7:48:3f:81:06:81:f0: 37:10:fe:cf:16:e4:5f:86:21:4c:4f:17:d4:e4:18: 1d:0c:79:d9:b6:36:94:21:f5:49:52:22:57:b6:d9: 4d:fd:6d:bd:17:40:38:2e:65:f5:59:39:ae:ae:36: 48:c5:de:0b:1a:14:1f:df:42:cb:aa:78:9d:d1:78: 0a:99:95:0e:11:89:08:ed:fc:27:69:21:9b:75:84: 8a:4d:48:f0:55:a4:79:3d:d8:ca:aa:b7:1c:7e:fc: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AA:FB:53:B4:25:24:63:E3:A1:F2:F9:67:B9:1D:A4:B4:52:4B:3B X509v3 Authority Key Identifier: keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:24:98:20:58:c3:eb:4f:8f:94:27:1c:d4:06:42:5d:b8:1a: 76:8a:32:53:4e:62:27:e1:4e:7b:67:04:ef:41:a8:cd:cd:59: be:5c:4c:1a:87:84:b8:81:76:ce:3d:dc:5c:33:3f:b1:97:9a: bb:2e:f5:38:fe:30:32:5b:52:47:a7:df:bc:4e:88:5c:68:06: 9b:ef:e9:55:b1:ff:0a:bd:4e:ee:64:20:ca:a2:e1:9e:12:73: c9:ed:60:d2:63:59:bc:ab:17:3a:49:4f:ad:84:2a:6f:b8:7c: c3:81:92:f5:bc:13:0f:f3:be:42:3c:50:1f:8b:5e:32:24:f4: d5:eb:2d:f7:e8:2c:33:d6:f1:0c:64:33:77:d6:a7:c1:33:16: 47:51:2f:d3:9a:3e:02:43:7f:68:e8:ee:32:f1:41:26:c0:21: 63:4f:eb:c1:3a:12:62:1f:37:98:b3:38:4a:61:57:a0:24:66: e5:7b:bd:32:a2:f0:fe:fa:fc:29:80:f6:ba:62:13:d1:b4:ed: ee:41:d5:a3:c6:60:0c:95:86:49:71:74:58:d7:af:03:df:26: 03:c6:80:66:c2:07:6c:4b:6f:bb:62:d2:0b:ce:88:04:25:2d: f5:7c:6a:11:9c:f1:ad:ce:bc:db:40:b6:5b:37:49:d7:0e:ef: c6:41:97:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBRTIxMTAvBgNVBAUTKDY4NTk1Qjk4RTRDMjdCMzBCQUEzMzFDRUFBQzcyNjE3 NjdDQjkyRUIwHhcNMjUxMDE4MjM0ODU5WhcNMjUxMDI1MjM0ODU5WjAYMRYwFAYD VQQDEw02OGY0Mjc2Yi01Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU/ggbOlkm5nzRHfZoAJm1oY/d50PZoufpNoXej4x/W6BzCRSvuY5afVA3m0 FiMERX8Us9KJYOIQ86BNRT0EElOiNrqwv2Fe3SgI9dHTUsbk6Vherwqzx58o/j5t QILHrenN/FFeOeCPtxQiBay7nlwXwBAWYld/QahqJeYHXDw3yAxJXoNWJWA15+Bh tKsa/dcAGGaQNAaUZIahk8dIP4EGgfA3EP7PFuRfhiFMTxfU5BgdDHnZtjaUIfVJ UiJXttlN/W29F0A4LmX1WTmurjZIxd4LGhQf30LLqnid0XgKmZUOEYkI7fwnaSGb dYSKTUjwVaR5PdjKqrccfvyY+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCq+1O0 JSRj46Hy+We5HaS0Uks7MB8GA1UdIwQYMBaAFGhZW5jkwnswuqMxzqrHJhdny5Lr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUFFMi84QUI4QzE4QTg3 QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6QzZvekhPcXNjbUYyZkxr dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGbGJtT1RDZXpDNm96SE9xc2NtRjJmTGt1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUFFMi84QUI4QzE4QTg3QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6 QzZvekhPcXNjbUYyZkxrdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZJJggWMPrT4+UJxzUBkJduBp2ijJTTmIn4U57ZwTvQajNzVm+XEwa h4S4gXbOPdxcMz+xl5q7LvU4/jAyW1JHp9+8TohcaAab7+lVsf8KvU7uZCDKouGe EnPJ7WDSY1m8qxc6SU+thCpvuHzDgZL1vBMP875CPFAfi14yJPTV6y336Cwz1vEM ZDN31qfBMxZHUS/Tmj4CQ39o6O4y8UEmwCFjT+vBOhJiHzeYszhKYVegJGble70y ovD++vwpgPa6YhPRtO3uQdWjxmAMlYZJcXRY168D3yYDxoBmwgdsS2+7YtILzogE JS31fGoRnPGtzrzbQLZbN0nXDu/GQZfA -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:10 2025 by rpki-client