$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: TJpwLClo9jPBntgUWwoNVj3rS3X1+Tkg24bqr64kVR0= Subject key identifier: F4:47:FE:EA:24:02:8A:DB:A4:52:40:EA:5F:37:B3:51:29:DC:56:8E Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 011B Signing time: Sun 19 Oct 2025 07:43:20 +0000 Manifest this update: Sun 19 Oct 2025 07:43:19 +0000 Manifest next update: Sun 26 Oct 2025 07:43:19 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: q6XYFKMdgRhwC/SaKj/vEddPCCwstNpJ8ooqQn77+Ug=) 2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: jXqxc10SyUCzWVj9PPPMNw2b7v248uGR+j4feRoYBdI=) 3: C591C650781311F080669C0EC4F9AE02.roa (hash: WdqV1sxOirOUn9ZhlZhPe2M8qixZkx77pHk6AUB3MBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Oct 19 07:43:19 2025 GMT Not After : Oct 26 07:43:19 2025 GMT Subject: CN=68f49697-1cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:cf:fe:de:37:a6:d3:a9:49:84:78:89:f6: d7:8b:28:61:7b:47:70:d3:de:b7:2a:53:95:2e:11: 2b:77:68:22:14:fd:c0:22:1c:d8:ba:33:3b:ea:43: 1c:3f:24:e5:05:12:d4:94:7c:41:7a:74:5a:e5:25: 16:d2:55:75:3c:a3:6e:5a:3e:2b:0f:d2:11:e6:57: b9:dc:ca:aa:c1:dc:95:a5:11:71:0b:40:5d:0b:c5: 81:e7:2f:f9:18:dc:1f:b3:e8:26:d2:75:1a:b3:6f: 36:15:08:c7:25:15:df:16:60:71:7c:6b:1d:52:71: 8a:42:64:a3:7b:1b:1a:00:d8:7f:18:35:41:55:41: 80:74:0c:f3:c7:6e:e9:f4:de:a9:a6:20:f6:69:e8: 49:39:d0:08:95:97:1c:78:03:92:1d:a9:4a:a8:73: 88:d6:d6:c7:37:93:7a:8d:8d:b9:c6:dd:ed:86:2a: de:1a:9e:01:74:0e:03:91:aa:cb:69:42:1d:43:a4: 8e:79:9e:d1:5e:4e:20:4d:ca:30:9e:90:ae:00:9d: 3d:5b:f9:b3:9f:8d:ea:00:9d:39:a2:18:65:9a:db: 49:ee:d1:5c:55:31:5a:a8:65:28:7f:4f:cf:e5:94: e6:9b:ea:ab:ab:a3:f5:48:8d:91:af:c5:23:3c:98: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:47:FE:EA:24:02:8A:DB:A4:52:40:EA:5F:37:B3:51:29:DC:56:8E X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0f:7b:25:74:43:f8:db:31:96:d3:e8:f0:cc:63:bd:e5:a8: b3:e5:44:7c:b2:9c:2d:b7:d8:30:cf:61:36:66:77:51:c2:ab: c7:45:e0:a0:ce:92:a3:4c:fc:a7:7e:dc:c7:fb:7b:ff:3d:d3: e5:2c:69:6c:21:2d:ba:90:75:b1:36:c2:90:16:f6:47:0c:ba: 95:75:26:32:79:6b:d2:4f:76:c1:69:cb:6a:b9:7f:9b:1c:40: df:ee:cf:5c:d2:e1:34:ea:fa:96:18:ce:2a:dd:2d:29:63:a3: d8:f1:a9:50:ac:c4:a1:0a:df:e6:c1:bb:d8:33:7a:b2:7a:8b: d8:03:27:1f:77:73:08:af:95:8f:79:45:3a:fa:54:b3:53:b2: a1:53:d6:e1:94:d5:3e:5d:7b:2f:9f:53:de:85:3a:aa:96:4e: 7e:90:7d:e1:a1:4d:90:b1:9b:50:6a:14:ab:3b:e3:ec:de:9c: 0b:59:d8:be:f6:06:09:ce:39:2a:1a:18:88:d1:b0:53:89:19: 13:cf:d6:82:af:b6:f7:d8:74:f6:00:c0:dd:68:51:0e:02:48: f6:28:8f:63:a5:c7:d8:6c:16:1b:11:16:82:03:58:92:f0:8b: c9:f0:05:1a:c0:51:4a:be:dd:99:8d:18:11:9d:92:38:32:13: d1:db:23:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjUxMDE5MDc0MzE5WhcNMjUxMDI2MDc0MzE5WjAYMRYwFAYD VQQDEw02OGY0OTY5Ny0xY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIPP/t43ptOpSYR4ifbXiyhhe0dw0963KlOVLhErd2giFP3AIhzYujM76kMc PyTlBRLUlHxBenRa5SUW0lV1PKNuWj4rD9IR5le53MqqwdyVpRFxC0BdC8WB5y/5 GNwfs+gm0nUas282FQjHJRXfFmBxfGsdUnGKQmSjexsaANh/GDVBVUGAdAzzx27p 9N6ppiD2aehJOdAIlZcceAOSHalKqHOI1tbHN5N6jY25xt3thireGp4BdA4DkarL aUIdQ6SOeZ7RXk4gTcownpCuAJ09W/mzn43qAJ05ohhlmttJ7tFcVTFaqGUof0/P 5ZTmm+qrq6P1SI2Rr8UjPJj9NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRH/uok AorbpFJA6l83s1Ep3FaOMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYD3sldEP42zGW0+jwzGO95aiz5UR8spwtt9gwz2E2ZndRwqvHReCg zpKjTPynftzH+3v/PdPlLGlsIS26kHWxNsKQFvZHDLqVdSYyeWvST3bBactquX+b HEDf7s9c0uE06vqWGM4q3S0pY6PY8alQrMShCt/mwbvYM3qyeovYAycfd3MIr5WP eUU6+lSzU7KhU9bhlNU+XXsvn1PehTqqlk5+kH3hoU2QsZtQahSrO+Ps3pwLWdi+ 9gYJzjkqGhiI0bBTiRkTz9aCr7b32HT2AMDdaFEOAkj2KI9jpcfYbBYbERaCA1iS 8IvJ8AUawFFKvt2ZjRgRnZI4MhPR2yNF -----END CERTIFICATE-----Generated at Mon Oct 20 19:46:09 2025 by rpki-client