$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: 2gUYnObUbvPi82wwke+5Qc9sOo29LimJWysm9VB+8BM= Subject key identifier: B9:65:B5:22:32:B9:48:B2:B8:13:54:16:63:4A:80:F0:EC:53:91:DF Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 02D1 Signing time: Sun 19 Oct 2025 03:28:15 +0000 Manifest this update: Sun 19 Oct 2025 03:28:14 +0000 Manifest next update: Sun 26 Oct 2025 03:28:14 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: D6qUT+4Pyp29451kxyTj1RkMNRblHX4YRFlYJJ4fHvU=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Oct 19 03:28:14 2025 GMT Not After : Oct 26 03:28:14 2025 GMT Subject: CN=68f45ace-8dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:30:b4:d1:eb:a6:f8:57:a4:61:3b:00:56: dd:68:2f:f0:e1:02:fd:02:72:06:74:7b:1a:df:a3: 31:13:75:84:90:18:84:89:d4:41:4b:83:6d:c0:20: 75:d1:75:a3:b1:53:83:38:9c:2b:9d:aa:27:6d:54: b1:15:62:5d:f9:6d:ab:5d:94:77:8b:91:5b:84:74: b9:44:96:76:22:0d:c3:9d:9e:ae:a4:65:d2:59:34: d8:50:28:fa:cf:ae:7d:f5:de:8b:fc:ae:3a:34:8a: 4e:1e:42:2a:b4:47:5a:96:40:c9:6c:01:28:94:28: 00:eb:c2:fc:66:ef:76:28:ab:2d:79:6e:e8:c4:35: b7:0f:5f:0d:8e:17:ec:82:28:27:18:16:e5:5b:a0: 5a:5f:ad:f2:0a:7e:3f:35:8a:9a:d7:da:a8:37:b9: 42:1e:35:11:ea:e7:d8:c0:a0:bc:14:cf:ff:a0:db: f4:11:14:70:a6:84:1f:12:0e:78:a1:a8:a2:44:e9: ea:90:f6:28:a6:c5:9f:e9:43:57:68:98:d3:c0:06: 7f:f8:c9:a8:30:a4:7d:47:9b:d4:02:40:b8:32:f7: 2b:0a:91:9a:a3:79:39:0f:c5:2e:da:9e:a2:80:35: b4:ef:02:fe:15:42:15:b7:62:32:a3:0d:97:fc:e0: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:65:B5:22:32:B9:48:B2:B8:13:54:16:63:4A:80:F0:EC:53:91:DF X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9b:69:46:19:70:45:3e:1b:40:09:f7:e3:58:96:6f:fa:4a: cc:03:ea:3f:47:36:10:30:d2:dc:54:68:66:6c:11:eb:84:7e: db:1a:68:af:21:ab:50:2e:55:ac:f7:29:87:a5:6f:97:e9:09: 54:06:6b:1b:dd:f9:6e:73:a7:b3:88:a3:f8:9f:11:0e:e4:c9: 2d:77:6f:65:41:d8:45:dd:8f:73:d6:96:94:6e:27:9a:6b:a4: fa:f8:05:d5:58:11:de:61:c0:b0:fc:cc:ef:e5:2b:43:4c:73: 55:59:a1:93:a3:2b:c4:ce:19:a9:68:7a:71:bb:b0:0b:e5:df: 15:0c:92:ef:e0:84:63:4f:4a:cd:42:7f:7b:1c:77:b6:e9:3b: d5:61:d7:16:a8:fc:6e:8a:8f:f4:a5:91:a3:47:d5:95:b9:38: 8e:20:39:68:9f:cc:f0:28:a8:6f:a8:2e:74:f6:65:62:e5:d2: e0:f1:f9:d9:e7:25:48:f2:43:36:e3:82:13:1d:48:da:6b:e7: a7:b3:ac:27:bd:12:6e:f6:47:ee:88:bc:61:b4:2e:03:52:9f: 53:10:28:01:71:0b:7a:b2:8b:d9:f6:16:26:04:5a:f8:7f:d5: ac:28:f9:ce:ed:a1:d5:ea:5a:e2:a1:7d:bf:50:d3:4d:78:82: 97:ef:a7:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUxMDE5MDMyODE0WhcNMjUxMDI2MDMyODE0WjAYMRYwFAYD VQQDEw02OGY0NWFjZS04ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PowtNHrpvhXpGE7AFbdaC/w4QL9AnIGdHsa36MxE3WEkBiEidRBS4NtwCB1 0XWjsVODOJwrnaonbVSxFWJd+W2rXZR3i5FbhHS5RJZ2Ig3DnZ6upGXSWTTYUCj6 z6599d6L/K46NIpOHkIqtEdalkDJbAEolCgA68L8Zu92KKsteW7oxDW3D18Njhfs gignGBblW6BaX63yCn4/NYqa19qoN7lCHjUR6ufYwKC8FM//oNv0ERRwpoQfEg54 oaiiROnqkPYopsWf6UNXaJjTwAZ/+MmoMKR9R5vUAkC4MvcrCpGao3k5D8Uu2p6i gDW07wL+FUIVt2Iyow2X/OBd/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlltSIy uUiyuBNUFmNKgPDsU5HfMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnm2lGGXBFPhtACffjWJZv+krMA+o/RzYQMNLcVGhmbBHrhH7bGmiv IatQLlWs9ymHpW+X6QlUBmsb3fluc6eziKP4nxEO5Mktd29lQdhF3Y9z1paUbiea a6T6+AXVWBHeYcCw/Mzv5StDTHNVWaGToyvEzhmpaHpxu7AL5d8VDJLv4IRjT0rN Qn97HHe26TvVYdcWqPxuio/0pZGjR9WVuTiOIDlon8zwKKhvqC509mVi5dLg8fnZ 5yVI8kM244ITHUjaa+ens6wnvRJu9kfuiLxhtC4DUp9TECgBcQt6sovZ9hYmBFr4 f9WsKPnO7aHV6lrioX2/UNNNeIKX76dN -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:42 2025 by rpki-client