$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: EDgNbvpGPqtH7wsWwYR/eckBp/tLDGwJELS06illbRE= Subject key identifier: B4:6D:34:D9:C5:0F:03:C3:4A:48:49:22:A7:32:6C:DC:2F:45:A8:13 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 09:31:30 +0000 Manifest this update: Sun 19 Oct 2025 09:31:29 +0000 Manifest next update: Sun 26 Oct 2025 09:31:29 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: kTBmn3JafUsl/hKZj/D8mywd52WliRQowzlhDejjbtI=) 2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: D+69mUBWbfPIx9I29lHFNCCeA9/VSH+mKqw7jvFWkuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Oct 19 09:31:29 2025 GMT Not After : Oct 26 09:31:29 2025 GMT Subject: CN=68f4aff2-d856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:a5:0c:20:d7:ea:cd:19:77:74:c2:c1:70: ed:86:6d:7c:76:4e:5a:82:71:aa:50:7a:62:db:0a: 1d:01:69:65:8b:7f:88:19:f6:b5:30:ed:8b:cd:75: 6a:d7:ef:7a:5b:ef:9f:57:f2:f3:d4:45:5b:17:7b: 9b:54:28:ba:64:c3:17:31:37:83:1b:e9:0d:c0:0e: 38:0c:8d:80:ce:20:90:74:8d:78:ca:66:3c:00:e6: 1e:07:65:f9:27:a2:04:77:39:e8:0e:bd:7c:7b:15: b5:ac:8c:c6:17:f9:bb:7a:55:0a:f1:20:4d:f3:55: 34:46:b4:b5:a1:1e:e7:70:fc:43:a4:6f:cd:6b:c0: b1:8c:96:00:5f:f4:53:48:99:cc:70:33:72:79:83: 44:e3:bb:98:80:05:43:2d:f6:2a:43:00:05:8b:c0: 2e:19:a4:5d:73:ec:35:55:8e:b1:0c:70:f0:ca:fb: b2:ab:31:17:bd:bb:ba:dd:b7:c8:12:0f:94:80:89: 51:d9:e6:83:3c:a6:d9:cb:a8:08:44:7b:32:27:33: 1a:00:c4:fd:a9:ff:2b:fd:0f:e8:5b:3e:f5:09:9f: 1f:91:27:b6:81:4a:be:ed:6b:34:64:13:46:90:54: 09:81:e3:31:47:0b:76:3b:21:d5:06:e1:74:f4:36: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6D:34:D9:C5:0F:03:C3:4A:48:49:22:A7:32:6C:DC:2F:45:A8:13 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:76:c8:5e:05:ef:fb:da:e9:16:00:0c:e8:73:d3:0f:73:3a: f8:b9:9d:28:57:3a:28:cc:85:0a:28:50:19:a7:47:61:52:bb: 38:78:4c:4a:a4:57:37:9b:25:fb:8e:f6:d7:f7:de:fa:5f:f5: 71:63:3d:ad:e1:54:3e:72:43:6a:b4:de:70:3d:ec:36:48:f6: fa:ff:a1:8a:9c:eb:9d:f9:53:fc:82:2a:f8:9c:d7:eb:9f:20: ab:19:31:cd:02:a4:bd:38:db:26:e4:bd:bf:fb:38:ac:4f:25: 28:47:c2:2e:f8:b4:5b:f3:fd:41:42:8e:cb:83:16:e2:6d:70: 44:a8:6b:23:75:bb:1e:67:af:5d:e9:14:01:77:10:9c:f5:4e: 6c:15:da:5d:cd:95:0a:d5:16:70:04:22:90:af:d9:7e:de:76: cc:09:a1:bb:d5:75:00:53:cf:a0:84:5b:10:79:7f:7f:cb:dc: c5:c1:ce:43:ce:64:4c:0b:77:be:2b:56:a9:3a:9a:f6:9c:e6: ed:16:7b:69:b2:d5:d8:ea:9d:90:7b:23:95:6f:91:c7:6b:2f: 55:3b:99:e5:3c:b9:1f:94:b5:be:55:b2:2d:81:7a:e8:cd:48: 58:51:0b:98:a5:d7:80:2e:49:f8:3c:8b:0f:b4:30:02:cb:72: 10:51:75:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2 ODZCREZFNzgwHhcNMjUxMDE5MDkzMTI5WhcNMjUxMDI2MDkzMTI5WjAYMRYwFAYD VQQDEw02OGY0YWZmMi1kODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AqlDCDX6s0Zd3TCwXDthm18dk5agnGqUHpi2wodAWlli3+IGfa1MO2LzXVq 1+96W++fV/Lz1EVbF3ubVCi6ZMMXMTeDG+kNwA44DI2AziCQdI14ymY8AOYeB2X5 J6IEdznoDr18exW1rIzGF/m7elUK8SBN81U0RrS1oR7ncPxDpG/Na8CxjJYAX/RT SJnMcDNyeYNE47uYgAVDLfYqQwAFi8AuGaRdc+w1VY6xDHDwyvuyqzEXvbu63bfI Eg+UgIlR2eaDPKbZy6gIRHsyJzMaAMT9qf8r/Q/oWz71CZ8fkSe2gUq+7Ws0ZBNG kFQJgeMxRwt2OyHVBuF09Db48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRtNNnF DwPDSkhJIqcybNwvRagTMB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2 QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3 c3BqZ0J5TW1xM05vYTlfbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdsheBe/72ukWAAzoc9MPczr4uZ0oVzoozIUKKFAZp0dhUrs4eExK pFc3myX7jvbX9976X/VxYz2t4VQ+ckNqtN5wPew2SPb6/6GKnOud+VP8gir4nNfr nyCrGTHNAqS9ONsm5L2/+zisTyUoR8Iu+LRb8/1BQo7LgxbibXBEqGsjdbseZ69d 6RQBdxCc9U5sFdpdzZUK1RZwBCKQr9l+3nbMCaG71XUAU8+ghFsQeX9/y9zFwc5D zmRMC3e+K1apOpr2nObtFntpstXY6p2QeyOVb5HHay9VO5nlPLkflLW+VbItgXro zUhYUQuYpdeALkn4PIsPtDACy3IQUXVW -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:35 2025 by rpki-client