$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: BgeXeHnrm0PBcpYWAB2V/XoUel+Pxjb/7fEwxf6aTT8= Subject key identifier: 00:3B:54:06:B2:18:EE:1F:D5:10:B0:51:D5:D5:16:77:0E:C7:37:88 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: A9 Signing time: Mon 20 Oct 2025 19:52:16 +0000 Manifest this update: Mon 20 Oct 2025 19:52:15 +0000 Manifest next update: Mon 27 Oct 2025 19:52:15 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: uqtXLvwUMlg/mW0iMS7TzaLR9f+L0axm+xHPk8VkJLI=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pDBpwWzy3RFOzY6mOa1pibkze94QAdG3zJbynRenhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Oct 20 19:52:15 2025 GMT Not After : Oct 27 19:52:15 2025 GMT Subject: CN=68f692f0-a4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:fb:0d:7c:d6:8c:44:2a:f5:98:b1:d0:27: e8:72:22:c6:20:8c:35:0c:ae:4f:25:f4:e9:4a:18: 0c:ec:98:06:50:b5:ab:b9:7f:cf:50:77:38:eb:a5: c1:04:8a:f7:3c:ec:59:0f:b9:3f:3c:09:5b:b0:99: ca:87:b2:c7:90:3d:41:3c:b8:e1:61:c3:e1:9c:2b: 71:ce:11:c6:79:2d:25:58:a3:ae:d1:cd:8a:72:ab: b4:44:13:5d:c4:bc:b4:0a:9a:5d:2e:a1:6b:67:60: 01:51:d2:69:e5:8b:4c:a0:87:a9:59:9f:d6:f7:64: 8b:d9:d8:b5:12:bf:4d:3d:f5:a4:a5:6f:e7:57:52: 0d:32:a1:a9:58:79:0f:5a:16:0e:d3:3e:1b:8e:a6: 5b:f8:a0:9d:62:20:3e:d1:3e:7a:f8:47:2b:0a:34: 42:c9:95:2e:4c:35:53:58:b3:6c:09:b4:c6:3b:36: 55:be:2d:8f:9d:cf:a8:c4:af:02:2b:43:04:b2:a2: 27:1a:af:11:8c:99:a9:e2:fc:9f:44:f3:3d:43:d8: 08:99:fc:2a:fc:6a:ad:d0:cd:71:a4:81:db:cf:28: be:12:42:9b:04:d3:2d:46:d1:8c:b6:22:ae:29:38: 8e:20:59:42:90:5d:82:c2:13:4e:d5:4e:6b:10:12: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:54:06:B2:18:EE:1F:D5:10:B0:51:D5:D5:16:77:0E:C7:37:88 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:38:6a:12:d3:df:ff:a4:e9:1d:37:55:8a:1e:3b:e4:fd:b6: a0:18:bc:e4:1b:1a:a6:37:4f:40:fa:5f:42:a9:c0:8f:20:36: 6e:fe:f8:4a:25:9b:c0:b0:9d:29:99:49:05:0b:4a:69:9b:ec: 84:ea:5c:72:39:da:03:d1:2c:b9:bd:a3:ab:f6:a3:36:67:60: de:05:50:8d:f0:aa:8c:df:31:97:34:c2:a4:eb:fe:c2:a8:99: 85:2b:c6:5d:47:51:9e:45:ed:fe:3e:18:29:c5:32:d1:5a:45: 5f:fb:ae:e0:f6:36:19:12:b4:93:80:9f:5e:ce:74:56:cb:4b: c2:b7:2c:a9:31:59:84:a9:64:59:be:4f:9c:3d:22:aa:e6:96: 36:05:b0:4f:29:8f:0a:6a:06:85:80:b2:2a:8f:d4:18:64:84: b1:c3:b2:57:19:b8:71:89:6a:10:c6:f5:8b:8d:9e:a7:e5:d3: a6:50:1c:76:10:f0:a4:7c:f9:e7:c8:ee:08:75:6e:96:bb:55: eb:08:f6:c5:51:5b:0c:7d:47:58:76:ab:da:84:7f:e5:68:13: c2:4b:9f:cb:25:26:c8:d2:05:61:8b:0c:fa:d7:69:be:95:27: 74:10:16:05:7a:3d:4d:7c:8b:70:3e:c2:47:de:36:26:10:8d: eb:be:75:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5 OUQyQzcyN0MwHhcNMjUxMDIwMTk1MjE1WhcNMjUxMDI3MTk1MjE1WjAYMRYwFAYD VQQDEw02OGY2OTJmMC1hNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OD7DXzWjEQq9Zix0CfociLGIIw1DK5PJfTpShgM7JgGULWruX/PUHc466XB BIr3POxZD7k/PAlbsJnKh7LHkD1BPLjhYcPhnCtxzhHGeS0lWKOu0c2Kcqu0RBNd xLy0CppdLqFrZ2ABUdJp5YtMoIepWZ/W92SL2di1Er9NPfWkpW/nV1INMqGpWHkP WhYO0z4bjqZb+KCdYiA+0T56+EcrCjRCyZUuTDVTWLNsCbTGOzZVvi2Pnc+oxK8C K0MEsqInGq8RjJmp4vyfRPM9Q9gImfwq/Gqt0M1xpIHbzyi+EkKbBNMtRtGMtiKu KTiOIFlCkF2CwhNO1U5rEBLyNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA7VAay GO4f1RCwUdXVFncOxzeIMB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM MnVSSkd3LWd6WENaMHNjbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvOGoS09//pOkdN1WKHjvk/bagGLzkGxqmN09A+l9CqcCPIDZu/vhK JZvAsJ0pmUkFC0ppm+yE6lxyOdoD0Sy5vaOr9qM2Z2DeBVCN8KqM3zGXNMKk6/7C qJmFK8ZdR1GeRe3+PhgpxTLRWkVf+67g9jYZErSTgJ9eznRWy0vCtyypMVmEqWRZ vk+cPSKq5pY2BbBPKY8KagaFgLIqj9QYZISxw7JXGbhxiWoQxvWLjZ6n5dOmUBx2 EPCkfPnnyO4IdW6Wu1XrCPbFUVsMfUdYdqvahH/laBPCS5/LJSbI0gVhiwz612m+ lSd0EBYFej1NfItwPsJH3jYmEI3rvnXK -----END CERTIFICATE-----Generated at Tue Oct 21 00:04:06 2025 by rpki-client