$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: KMX/q0HSnhsT+cc5rO8Nu2yxLZwkNmvdkdZaFzi8DR4= Subject key identifier: 91:BE:65:43:C7:E7:14:B0:5F:BF:CA:26:6B:33:EE:76:25:14:6A:6D Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 99 Signing time: Sun 19 Oct 2025 09:37:08 +0000 Manifest this update: Sun 19 Oct 2025 09:37:08 +0000 Manifest next update: Sun 26 Oct 2025 09:37:08 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: eR0LY6gZhhZ5i0Yy5DJLfDzgf0NWvvOgQ7KuSKq+7Rc=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Oct 19 09:37:08 2025 GMT Not After : Oct 26 09:37:08 2025 GMT Subject: CN=68f4b144-7bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:9f:f7:d0:e7:4c:7d:7d:1a:be:60:67:02: 77:d8:12:ad:78:fe:7c:d5:ce:16:23:4c:57:44:db: 2d:35:bf:90:18:fd:47:e2:f4:92:dc:fa:c3:eb:f8: 21:99:81:c6:80:78:68:db:8a:c7:22:95:66:74:1c: 9f:2f:7d:bf:eb:8b:09:b8:44:b7:d8:02:6a:0b:6c: 61:23:c3:03:31:5c:b8:82:2b:2b:06:e9:d8:7e:59: 97:b7:44:2e:4d:55:36:49:9b:39:ea:2d:ed:b1:27: 29:87:05:63:b7:54:8b:a8:94:ca:fe:26:16:b4:74: 89:29:65:7f:db:38:fd:7d:33:93:f8:65:fe:6b:4a: fc:18:ab:28:e2:2d:f5:f2:cf:b4:93:f2:27:4b:53: 41:dc:99:c4:cc:83:ce:c9:35:15:b9:90:54:84:a2: 67:12:c7:b9:5a:b7:e0:4b:3d:a3:eb:c1:ff:4d:cc: ac:4e:4a:6e:27:7e:99:58:dd:85:07:01:6c:52:0c: 4b:5d:62:d0:db:5c:ba:9b:01:f7:8a:cb:5d:81:46: 8a:27:4c:2e:82:25:df:9a:46:e4:a4:fc:b1:c5:68: c4:cd:a1:31:f7:b7:69:50:6f:83:c6:63:c2:3b:09: ba:bb:8f:2f:1c:84:9f:93:66:43:a1:26:1b:4e:8f: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:65:43:C7:E7:14:B0:5F:BF:CA:26:6B:33:EE:76:25:14:6A:6D X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:a4:99:6e:64:d6:19:d3:a6:f3:01:01:e2:3f:cc:8e:fb:a4: fe:74:8b:6d:a6:0c:00:e4:d7:cb:b2:e3:a1:0f:51:01:ae:bd: 94:b6:7d:12:20:f8:9f:ff:be:74:37:87:b5:98:78:93:56:66: 43:81:0d:35:56:03:3c:1e:68:fc:52:59:99:76:c2:eb:a8:af: 91:2d:6a:0b:2b:bc:ac:7c:52:01:7c:41:2e:d9:36:d8:23:0a: 6f:d2:70:a4:63:15:08:7f:1f:9a:6f:1f:f5:92:2b:d5:1e:af: a7:4d:da:2c:c4:b6:c1:41:29:fe:fa:3e:a8:41:b0:fe:e9:92: 6c:ab:17:71:cd:6f:00:b5:0b:ca:37:db:92:17:a1:5f:a1:f0: 75:b2:30:7b:3e:97:ac:2b:a9:9b:ca:20:ab:91:1c:c9:6e:b3: c9:1c:55:0c:49:85:39:39:ba:9a:b3:e9:8b:25:84:c5:db:63: 88:d0:1e:3d:0b:9a:a7:36:bb:da:87:a7:d5:f4:1c:2a:82:b4: 2f:e1:a7:8f:9f:02:57:62:26:f7:90:00:4e:04:47:31:ca:f0: d6:31:cf:59:8e:c0:cf:01:d4:01:14:08:be:80:ea:80:34:2b: b3:7f:3c:54:de:8c:e8:bc:68:df:dc:41:35:c7:d4:9b:47:a0: 51:38:bf:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBM0MxMTAvBgNVBAUTKDk3QjAzREEyRkI0NUY1NkUzRjU4MjE2M0RGN0JEOTUw NjkzOTk5NDQwHhcNMjUxMDE5MDkzNzA4WhcNMjUxMDI2MDkzNzA4WjAYMRYwFAYD VQQDEw02OGY0YjE0NC03YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf2f99DnTH19Gr5gZwJ32BKteP581c4WI0xXRNstNb+QGP1H4vSS3PrD6/gh mYHGgHho24rHIpVmdByfL32/64sJuES32AJqC2xhI8MDMVy4gisrBunYflmXt0Qu TVU2SZs56i3tsScphwVjt1SLqJTK/iYWtHSJKWV/2zj9fTOT+GX+a0r8GKso4i31 8s+0k/InS1NB3JnEzIPOyTUVuZBUhKJnEse5WrfgSz2j68H/TcysTkpuJ36ZWN2F BwFsUgxLXWLQ21y6mwH3istdgUaKJ0wugiXfmkbkpPyxxWjEzaEx97dpUG+DxmPC Owm6u48vHISfk2ZDoSYbTo+XTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG+ZUPH 5xSwX7/KJmsz7nYlFGptMB8GA1UdIwQYMBaAFJewPaL7RfVuP1ghY9972VBpOZlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83MzkwQjM0QUM2 QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlXNF9XQ0ZqMzN2WlVHazVt VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83MzkwQjM0QUM2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlX NF9XQ0ZqMzN2WlVHazVtVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEpJluZNYZ06bzAQHiP8yO+6T+dIttpgwA5NfLsuOhD1EBrr2Utn0S IPif/750N4e1mHiTVmZDgQ01VgM8Hmj8UlmZdsLrqK+RLWoLK7ysfFIBfEEu2TbY Iwpv0nCkYxUIfx+abx/1kivVHq+nTdosxLbBQSn++j6oQbD+6ZJsqxdxzW8AtQvK N9uSF6FfofB1sjB7PpesK6mbyiCrkRzJbrPJHFUMSYU5Obqas+mLJYTF22OI0B49 C5qnNrvah6fV9BwqgrQv4aePnwJXYib3kABOBEcxyvDWMc9ZjsDPAdQBFAi+gOqA NCuzfzxU3ozovGjf3EE1x9SbR6BROL/0 -----END CERTIFICATE-----Generated at Tue Oct 21 00:43:56 2025 by rpki-client