$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: 6B87+lyvBnigE/VKjhMgldjdmO0oDGKZKvDrdum6/D4= Subject key identifier: 4E:A7:4C:D5:F6:31:F5:EA:23:13:90:BD:E7:E0:1E:6E:58:E9:D8:79 Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 07DB Signing time: Sat 18 Oct 2025 22:23:58 +0000 Manifest this update: Sat 18 Oct 2025 22:23:57 +0000 Manifest next update: Sat 25 Oct 2025 22:23:57 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: sRJBLOxowsgLrtS0S7ApTnTtXoWFbLu2MkSuVIyVrZc=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Oct 18 22:23:57 2025 GMT Not After : Oct 25 22:23:57 2025 GMT Subject: CN=68f4137e-0e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:62:6f:dc:50:e3:0a:fd:55:f4:26:86:ac: c6:9a:45:cf:12:1b:0f:20:1d:db:7a:ae:cd:2e:11: b2:5a:a9:db:92:92:c4:d7:c0:3a:ef:00:05:c3:6c: 01:31:27:46:96:82:f6:f7:c2:f0:e1:61:e0:bb:06: 72:d0:6a:58:6c:13:2f:55:28:78:72:39:9c:52:73: 3d:ae:12:2c:27:c7:65:5b:bd:bb:b5:c7:bf:e6:40: ad:0b:3d:e7:13:d1:60:63:e5:3f:9a:31:fe:af:2e: e0:ee:0b:b1:3d:29:06:c9:1c:ea:30:7f:aa:2a:8e: 2b:f1:08:ec:40:56:22:b4:68:a5:13:ca:e8:89:4a: f0:34:d1:5d:d0:1e:f8:8a:68:95:1b:b5:3b:55:b5: cc:1b:79:d2:ab:f9:ae:bd:5d:ff:2d:71:92:43:69: 8f:d6:e0:d3:34:60:05:82:a6:cc:3e:e4:2a:8d:44: bd:d8:df:f9:73:f5:91:ff:09:d7:86:8b:4e:6b:ac: 03:15:31:5c:fe:83:4a:07:28:4e:bf:91:53:30:ad: dc:ec:71:dd:c2:da:65:b9:5d:4b:54:9b:ea:eb:89: c6:36:14:cf:04:6c:6c:a8:bf:8e:88:fd:cf:af:6e: ba:a5:ed:f7:3e:61:42:7a:8c:da:34:dd:66:9b:3d: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A7:4C:D5:F6:31:F5:EA:23:13:90:BD:E7:E0:1E:6E:58:E9:D8:79 X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:56:b2:36:56:2b:e4:99:cd:5e:f8:b7:5d:57:45:11:4d:ca: 2c:ab:f0:44:66:37:41:bc:4c:33:28:87:77:54:ec:1f:06:2a: 09:b0:10:5c:eb:3c:5d:76:11:3d:09:48:5d:59:34:eb:db:01: fe:15:61:b1:32:80:10:c2:8c:d6:93:c9:08:68:2b:b1:cc:04: dc:cb:c0:6b:b2:5a:79:e9:bf:83:32:3c:b9:40:b0:10:85:4e: b1:64:67:8b:17:30:64:6e:11:79:18:70:e7:fa:ad:01:32:7c: 9f:d1:45:87:0e:0f:a4:70:86:1b:c1:69:4d:03:ed:ae:37:06: fa:0e:a7:ba:d8:f5:ca:4e:de:ce:dc:75:9e:d3:20:ef:6f:56: 70:e9:a8:82:71:1a:61:1c:9b:fd:ae:7b:ec:f9:90:c3:ed:c9: a3:50:1a:25:f3:30:2a:4a:47:c5:3a:c3:08:15:a0:c4:8b:cd: af:95:bd:3a:db:38:59:89:7d:da:97:9f:36:06:60:8e:b3:52: 44:c2:40:32:03:17:6a:8a:54:df:a7:b3:56:9b:34:2c:6d:5c: 48:52:8f:14:32:e9:cf:93:fb:db:63:a6:49:ce:4f:07:45:79: 41:56:ee:ba:8d:37:f5:36:d0:06:51:93:1a:2c:6a:0a:77:d2: 9e:8d:b5:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUxMDE4MjIyMzU3WhcNMjUxMDI1MjIyMzU3WjAYMRYwFAYD VQQDEw02OGY0MTM3ZS0wZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMpib9xQ4wr9VfQmhqzGmkXPEhsPIB3beq7NLhGyWqnbkpLE18A67wAFw2wB MSdGloL298Lw4WHguwZy0GpYbBMvVSh4cjmcUnM9rhIsJ8dlW727tce/5kCtCz3n E9FgY+U/mjH+ry7g7guxPSkGyRzqMH+qKo4r8QjsQFYitGilE8roiUrwNNFd0B74 imiVG7U7VbXMG3nSq/muvV3/LXGSQ2mP1uDTNGAFgqbMPuQqjUS92N/5c/WR/wnX hotOa6wDFTFc/oNKByhOv5FTMK3c7HHdwtpluV1LVJvq64nGNhTPBGxsqL+OiP3P r266pe33PmFCeozaNN1mmz0RjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6nTNX2 MfXqIxOQvefgHm5Y6dh5MB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALVrI2Vivkmc1e+LddV0URTcosq/BEZjdBvEwzKId3VOwfBioJsBBc 6zxddhE9CUhdWTTr2wH+FWGxMoAQwozWk8kIaCuxzATcy8Brslp56b+DMjy5QLAQ hU6xZGeLFzBkbhF5GHDn+q0BMnyf0UWHDg+kcIYbwWlNA+2uNwb6Dqe62PXKTt7O 3HWe0yDvb1Zw6aiCcRphHJv9rnvs+ZDD7cmjUBol8zAqSkfFOsMIFaDEi82vlb06 2zhZiX3al582BmCOs1JEwkAyAxdqilTfp7NWmzQsbVxIUo8UMunPk/vbY6ZJzk8H RXlBVu66jTf1NtAGUZMaLGoKd9KejbUy -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:37 2025 by rpki-client