$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json) Hash identifier: cuGba8rqc6qfoKzgS4xoz8GkQmI5UImJbeM/6oCGvBw= Subject key identifier: FE:CD:9A:1C:B0:9E:53:DF:05:B0:54:41:79:C3:F8:70:3C:07:2C:D1 Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft Manifest number: 0C7D Signing time: Sat 18 Oct 2025 19:10:49 +0000 Manifest this update: Sat 18 Oct 2025 19:10:48 +0000 Manifest next update: Sat 25 Oct 2025 19:10:48 +0000 Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: mzdyMfCJihLATMPbE7mNYEqqPSOgMVASo/7+ONsx7eU=) 2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: o6uzXxi45nuYDCicVYaDwUO/XE7Lp0WVGghWkgO8ZII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Validity Not Before: Oct 18 19:10:48 2025 GMT Not After : Oct 25 19:10:48 2025 GMT Subject: CN=68f3e638-b5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:46:56:e3:02:32:aa:0f:a1:2d:34:7e:0e: c5:b6:10:93:71:6e:fd:d0:78:63:47:c7:59:80:40: bd:b7:f2:7f:05:4e:c0:20:14:9f:c0:c3:32:ab:34: 2f:da:fd:f9:8d:73:77:c1:6a:3e:4f:c5:f6:a7:72: 1b:57:b1:4f:9a:05:b4:09:2a:91:55:94:af:4e:72: 78:5f:0a:da:2f:47:89:4b:6e:35:7a:a5:81:bb:ad: 8c:e6:74:ed:26:59:3f:00:82:93:cf:53:ef:26:26: e5:a5:69:1a:12:c3:0c:a5:1b:47:d7:25:58:17:61: 71:29:ca:c5:15:e3:b0:78:d7:db:6b:39:98:f5:26: f6:9d:94:76:7c:1e:7f:25:be:2e:c0:26:05:aa:6a: c0:a4:e3:c0:32:76:a6:6e:3e:be:57:f1:85:9b:e0: ec:67:2d:ec:e3:4c:f5:8c:88:34:d4:73:a4:1c:c2: c8:4a:35:d3:80:bb:88:71:59:f1:4c:74:b5:eb:e2: ce:48:0e:79:77:48:6b:f6:3a:b9:e5:5b:ad:12:95: ac:49:5a:c2:cc:68:cb:6f:26:5d:88:3b:3e:c7:95: c1:1e:20:d3:99:84:8d:93:06:3e:72:d0:35:9d:b5: df:66:e3:8e:f1:07:6a:be:f3:0e:bb:b0:58:ef:9c: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:9A:1C:B0:9E:53:DF:05:B0:54:41:79:C3:F8:70:3C:07:2C:D1 X509v3 Authority Key Identifier: keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:54:d8:95:7b:85:04:33:b9:02:df:7f:23:12:ab:51:bf:fc: fc:68:e5:cc:92:fa:e0:a0:0a:80:2a:77:21:f9:59:42:e6:48: 55:00:e3:b2:d6:1e:df:2d:f1:ad:ae:7f:7e:da:cc:1d:f5:d4: 36:9e:50:45:21:d1:da:b4:4e:d9:ac:db:94:c4:90:91:2f:83: b1:80:59:e6:47:b2:37:a7:3b:b6:cd:a1:bf:1d:30:58:49:5b: af:e1:4c:71:3a:75:37:48:b4:d5:ad:a1:6c:8b:d2:60:28:65: d2:9c:a3:bd:e3:0b:1a:71:79:16:6f:66:85:09:c6:0b:fc:7c: 28:47:30:ca:89:ba:83:1d:91:75:b0:52:7a:91:0e:7f:7a:3d: bd:15:b2:fd:fe:87:8e:27:7f:01:36:e6:49:21:b7:5d:7f:e8: 87:58:2d:56:29:7c:11:c4:56:9f:f5:40:46:09:3f:0d:e8:ff: 49:30:eb:4c:61:f5:57:f0:5d:8a:e0:83:55:bc:86:83:28:b9: 90:85:be:43:45:8a:f6:05:0f:b3:c0:58:68:61:96:2d:27:15: 6f:c1:93:05:61:4f:ce:e0:ac:9c:dc:4a:0b:e8:b5:8b:2d:59: a3:9b:d4:b5:19:91:b9:a3:36:54:d8:6a:6c:2b:38:83:9c:e0: fb:75:31:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2 NTZBNUUwOEQwHhcNMjUxMDE4MTkxMDQ4WhcNMjUxMDI1MTkxMDQ4WjAYMRYwFAYD VQQDEw02OGYzZTYzOC1iNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05JGVuMCMqoPoS00fg7FthCTcW790HhjR8dZgEC9t/J/BU7AIBSfwMMyqzQv 2v35jXN3wWo+T8X2p3IbV7FPmgW0CSqRVZSvTnJ4XwraL0eJS241eqWBu62M5nTt Jlk/AIKTz1PvJiblpWkaEsMMpRtH1yVYF2FxKcrFFeOweNfbazmY9Sb2nZR2fB5/ Jb4uwCYFqmrApOPAMnambj6+V/GFm+DsZy3s40z1jIg01HOkHMLISjXTgLuIcVnx THS16+LOSA55d0hr9jq55VutEpWsSVrCzGjLbyZdiDs+x5XBHiDTmYSNkwY+ctA1 nbXfZuOO8QdqvvMOu7BY75yARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7Nmhyw nlPfBbBUQXnD+HA8ByzRMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3 RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x VVVQUXllVkpBeWhsYWw0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvVNiVe4UEM7kC338jEqtRv/z8aOXMkvrgoAqAKnch+VlC5khVAOOy 1h7fLfGtrn9+2swd9dQ2nlBFIdHatE7ZrNuUxJCRL4OxgFnmR7I3pzu2zaG/HTBY SVuv4UxxOnU3SLTVraFsi9JgKGXSnKO94wsacXkWb2aFCcYL/HwoRzDKibqDHZF1 sFJ6kQ5/ej29FbL9/oeOJ38BNuZJIbddf+iHWC1WKXwRxFaf9UBGCT8N6P9JMOtM YfVX8F2K4INVvIaDKLmQhb5DRYr2BQ+zwFhoYZYtJxVvwZMFYU/O4Kyc3EoL6LWL LVmjm9S1GZG5ozZU2GpsKziDnOD7dTG8 -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:20 2025 by rpki-client