$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: oBLCTT9d+L4e+0qABQ4jpvn8BeRD7DqvO0HCfc5BtjY= Subject key identifier: B3:89:2C:6C:0A:CA:16:16:52:4F:37:0E:D7:1A:23:99:94:B9:4E:A8 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 0224 Signing time: Sun 19 Oct 2025 04:15:35 +0000 Manifest this update: Sun 19 Oct 2025 04:15:35 +0000 Manifest next update: Sun 26 Oct 2025 04:15:35 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: Z7TzcvOAl96atFdu8bqYYUeRhRuFyq5KvH2wzLVP1HQ=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: Bfu/ALycXYH90jyLAqZWBRVy+FwJZTHe9HY8IeLE+Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Oct 19 04:15:35 2025 GMT Not After : Oct 26 04:15:35 2025 GMT Subject: CN=68f465e7-c5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:04:0f:18:20:25:32:19:98:59:fc:0f:a3: 99:2d:a9:25:a3:e4:ae:de:f7:d6:ae:84:2a:c5:b1: d5:53:20:d3:70:dd:f6:a5:61:32:82:f1:06:1b:60: f7:7c:90:81:f0:06:d4:9a:48:65:38:18:a8:75:c2: e7:f8:8e:b4:15:28:bf:96:e8:27:03:6f:4f:e1:92: dc:94:90:07:54:0c:23:2c:af:93:b6:46:1a:34:71: a8:07:4c:c6:0f:dd:e4:ff:c9:74:f9:e2:a8:21:44: c4:0d:e6:79:bc:3a:93:77:1b:51:21:ba:30:68:7a: e4:09:76:a3:5c:71:f8:12:be:84:4c:32:d3:0a:b8: 79:b8:71:a7:42:f4:fb:d3:17:91:8a:31:15:65:21: 2a:6b:6b:36:ab:35:a1:6d:b6:07:cc:b8:52:ac:71: c6:89:cc:24:b3:b7:05:ca:2c:ec:27:12:af:14:bf: 45:61:97:92:fe:12:eb:21:be:6f:b3:e1:75:54:cd: c3:39:91:b1:86:b2:17:e8:35:37:51:e4:77:77:7f: a2:d5:48:e7:54:bb:dd:46:4a:71:83:c9:a5:e6:fe: 98:4c:7d:52:d0:3b:c4:6f:3d:24:0a:da:8c:a3:09: 7c:fb:87:6b:28:96:dd:f6:26:1d:b3:e5:91:8a:6c: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:2C:6C:0A:CA:16:16:52:4F:37:0E:D7:1A:23:99:94:B9:4E:A8 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e1:91:10:80:b8:e4:4a:f3:eb:fa:eb:6f:ec:fa:66:08:59: ef:c3:d0:fe:f7:73:4c:49:91:88:12:61:c1:a6:62:ea:e5:06: af:ac:e0:fd:da:45:51:14:eb:1d:4d:56:b6:25:75:a4:24:a6: 93:c2:cf:94:af:03:62:50:8f:06:50:90:24:2e:fc:63:ba:38: 8c:01:c3:17:5a:f3:84:58:9c:cb:19:9b:4a:b8:ea:0f:85:69: ea:f5:e6:1d:3f:da:67:0a:f9:23:8f:37:4b:3b:08:3c:ae:f8: dd:e7:c6:42:d8:24:e8:07:e1:00:58:26:c9:43:d1:b7:cf:97: 53:03:a4:5d:e1:7f:5d:b2:61:38:c7:2a:bb:90:eb:5a:51:5c: cb:21:b8:93:a1:62:42:8d:96:73:99:08:a9:52:c9:a8:d3:91: 49:cd:db:40:2f:56:2e:0b:dd:1e:20:cf:c7:c0:ac:4b:92:9c: c7:37:bf:b0:0c:0b:a1:f2:c0:42:b0:fd:75:52:6d:e8:26:c6: 87:d3:e9:45:83:48:1a:90:db:4b:47:3d:b1:9c:9a:9f:2c:02: 3d:68:ba:b9:01:3e:dc:10:dc:01:9b:5f:33:24:6c:69:f2:18: ee:2b:3e:80:c9:be:97:c0:b6:e7:6d:d9:b6:5b:6e:fc:a9:c6: 14:b9:a9:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUxMDE5MDQxNTM1WhcNMjUxMDI2MDQxNTM1WjAYMRYwFAYD VQQDEw02OGY0NjVlNy1jNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+4EDxggJTIZmFn8D6OZLaklo+Su3vfWroQqxbHVUyDTcN32pWEygvEGG2D3 fJCB8AbUmkhlOBiodcLn+I60FSi/lugnA29P4ZLclJAHVAwjLK+TtkYaNHGoB0zG D93k/8l0+eKoIUTEDeZ5vDqTdxtRIbowaHrkCXajXHH4Er6ETDLTCrh5uHGnQvT7 0xeRijEVZSEqa2s2qzWhbbYHzLhSrHHGicwks7cFyizsJxKvFL9FYZeS/hLrIb5v s+F1VM3DOZGxhrIX6DU3UeR3d3+i1UjnVLvdRkpxg8ml5v6YTH1S0DvEbz0kCtqM owl8+4drKJbd9iYds+WRimxBXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOJLGwK yhYWUk83DtcaI5mUuU6oMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA84ZEQgLjkSvPr+utv7PpmCFnvw9D+93NMSZGIEmHBpmLq5QavrOD9 2kVRFOsdTVa2JXWkJKaTws+UrwNiUI8GUJAkLvxjujiMAcMXWvOEWJzLGZtKuOoP hWnq9eYdP9pnCvkjjzdLOwg8rvjd58ZC2CToB+EAWCbJQ9G3z5dTA6Rd4X9dsmE4 xyq7kOtaUVzLIbiToWJCjZZzmQipUsmo05FJzdtAL1YuC90eIM/HwKxLkpzHN7+w DAuh8sBCsP11Um3oJsaH0+lFg0gakNtLRz2xnJqfLAI9aLq5AT7cENwBm18zJGxp 8hjuKz6Ayb6XwLbnbdm2W278qcYUuanM -----END CERTIFICATE-----Generated at Mon Oct 20 16:44:07 2025 by rpki-client