$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: /BTBPjeDBgdxhu9Kv1sXgmfFT0qeYawJs2XRDdBEqpA= Subject key identifier: AF:CF:66:FA:1F:9E:95:A9:BE:06:7A:B3:D8:FB:3C:D0:0D:B2:69:1E Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 0539 Signing time: Sun 19 Oct 2025 01:13:24 +0000 Manifest this update: Sun 19 Oct 2025 01:13:23 +0000 Manifest next update: Sun 26 Oct 2025 01:13:23 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: X0nEn1JUe3HKMHTWpjbBnH5K783YXGsQWTWdv8+ukKc=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: oYHvUKynZFPSJ3FylmI/CTRVw9bAxjjFqxPHbv5+ER8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Oct 19 01:13:23 2025 GMT Not After : Oct 26 01:13:23 2025 GMT Subject: CN=68f43b33-1697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:f0:ba:00:90:e7:6f:17:16:4e:a1:ae:86: d2:8e:69:a6:b0:af:e7:ef:65:97:74:1e:0a:28:ab: 4a:f1:ae:13:a3:1f:36:27:14:33:86:2f:32:cc:ba: be:79:ec:5a:79:df:48:5a:da:9e:6c:3f:33:6f:fd: 10:d6:85:b3:a2:13:5c:89:e1:d9:54:c0:60:fb:1e: 89:24:aa:26:d0:0a:32:3c:0b:08:9f:77:eb:17:ef: 9e:0f:6d:2e:15:41:f2:68:02:18:88:fd:3f:24:de: 1d:05:63:50:01:d0:d1:c8:96:34:20:a2:e4:a5:a7: d7:89:33:5f:4d:1b:b8:b5:74:18:92:eb:96:4f:7a: 34:df:f3:c4:3d:f7:b5:29:c5:86:f4:7b:fd:45:6a: 31:50:99:78:ca:8c:0e:b4:c4:06:5a:89:d4:b6:15: 3a:bf:14:ad:2a:aa:60:e7:10:11:09:20:a7:e6:3e: 8c:dc:11:2b:30:9b:c5:5f:b3:4f:c0:01:22:31:26: ce:4b:13:7d:c9:63:2a:9b:5d:e2:59:14:3a:05:f1: ed:0f:01:d1:83:e6:a5:95:a7:f3:0b:42:c4:42:e7: b8:15:64:7b:f2:6a:72:64:c8:5d:71:32:85:5f:8a: b2:6c:36:91:21:e8:c2:92:b0:11:f2:67:63:84:be: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CF:66:FA:1F:9E:95:A9:BE:06:7A:B3:D8:FB:3C:D0:0D:B2:69:1E X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bf:02:31:04:ef:4d:23:a6:a4:da:89:58:69:9c:36:e0:26: 18:bb:57:66:24:1e:78:82:d5:ea:fc:8b:ba:48:0e:04:4a:04: 5d:92:30:c3:3f:1b:31:17:a2:5e:2b:8d:65:bb:0f:73:c9:da: 8a:83:59:09:2e:01:56:66:37:72:2f:ef:ca:61:b6:b1:c7:ad: 82:aa:32:ce:de:44:4f:44:e5:ea:59:7b:46:3c:52:70:49:71: f1:49:d7:57:96:3c:0c:ad:63:4f:5c:a0:86:ca:31:a1:10:9a: f2:e6:15:4d:be:2f:32:99:1b:e3:2e:ca:f2:0f:b2:94:f7:23: 2f:b8:d7:0c:12:4e:b8:03:c5:d8:90:bc:c9:06:f2:8e:8a:6a: e0:3a:4f:52:77:5c:ca:e6:46:23:db:dc:b8:44:61:dc:ab:3b: 56:26:4a:1a:a0:dc:ce:ab:89:27:16:e0:2f:8a:be:97:29:df: b6:89:0a:71:f8:06:e1:8c:5a:e7:32:52:be:f2:7d:ca:0e:89: a8:13:35:00:0a:fd:3f:cf:85:9d:bf:4a:fd:ac:66:8c:c7:04: 4e:e7:ef:bc:04:00:3a:ec:50:a4:b7:4b:4f:a1:a9:c9:4b:47: 27:90:9f:03:b2:27:7a:3e:79:09:03:94:3c:59:84:01:cc:c6: 4c:c1:49:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjUxMDE5MDExMzIzWhcNMjUxMDI2MDExMzIzWjAYMRYwFAYD VQQDEw02OGY0M2IzMy0xNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8jwugCQ528XFk6hrobSjmmmsK/n72WXdB4KKKtK8a4Tox82JxQzhi8yzLq+ eexaed9IWtqebD8zb/0Q1oWzohNcieHZVMBg+x6JJKom0AoyPAsIn3frF++eD20u FUHyaAIYiP0/JN4dBWNQAdDRyJY0IKLkpafXiTNfTRu4tXQYkuuWT3o03/PEPfe1 KcWG9Hv9RWoxUJl4yowOtMQGWonUthU6vxStKqpg5xARCSCn5j6M3BErMJvFX7NP wAEiMSbOSxN9yWMqm13iWRQ6BfHtDwHRg+allafzC0LEQue4FWR78mpyZMhdcTKF X4qybDaRIejCkrAR8mdjhL53FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/PZvof npWpvgZ6s9j7PNANsmkeMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUvwIxBO9NI6ak2olYaZw24CYYu1dmJB54gtXq/Iu6SA4ESgRdkjDD PxsxF6JeK41luw9zydqKg1kJLgFWZjdyL+/KYbaxx62CqjLO3kRPROXqWXtGPFJw SXHxSddXljwMrWNPXKCGyjGhEJry5hVNvi8ymRvjLsryD7KU9yMvuNcMEk64A8XY kLzJBvKOimrgOk9Sd1zK5kYj29y4RGHcqztWJkoaoNzOq4knFuAvir6XKd+2iQpx +AbhjFrnMlK+8n3KDomoEzUACv0/z4Wdv0r9rGaMxwRO5++8BAA67FCkt0tPoanJ S0cnkJ8Dsid6PnkJA5Q8WYQBzMZMwUmg -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:52 2025 by rpki-client