$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: 2dOZXbfc1Va2o9HfcrDkLbMDGPv70onoQ4sNAkG9fCE= Subject key identifier: 7B:78:BF:6D:13:F6:9A:BF:43:55:FD:B8:50:02:8A:08:6D:B5:BD:81 Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: BD Signing time: Sun 19 Oct 2025 09:05:18 +0000 Manifest this update: Sun 19 Oct 2025 09:05:17 +0000 Manifest next update: Sun 26 Oct 2025 09:05:17 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: cUixGV9mSyBJDr6UrG3ukozkx6Mrebla9fy1VXsxZMQ=) 2: 3219F778803B11F0BAF8A92DC4F9AE02.roa (hash: Pw3ZpzwkDkcgCL+3fi/F1AEnVJy3AaqJ7h1NuQZbu9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Oct 19 09:05:17 2025 GMT Not After : Oct 26 09:05:17 2025 GMT Subject: CN=68f4a9ce-9223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:96:61:08:b8:2f:ff:69:13:c7:b8:60:fc: fb:21:38:c7:e5:68:e1:dc:7d:68:c9:a8:9f:b2:79: f1:76:6b:e9:0d:ce:0f:d9:e8:fe:af:c0:59:6f:3d: de:65:f6:83:35:fb:dc:3e:38:fe:1d:29:99:a7:00: b6:fe:e7:03:ca:3d:05:49:41:7d:77:29:c5:b6:9d: ad:1d:bb:fd:4a:63:ed:d8:53:ba:8e:fd:d9:5e:dc: 48:83:36:19:e6:6b:7d:0e:9e:c2:bf:e2:ad:73:cf: da:59:36:f6:76:5b:27:58:dc:5b:18:79:5f:56:6d: 04:fd:77:16:17:1f:8e:88:69:e2:03:94:22:79:d8: 48:b6:d1:59:bb:f6:22:39:08:28:c9:e6:e1:b7:24: b5:0e:99:5a:c8:e2:11:ec:1c:ab:63:d0:13:62:ca: a5:a3:dc:15:cc:93:b2:58:74:eb:4a:c3:9a:6b:f6: 82:a5:64:f6:d1:41:e9:65:be:d4:2d:e2:8e:92:75: ae:36:ae:03:7b:26:f4:40:8e:66:c9:0d:9a:d2:07: 1e:67:dc:be:f3:ea:a8:ab:8f:4a:7e:d6:33:2a:41: 92:8c:4b:57:73:63:70:8f:75:31:d9:06:a9:ba:14: 4e:09:38:2a:aa:95:13:60:27:e4:41:71:1c:14:53: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:78:BF:6D:13:F6:9A:BF:43:55:FD:B8:50:02:8A:08:6D:B5:BD:81 X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:93:94:51:66:72:b7:90:7f:21:24:68:6b:4f:7a:d1:87: be:2b:af:d9:2d:37:32:1f:e2:80:fb:a6:e8:53:eb:00:89:6c: 57:e8:aa:e4:b2:6c:35:af:d2:09:bd:23:17:ce:97:8e:83:04: 98:80:1f:f5:f1:eb:da:9c:70:df:6c:52:d9:a0:0c:7b:bb:84: 7d:56:a7:64:ed:ff:25:bc:f5:14:69:14:fe:43:13:50:5f:8f: c0:8f:93:39:46:01:11:30:7b:17:d8:a3:49:9f:25:20:b6:ea: d4:9d:d4:e9:71:17:e9:42:ee:0a:ef:4c:12:60:c5:3a:0f:a1: 8b:8f:9b:31:23:81:70:5f:0f:a4:21:95:98:16:47:5c:f5:ba: db:73:fc:8e:48:c4:f3:c1:a8:18:f0:9c:a2:1d:a6:95:77:83: 02:1d:d5:08:26:49:f7:c0:5f:e3:71:8b:1f:1b:76:83:0a:78: 34:0c:b4:d8:c7:84:0c:4d:cf:65:59:9a:62:ef:59:04:21:78: 54:7f:2a:da:02:4f:80:bd:45:26:c9:ca:3a:a2:80:18:e5:d7: 58:f0:59:96:5e:49:85:4c:6b:2c:08:42:90:13:e9:f3:48:68: de:84:7f:6c:56:7d:1d:a2:53:bf:25:16:db:7a:8f:05:43:6b: d6:0c:d3:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCMjQxMTAvBgNVBAUTKEY1M0JDRkI4QzcyQzFBM0FCNjVFMEVBODhFM0ExQTIx RDI4Q0QxNjEwHhcNMjUxMDE5MDkwNTE3WhcNMjUxMDI2MDkwNTE3WjAYMRYwFAYD VQQDEw02OGY0YTljZS05MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDiWYQi4L/9pE8e4YPz7ITjH5Wjh3H1oyaifsnnxdmvpDc4P2ej+r8BZbz3e ZfaDNfvcPjj+HSmZpwC2/ucDyj0FSUF9dynFtp2tHbv9SmPt2FO6jv3ZXtxIgzYZ 5mt9Dp7Cv+Ktc8/aWTb2dlsnWNxbGHlfVm0E/XcWFx+OiGniA5QiedhIttFZu/Yi OQgoyebhtyS1DplayOIR7ByrY9ATYsqlo9wVzJOyWHTrSsOaa/aCpWT20UHpZb7U LeKOknWuNq4Deyb0QI5myQ2a0gceZ9y+8+qoq49KftYzKkGSjEtXc2Nwj3Ux2Qap uhROCTgqqpUTYCfkQXEcFFORdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt4v20T 9pq/Q1X9uFACighttb2BMB8GA1UdIwQYMBaAFPU7z7jHLBo6tl4OqI46GiHSjNFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0IyNC8xRTRGM0E1QzhG NzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dqcTJYZzZvampvYUlkS00w V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0IyNC8xRTRGM0E1QzhGNzYxMUVGODRFQzc3MTVDNEY5QUUwMi85VHZQdU1jc0dq cTJYZzZvampvYUlkS00wV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANOZOUUWZyt5B/ISRoa0960Ye+K6/ZLTcyH+KA+6boU+sAiWxX6Krk smw1r9IJvSMXzpeOgwSYgB/18evanHDfbFLZoAx7u4R9Vqdk7f8lvPUUaRT+QxNQ X4/Aj5M5RgERMHsX2KNJnyUgturUndTpcRfpQu4K70wSYMU6D6GLj5sxI4FwXw+k IZWYFkdc9brbc/yOSMTzwagY8JyiHaaVd4MCHdUIJkn3wF/jcYsfG3aDCng0DLTY x4QMTc9lWZpi71kEIXhUfyraAk+AvUUmyco6ooAY5ddY8FmWXkmFTGssCEKQE+nz SGjehH9sVn0dolO/JRbbeo8FQ2vWDNPK -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:53 2025 by rpki-client