$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: jpr+H1aVsbQPg5eN3HyzgeAC6W1/iGg7Dj08rEN3VOw= Subject key identifier: DC:C7:CE:BC:C3:C4:87:4E:2F:69:8A:60:8C:D4:D4:07:C8:40:9F:20 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 015F Signing time: Sun 19 Oct 2025 06:45:34 +0000 Manifest this update: Sun 19 Oct 2025 06:45:33 +0000 Manifest next update: Sun 26 Oct 2025 06:45:33 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: 7IwQVUUpqEG+/AjXm93iKkGEFdTMTunn2eUOb1eh7no=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Oct 19 06:45:33 2025 GMT Not After : Oct 26 06:45:33 2025 GMT Subject: CN=68f4890e-599f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:6c:fc:ba:6c:d3:94:37:e9:fc:90:67:57: b5:88:a7:40:b0:02:00:9c:f3:7d:53:a6:2f:a5:1b: df:1a:04:f0:32:f5:fc:0d:6b:13:da:8e:0b:64:2e: d1:d5:db:36:9b:b6:e7:e7:b3:e0:9b:7a:00:7d:24: a4:2b:47:09:4f:b1:13:42:13:87:c2:a6:ee:47:74: 3e:8e:e9:51:09:79:57:e5:c7:b7:3e:b2:a0:1d:00: d0:64:17:84:4e:a1:ec:e1:7d:d0:9d:1d:c8:ec:2c: 21:b4:b7:d1:94:34:74:27:53:e4:68:b0:c6:36:d1: 84:5b:dd:45:0f:1b:b5:86:e1:a2:63:e4:f7:7b:79: 1c:ef:a7:be:38:05:1f:b4:5d:ef:53:ca:0e:2f:52: 9a:1d:38:8a:cf:ee:5d:7d:0c:f6:38:38:48:b9:98: 60:34:fb:b0:14:73:85:9d:d5:6d:f9:63:6d:96:22: ff:92:dc:32:47:fa:f7:72:53:5c:ae:23:5b:39:10: 2e:9c:d7:bf:7e:07:cf:f2:df:12:06:55:00:11:84: 35:99:f1:33:44:59:68:94:1f:70:39:7d:fa:8e:fc: 36:a3:85:03:87:53:32:aa:c0:d5:e8:cd:82:1d:32: 88:1b:36:89:93:ff:73:1f:8d:0e:77:d1:42:e0:ad: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C7:CE:BC:C3:C4:87:4E:2F:69:8A:60:8C:D4:D4:07:C8:40:9F:20 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:94:04:c7:3d:48:ad:e5:47:e9:b4:74:12:5e:63:6a:43:03: bb:4d:27:a8:46:e5:53:a2:01:7a:75:01:e5:bd:84:4a:97:5f: 9f:97:0e:9f:62:c6:9e:51:03:46:2a:77:e2:ef:ce:7f:d3:9a: 38:5b:3f:45:c2:be:c6:fc:65:73:8d:1e:e2:1a:1a:21:6b:46: 86:4c:2d:d2:8e:18:80:83:9e:75:29:38:25:86:57:2f:e3:e1: 7d:13:9f:e8:d2:8f:17:8d:69:7b:d1:4c:de:02:66:b7:7d:04: 4f:33:bc:a6:17:01:5a:f5:d1:b4:c2:a9:c0:a3:9b:13:a5:32: f3:7b:0f:33:bc:2a:1e:19:26:82:34:19:7f:58:92:2b:22:50: a5:02:b9:56:db:9e:16:9c:87:23:ea:4a:ee:28:c1:c9:e0:71: 20:e4:e1:ea:86:fb:4a:0a:4b:8d:88:a7:ae:a9:29:34:c7:f0: 0a:1e:f3:3f:67:6c:b9:b5:3b:c2:ea:c2:5b:a3:5a:e4:bc:de: 74:1e:87:bc:f0:5c:6e:85:e8:5a:fd:69:0f:61:4a:76:83:58: 6d:d5:9a:35:4d:8b:be:25:58:44:71:83:a7:7f:cb:e7:b2:f4: ce:a4:a2:b9:6c:d5:ba:b7:0f:c5:19:90:12:c8:c6:42:81:40: e8:74:79:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUxMDE5MDY0NTMzWhcNMjUxMDI2MDY0NTMzWjAYMRYwFAYD VQQDEw02OGY0ODkwZS01OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2Zs/Lps05Q36fyQZ1e1iKdAsAIAnPN9U6YvpRvfGgTwMvX8DWsT2o4LZC7R 1ds2m7bn57Pgm3oAfSSkK0cJT7ETQhOHwqbuR3Q+julRCXlX5ce3PrKgHQDQZBeE TqHs4X3QnR3I7CwhtLfRlDR0J1PkaLDGNtGEW91FDxu1huGiY+T3e3kc76e+OAUf tF3vU8oOL1KaHTiKz+5dfQz2ODhIuZhgNPuwFHOFndVt+WNtliL/ktwyR/r3clNc riNbORAunNe/fgfP8t8SBlUAEYQ1mfEzRFlolB9wOX36jvw2o4UDh1MyqsDV6M2C HTKIGzaJk/9zH40Od9FC4K0XXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzHzrzD xIdOL2mKYIzU1AfIQJ8gMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjlATHPUit5UfptHQSXmNqQwO7TSeoRuVTogF6dQHlvYRKl1+flw6f YsaeUQNGKnfi785/05o4Wz9Fwr7G/GVzjR7iGhoha0aGTC3SjhiAg551KTglhlcv 4+F9E5/o0o8XjWl70UzeAma3fQRPM7ymFwFa9dG0wqnAo5sTpTLzew8zvCoeGSaC NBl/WJIrIlClArlW254WnIcj6kruKMHJ4HEg5OHqhvtKCkuNiKeuqSk0x/AKHvM/ Z2y5tTvC6sJbo1rkvN50Hoe88Fxuheha/WkPYUp2g1ht1Zo1TYu+JVhEcYOnf8vn svTOpKK5bNW6tw/FGZASyMZCgUDodHnG -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:32 2025 by rpki-client