$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: H8xW1fjj6ie9uLFiLpm4X50R35pmKn5IXWhkg7PHkOA= Subject key identifier: E4:C5:5F:7D:BE:64:ED:D3:F2:47:A9:13:B8:35:0E:D7:47:45:0D:00 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 07:22:38 +0000 Manifest this update: Sun 19 Oct 2025 07:22:38 +0000 Manifest next update: Sun 26 Oct 2025 07:22:38 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: C9AgnOJRcPCaX9x4JXHu5KyzTOJ6Z8ksDSTiFCj5xtM=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: T4vR48N6YhwHqTHzqOptSkBSTlUWr6Qnyq5t5xi8rho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Oct 19 07:22:38 2025 GMT Not After : Oct 26 07:22:38 2025 GMT Subject: CN=68f491be-e7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:01:b0:ae:56:39:f6:18:ad:c6:10:8a:03: 25:e3:44:16:8f:75:6f:05:d4:cd:2c:da:53:0d:4a: 3e:61:fb:8b:7f:99:1d:c9:37:e8:ca:60:99:c3:d9: ec:4b:fb:ca:b1:f0:77:05:e5:da:23:d6:62:7b:1e: da:d5:9e:b0:1c:8a:c6:ae:19:5c:8b:f0:54:0c:a1: 68:99:f3:21:53:8e:02:b2:77:5f:50:f7:54:5f:08: 78:6a:c3:4b:64:f5:15:08:01:e3:86:1f:d3:75:36: 35:e9:a3:d1:7c:57:5e:5b:8f:8c:c7:3d:74:85:3f: 8e:24:9d:22:9e:22:6f:6f:36:b0:75:7f:e8:c0:16: ca:5f:22:ea:fe:91:4f:02:65:a5:db:bf:e0:7a:1f: 5b:70:3e:53:f5:ff:dd:d0:56:40:9c:19:a6:78:b5: 5a:d9:98:bb:dc:9f:39:ee:bb:76:15:45:aa:1e:f4: c4:9f:68:8b:e2:a5:e0:a5:70:cd:5a:82:27:d0:5e: ef:8e:6c:de:02:0d:b7:69:13:d8:6c:37:1c:87:26: bb:c2:47:92:00:c0:a2:f7:36:31:3c:c6:b5:bd:28: 28:f4:89:33:36:d5:7b:b6:dc:e7:59:96:5e:a4:ae: a0:0b:a1:25:59:42:85:52:ee:09:e8:04:49:1c:c7: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:5F:7D:BE:64:ED:D3:F2:47:A9:13:B8:35:0E:D7:47:45:0D:00 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:44:2e:72:18:67:a4:bd:7e:02:55:0f:53:76:98:52:e2:6e: 4c:f5:f4:d6:c4:ea:7c:45:40:99:df:93:35:a9:90:de:05:6e: ff:2b:b2:b8:73:bd:dc:5c:58:9a:17:c3:ea:a7:f9:78:20:57: 62:b0:bd:c9:af:62:14:4f:cb:18:96:c9:ed:98:65:aa:1e:c9: fc:ca:e4:47:b7:3f:63:11:7d:2f:20:a4:6f:d2:76:3e:2a:f3: d0:a3:70:79:f9:6d:a2:e5:17:25:9c:d3:dc:1c:4c:6e:d4:f4: 5a:52:b4:99:69:77:7d:3b:75:5d:31:95:7c:c8:36:e7:93:20: 2b:72:a6:7b:18:59:33:4f:5b:8a:bd:29:38:54:0b:03:65:5c: 9e:5c:25:e8:33:e2:9b:06:9f:f5:fa:22:76:f5:4d:ae:0b:15: e5:e8:63:c6:d7:69:5c:57:13:0d:c4:40:47:01:80:49:1f:91: f4:fa:3f:ad:67:91:70:c6:ec:b7:ea:46:15:5a:cb:b0:73:66: 7c:cd:45:d4:1c:0c:80:b5:b6:42:c2:1f:3b:89:30:da:c9:70: ae:7c:92:06:30:5e:31:3b:02:3e:1a:46:38:01:18:8c:6f:ad: 15:75:8c:ee:ca:4c:3e:52:d6:9f:17:4d:71:54:2c:c1:59:8a: 92:cb:28:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUxMDE5MDcyMjM4WhcNMjUxMDI2MDcyMjM4WjAYMRYwFAYD VQQDEw02OGY0OTFiZS1lN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVABsK5WOfYYrcYQigMl40QWj3VvBdTNLNpTDUo+YfuLf5kdyTfoymCZw9ns S/vKsfB3BeXaI9Ziex7a1Z6wHIrGrhlci/BUDKFomfMhU44CsndfUPdUXwh4asNL ZPUVCAHjhh/TdTY16aPRfFdeW4+Mxz10hT+OJJ0iniJvbzawdX/owBbKXyLq/pFP AmWl27/geh9bcD5T9f/d0FZAnBmmeLVa2Zi73J857rt2FUWqHvTEn2iL4qXgpXDN WoIn0F7vjmzeAg23aRPYbDcchya7wkeSAMCi9zYxPMa1vSgo9IkzNtV7ttznWZZe pK6gC6ElWUKFUu4J6ARJHMcfRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTFX32+ ZO3T8kepE7g1DtdHRQ0AMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwRC5yGGekvX4CVQ9TdphS4m5M9fTWxOp8RUCZ35M1qZDeBW7/K7K4 c73cXFiaF8Pqp/l4IFdisL3Jr2IUT8sYlsntmGWqHsn8yuRHtz9jEX0vIKRv0nY+ KvPQo3B5+W2i5RclnNPcHExu1PRaUrSZaXd9O3VdMZV8yDbnkyArcqZ7GFkzT1uK vSk4VAsDZVyeXCXoM+KbBp/1+iJ29U2uCxXl6GPG12lcVxMNxEBHAYBJH5H0+j+t Z5Fwxuy36kYVWsuwc2Z8zUXUHAyAtbZCwh87iTDayXCufJIGMF4xOwI+GkY4ARiM b60VdYzuykw+UtafF01xVCzBWYqSyygN -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:56 2025 by rpki-client