$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json) Hash identifier: Rsmc1PI9+IQSCa2VU9fTWuyr7SsNu+cxvgiayJVDzPk= Subject key identifier: F4:18:0C:DB:11:F8:55:4E:24:B3:34:66:BB:B6:CB:0E:73:14:E8:5D Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft Manifest number: 70 Signing time: Sun 19 Oct 2025 10:14:15 +0000 Manifest this update: Sun 19 Oct 2025 10:14:15 +0000 Manifest next update: Sun 26 Oct 2025 10:14:15 +0000 Files and hashes: 1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: Eb1RAS7j29WNbfBzGDufrQ/uG3uAY26mDC5hQQ6O854=) 2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Validity Not Before: Oct 19 10:14:15 2025 GMT Not After : Oct 26 10:14:15 2025 GMT Subject: CN=68f4b9f7-b060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:03:10:f9:29:0b:09:ff:22:96:c2:8e:04: d1:83:af:7c:46:ae:9a:d8:56:c2:0c:cb:fc:b6:c0: a6:40:75:79:72:2b:7b:d5:a4:a7:ae:f2:e6:f8:a0: 17:56:ba:f5:21:d7:4c:56:20:3e:7d:06:fe:3c:a8: 60:d1:6d:0c:3c:44:9e:64:7e:ec:79:5b:17:74:2f: 25:c5:87:fd:c8:99:07:c3:31:ec:c9:0a:fb:b5:95: 35:b5:ab:ae:3d:fb:47:77:a8:a6:39:4d:78:18:6c: 1f:9d:ad:a2:fe:64:29:37:d6:9c:ad:f9:4f:78:52: 5a:be:c9:63:73:bf:73:68:15:74:0f:57:73:35:8c: fb:68:00:3f:26:71:3c:fe:74:fb:10:2c:f4:83:28: 2b:b1:e4:20:44:7e:2f:b7:60:ab:e1:6b:88:3d:1e: f9:50:a5:67:4b:29:30:07:60:4c:27:8e:af:1a:62: 7c:81:9c:e2:50:96:b1:b6:5f:07:8e:58:30:15:81: 01:b7:31:2c:46:f2:51:54:97:7b:36:28:d0:4f:8b: 95:e3:11:bc:34:a0:67:a3:71:95:1d:88:03:49:a7: 43:4d:48:91:65:2a:44:60:f3:ab:60:5d:b7:3f:24: 2e:43:bc:43:df:c8:57:91:68:ec:c3:2d:e5:cc:68: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:0C:DB:11:F8:55:4E:24:B3:34:66:BB:B6:CB:0E:73:14:E8:5D X509v3 Authority Key Identifier: keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cb:8d:02:f8:51:d6:0d:4a:b3:95:f1:f3:39:4b:8a:41:c5: c9:f1:bb:e7:83:4c:40:32:cb:72:2c:9f:68:b6:f5:9e:43:94: b9:6f:94:0d:c6:f0:0a:da:b4:ba:72:ac:3f:f5:16:4e:b8:e7: 84:45:5b:29:15:eb:30:e2:21:e4:6c:fa:13:7a:30:93:86:03: 6f:25:f2:6e:3b:4b:c7:a0:b0:1a:70:1e:2e:d1:28:89:80:94: 7a:76:08:2e:c6:bc:bf:18:c4:ac:b7:ea:93:6f:77:ba:c7:b6: 45:82:16:e8:22:b0:82:4f:5d:68:f3:6a:bc:e5:42:90:9a:1c: 9d:e9:d7:78:4d:9e:06:b4:dc:d1:ca:fa:90:7d:54:0a:2b:a8: 83:b6:4a:27:9e:00:c8:f3:f1:dd:14:18:71:55:52:8e:3e:17: ce:81:fd:8a:35:0a:96:93:cd:58:32:bf:c0:55:e4:8d:79:90: 2c:d5:40:6d:88:b0:86:00:62:a2:3f:26:f1:24:c1:32:25:10: ff:6c:cd:d8:f6:6c:af:35:de:01:6c:65:36:26:fe:b7:bd:64: cd:37:6b:87:14:8c:30:6e:b3:33:64:3c:cc:41:db:ef:24:7e: 6b:4b:5f:82:91:af:17:a3:f8:b0:a8:68:2a:d7:67:ec:1d:58: 7a:e3:8c:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEYxRTExMC8GA1UEBRMoRkVFQjcyQjQ3RTBGQkQ5RUIyNjgzRTI1OUZBNjQzNkJB NTY1MjNENDAeFw0yNTEwMTkxMDE0MTVaFw0yNTEwMjYxMDE0MTVaMBgxFjAUBgNV BAMTDTY4ZjRiOWY3LWIwNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPpQMQ+SkLCf8ilsKOBNGDr3xGrprYVsIMy/y2wKZAdXlyK3vVpKeu8ub4oBdW uvUh10xWID59Bv48qGDRbQw8RJ5kfux5Wxd0LyXFh/3ImQfDMezJCvu1lTW1q649 +0d3qKY5TXgYbB+draL+ZCk31pyt+U94Ulq+yWNzv3NoFXQPV3M1jPtoAD8mcTz+ dPsQLPSDKCux5CBEfi+3YKvha4g9HvlQpWdLKTAHYEwnjq8aYnyBnOJQlrG2XweO WDAVgQG3MSxG8lFUl3s2KNBPi5XjEbw0oGejcZUdiANJp0NNSJFlKkRg86tgXbc/ JC5DvEPfyFeRaOzDLeXMaNnXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9BgM2xH4 VU4kszRmu7bLDnMU6F0wHwYDVR0jBBgwFoAU/utytH4PvZ6yaD4ln6ZDa6VlI9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RjFFLzQ0QjgxQjIwMDE5 MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2eWFENGxuNlpEYTZWbEk5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3V0eXRINFB2WjZ5YUQ0bG42WkRhNlZsSTlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 RjFFLzQ0QjgxQjIwMDE5MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2 eWFENGxuNlpEYTZWbEk5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/LjQL4UdYNSrOV8fM5S4pBxcnxu+eDTEAyy3Isn2i29Z5DlLlvlA3G 8AratLpyrD/1Fk6454RFWykV6zDiIeRs+hN6MJOGA28l8m47S8egsBpwHi7RKImA lHp2CC7GvL8YxKy36pNvd7rHtkWCFugisIJPXWjzarzlQpCaHJ3p13hNnga03NHK +pB9VAorqIO2SieeAMjz8d0UGHFVUo4+F86B/Yo1CpaTzVgyv8BV5I15kCzVQG2I sIYAYqI/JvEkwTIlEP9szdj2bK813gFsZTYm/re9ZM03a4cUjDBuszNkPMxB2+8k fmtLX4KRrxej+LCoaCrXZ+wdWHrjjGg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:01 2025 by rpki-client