$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: jG9bWJwfzGCc7p+zcgBAvGOVsl8zBPCj4j7DDv2JRpg= Subject key identifier: 11:37:C4:CD:EC:E3:1C:3C:78:5C:D0:B8:0E:C2:F5:38:5B:F7:BB:37 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 017A Signing time: Sun 19 Oct 2025 06:22:18 +0000 Manifest this update: Sun 19 Oct 2025 06:22:17 +0000 Manifest next update: Sun 26 Oct 2025 06:22:17 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: mn1kaqqdV6wIQTOu8ZzhCfmHcDuTJu7zOYCNxDkQydE=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Oct 19 06:22:17 2025 GMT Not After : Oct 26 06:22:17 2025 GMT Subject: CN=68f4839a-cc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:28:42:fd:d0:1c:10:50:c7:ad:0f:96:dc: ac:5c:2d:b5:a9:43:b2:4d:11:0b:12:50:f8:b3:40: 85:2b:b6:35:f7:29:bd:48:1a:7f:b5:a2:c9:5f:27: c7:47:ec:74:5b:14:a2:d3:41:e0:28:66:cb:d5:cb: 2e:be:b1:a7:0c:4c:20:2e:70:da:2a:7a:dc:34:6c: 4a:b0:76:43:68:f0:fb:a8:be:a2:42:41:50:03:27: 15:a8:8b:8d:fb:40:12:bd:3c:b3:f0:5e:4f:1e:54: db:f3:df:69:4d:e9:37:9b:43:10:a1:eb:60:df:cd: b3:55:a8:77:52:8b:5f:6f:c7:d5:16:7f:87:fc:eb: 51:2b:d6:65:e5:eb:66:09:85:b2:0f:08:53:db:06: 9e:df:ba:aa:d6:57:c4:b8:45:2a:71:ff:ee:a2:6c: cf:f6:33:61:de:dc:7d:22:31:a3:e2:e5:17:66:56: 33:74:7f:24:fb:da:a5:ac:0c:f7:50:ae:4d:90:10: c6:72:f9:44:8a:1c:9e:13:b5:cd:f0:e6:42:1d:fe: 51:b7:f1:6e:08:bd:84:ea:da:ec:da:11:7f:3e:09: c1:62:a6:f9:fb:f6:48:3e:ea:75:e3:47:6f:7e:9a: 62:b3:40:33:42:37:3e:44:f0:5a:1c:af:b3:00:cf: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:37:C4:CD:EC:E3:1C:3C:78:5C:D0:B8:0E:C2:F5:38:5B:F7:BB:37 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b8:37:d6:e3:c1:08:b4:86:54:bb:8b:4f:a6:eb:b1:92:bc: 73:e9:2b:6b:a7:14:7b:3c:a9:54:8f:bd:19:f1:c1:e5:4b:a4: 15:de:15:71:3f:ad:d1:b4:63:97:2c:e1:e0:a5:d8:52:d4:e0: c4:ad:be:8d:2e:79:54:14:ae:93:61:c0:4e:be:a8:2e:b0:87: 1b:41:2e:5e:ba:ae:5c:73:49:0a:8e:98:05:4f:37:90:de:99: 00:a1:96:16:8e:12:47:68:48:32:38:87:d2:29:46:3d:a1:2c: cd:03:2d:49:2f:74:f7:a0:36:01:54:a9:0c:51:44:58:a8:28: e7:06:3f:07:00:a3:e6:b4:44:42:ad:79:6f:78:64:5c:21:49: b7:d9:f7:8a:c7:c4:31:aa:30:fa:3a:6c:5f:f3:ec:85:13:22: 65:d0:f5:ec:f7:32:70:b8:12:37:d7:46:1a:fa:7a:dc:7f:8a: 55:01:f8:07:f5:d4:98:0d:dd:69:2e:87:2f:7a:9c:01:61:46: 96:55:32:37:5b:a2:83:9d:97:ab:94:b5:13:d8:0e:8e:99:ce: e9:75:f7:d0:ad:4e:04:e6:57:5a:1e:62:cc:bc:36:17:21:4c: 9a:83:3e:36:36:d8:44:51:61:65:fc:4c:e4:a0:22:3b:de:a7: 52:2c:f7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUxMDE5MDYyMjE3WhcNMjUxMDI2MDYyMjE3WjAYMRYwFAYD VQQDEw02OGY0ODM5YS1jYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl4oQv3QHBBQx60PltysXC21qUOyTRELElD4s0CFK7Y19ym9SBp/taLJXyfH R+x0WxSi00HgKGbL1csuvrGnDEwgLnDaKnrcNGxKsHZDaPD7qL6iQkFQAycVqIuN +0ASvTyz8F5PHlTb899pTek3m0MQoetg382zVah3Uotfb8fVFn+H/OtRK9Zl5etm CYWyDwhT2wae37qq1lfEuEUqcf/uomzP9jNh3tx9IjGj4uUXZlYzdH8k+9qlrAz3 UK5NkBDGcvlEihyeE7XN8OZCHf5Rt/FuCL2E6trs2hF/PgnBYqb5+/ZIPup140dv fppis0AzQjc+RPBaHK+zAM8TcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE3xM3s 4xw8eFzQuA7C9Thb97s3MB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0uDfW48EItIZUu4tPpuuxkrxz6StrpxR7PKlUj70Z8cHlS6QV3hVx P63RtGOXLOHgpdhS1ODErb6NLnlUFK6TYcBOvqgusIcbQS5euq5cc0kKjpgFTzeQ 3pkAoZYWjhJHaEgyOIfSKUY9oSzNAy1JL3T3oDYBVKkMUURYqCjnBj8HAKPmtERC rXlveGRcIUm32feKx8QxqjD6Omxf8+yFEyJl0PXs9zJwuBI310Ya+nrcf4pVAfgH 9dSYDd1pLocvepwBYUaWVTI3W6KDnZerlLUT2A6Omc7pdffQrU4E5ldaHmLMvDYX IUyagz42NthEUWFl/EzkoCI73qdSLPdf -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:03 2025 by rpki-client