$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: /6ITYJtR2ZU5clh4RkjlaW7w2Ulyoc2h4CdevBIOPdk= Subject key identifier: F9:80:C1:CF:CE:2C:ED:E6:88:C6:3A:22:C0:60:8F:60:C7:D4:F3:19 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0DEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0DD5 Signing time: Mon 20 Oct 2025 18:24:57 +0000 Manifest this update: Mon 20 Oct 2025 18:24:57 +0000 Manifest next update: Mon 27 Oct 2025 18:24:57 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: W+gB2X2xpAV11kHCS++Rp3neBcyFaAiHEtxK2vLYXwY=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Oct 20 18:24:57 2025 GMT Not After : Oct 27 18:24:57 2025 GMT Subject: CN=68f67e79-675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:de:23:6d:35:48:7e:b3:00:6e:28:75:e5: db:0e:2e:c0:5a:df:e3:8b:66:20:c0:54:e1:bc:47: 42:1a:3a:1f:7d:f8:79:97:fb:f7:d0:3d:61:a7:d7: 3d:dd:ad:d9:3c:e2:ee:23:a5:1b:b2:0a:ca:b2:92: 44:64:41:5e:58:d4:23:22:06:53:d1:a6:fc:bd:3c: 15:be:79:2f:f9:8d:3c:01:eb:44:03:2b:db:16:07: 4d:06:19:f5:55:84:10:f1:04:19:05:5d:98:c0:59: c3:2f:7c:2e:7f:9d:c5:8c:ba:50:ab:2d:53:58:57: 74:cb:f4:b0:fb:5f:14:44:83:aa:ce:80:78:24:a8: 1c:90:64:1a:5e:b4:53:4a:33:b4:3d:a5:7f:ac:a3: c4:e0:07:7b:3f:25:96:04:6b:12:06:63:07:f2:ed: f0:df:f3:1d:77:b8:1a:99:5e:dc:9b:1c:ff:ec:a2: 8d:e0:d8:f5:49:32:4c:97:f6:83:ea:30:7d:6d:0f: 27:ec:45:2d:63:c0:18:70:5f:5b:f7:4e:2b:25:d9: 90:14:52:38:75:5e:80:fb:35:e1:e4:e0:3b:a3:d3: b3:82:cf:78:3e:03:96:de:7b:bd:96:e5:99:a8:ab: ba:a8:b6:b8:c0:44:4d:7f:d6:46:0f:0f:5e:07:ff: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:C1:CF:CE:2C:ED:E6:88:C6:3A:22:C0:60:8F:60:C7:D4:F3:19 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:57:bf:bd:f5:1f:bc:2c:f8:fa:ee:0d:0f:c4:8a:65:4c:e5: 7f:9e:9f:d3:52:4a:03:0e:eb:63:0f:7c:a7:5a:a0:71:c7:a1: bb:04:4e:73:50:3b:90:7a:f1:a7:ec:20:dc:ac:81:22:3c:54: e3:12:74:94:98:e2:a6:fc:8e:91:22:dc:45:5f:7b:e2:b7:dd: 5c:01:c8:55:3c:e9:89:48:70:52:c2:97:6f:f6:01:cd:b4:9d: e4:d4:dd:df:76:08:18:26:62:ba:8b:36:c8:28:9e:8d:7c:ba: c5:6e:c8:f0:ce:c3:37:7f:1e:30:c3:40:ae:5f:69:86:25:94: bf:89:b3:37:f7:8e:9c:fa:42:ff:ec:33:61:11:98:e0:1b:20: 90:2a:b8:71:af:ba:f1:df:08:eb:4f:f7:6d:c0:ec:5a:46:3c: ef:db:2d:47:90:4e:9d:92:c9:0a:fa:a0:0a:87:a5:44:29:ff: b8:c8:5e:28:98:4a:5d:57:4b:ec:de:a9:76:2b:d8:90:a6:6a: 95:86:f5:18:03:d5:70:3a:00:aa:13:6b:47:ba:8a:13:80:6a: 89:ce:eb:45:36:31:61:56:ee:35:b2:5c:01:50:d2:35:1a:1a: 56:46:11:16:d2:5e:08:6d:59:d9:41:2d:7e:f1:da:81:7f:10: 81:c4:6a:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUxMDIwMTgyNDU3WhcNMjUxMDI3MTgyNDU3WjAYMRYwFAYD VQQDEw02OGY2N2U3OS02NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxreI201SH6zAG4odeXbDi7AWt/ji2YgwFThvEdCGjofffh5l/v30D1hp9c9 3a3ZPOLuI6UbsgrKspJEZEFeWNQjIgZT0ab8vTwVvnkv+Y08AetEAyvbFgdNBhn1 VYQQ8QQZBV2YwFnDL3wuf53FjLpQqy1TWFd0y/Sw+18URIOqzoB4JKgckGQaXrRT SjO0PaV/rKPE4Ad7PyWWBGsSBmMH8u3w3/Mdd7gamV7cmxz/7KKN4Nj1STJMl/aD 6jB9bQ8n7EUtY8AYcF9b904rJdmQFFI4dV6A+zXh5OA7o9Ozgs94PgOW3nu9luWZ qKu6qLa4wERNf9ZGDw9eB/87/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmAwc/O LO3miMY6IsBgj2DH1PMZMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQV7+99R+8LPj67g0PxIplTOV/np/TUkoDDutjD3ynWqBxx6G7BE5z UDuQevGn7CDcrIEiPFTjEnSUmOKm/I6RItxFX3vit91cAchVPOmJSHBSwpdv9gHN tJ3k1N3fdggYJmK6izbIKJ6NfLrFbsjwzsM3fx4ww0CuX2mGJZS/ibM3946c+kL/ 7DNhEZjgGyCQKrhxr7rx3wjrT/dtwOxaRjzv2y1HkE6dkskK+qAKh6VEKf+4yF4o mEpdV0vs3ql2K9iQpmqVhvUYA9VwOgCqE2tHuooTgGqJzutFNjFhVu41slwBUNI1 GhpWRhEW0l4IbVnZQS1+8dqBfxCBxGr8 -----END CERTIFICATE-----Generated at Tue Oct 21 05:11:06 2025 by rpki-client