$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: qAugngHkIRgX7gCaO8Go/Xr78KO6gKbh27UxGxQLyPs= Subject key identifier: 4E:4E:92:A6:FA:EF:A4:80:2B:4F:64:C8:3E:61:76:6D:F9:6B:A2:B5 Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 4F Signing time: Sun 19 Oct 2025 10:40:36 +0000 Manifest this update: Sun 19 Oct 2025 10:40:35 +0000 Manifest next update: Sun 26 Oct 2025 10:40:35 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: LhNfrMsdEAnBmFCJz0AyKVTh9md98rsc/uDDvBNXc0g=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Oct 19 10:40:35 2025 GMT Not After : Oct 26 10:40:35 2025 GMT Subject: CN=68f4c024-b1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:0c:76:b7:26:4e:a7:aa:69:da:7e:a0:03: 6a:31:2e:3b:2d:95:7c:51:59:22:e2:78:f1:92:16: 83:6b:af:7e:a3:fe:08:46:34:39:7f:fd:a9:df:c5: 45:f3:3b:ff:02:a1:f5:61:97:fa:37:c1:38:72:41: cb:93:98:f8:61:f5:92:3c:8e:9e:59:57:57:f4:af: 26:6e:f5:4f:63:8c:47:06:4e:4e:8f:38:c5:44:b8: e7:a1:b8:61:c6:26:c6:41:0e:ee:f5:ce:26:e2:e9: 91:db:6e:36:d2:5b:42:20:57:dd:86:37:5a:e7:05: f0:99:46:6c:5b:cc:3a:d7:e2:d0:6f:ab:ed:43:e4: a9:6d:1a:d7:78:1a:ea:b1:2f:1d:23:6b:7d:32:cb: f9:b9:c0:65:94:ce:79:05:ba:a9:34:3c:0c:17:d8: 5d:32:b1:54:9b:35:bc:dc:b2:51:13:ea:eb:72:9c: 92:35:49:a9:2c:65:90:e1:bb:6e:7b:8c:68:f5:a8: 80:5a:3f:d8:47:f1:1a:4d:49:c4:51:3f:a2:5d:53: d3:e8:75:04:a2:49:aa:3c:64:58:0d:66:d8:4c:e9: 53:d2:3b:6d:fa:71:8e:7d:3a:d0:05:ad:01:38:0c: 4b:50:91:24:61:bd:b8:91:98:8d:65:04:83:4a:56: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4E:92:A6:FA:EF:A4:80:2B:4F:64:C8:3E:61:76:6D:F9:6B:A2:B5 X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:44:8c:44:27:33:b3:6e:1c:81:c1:83:22:06:1f:76:7b:f6: 59:0b:56:f4:e1:cb:cf:d6:c7:e8:80:e6:77:51:33:0d:42:d4: 68:d4:7a:6f:6e:0b:cb:89:d4:1a:01:99:0b:f4:30:9b:cc:b0: b8:7a:04:12:ef:26:d0:b4:95:f4:69:ad:f3:99:e3:b3:10:3a: b8:12:05:5b:42:d9:6d:ef:83:25:ec:51:9d:79:50:c2:99:56: 42:c0:c4:2e:5f:46:7a:85:fc:6d:6e:99:3b:33:93:6b:a9:ed: 58:06:52:5a:43:7b:2d:3e:11:3c:07:23:9a:e8:4b:02:55:63: 53:5d:6a:b5:e8:b8:90:83:a8:b5:30:45:b8:77:72:0d:12:af: 98:56:58:2a:68:96:5d:f1:a4:82:a1:6b:e0:36:90:fc:8d:27: 61:91:be:a7:7b:67:77:e0:72:66:de:9f:ed:e4:98:86:ed:27: ff:c8:b1:a2:66:c4:9f:cb:72:2d:f2:86:53:b1:b0:cc:58:79: 6e:d2:c6:80:91:a1:45:49:5e:80:59:83:f1:06:fa:60:a7:82: 7d:d4:d2:44:df:0d:64:73:b1:93:b8:a6:2d:af:04:f0:7b:73: ec:81:47:6e:df:c6:34:e3:a5:8f:71:51:a7:d0:f2:1e:ca:73: 6f:76:15:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTEwMTkxMDQwMzVaFw0yNTEwMjYxMDQwMzVaMBgxFjAUBgNV BAMTDTY4ZjRjMDI0LWIxYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfCAx2tyZOp6pp2n6gA2oxLjstlXxRWSLiePGSFoNrr36j/ghGNDl//anfxUXz O/8CofVhl/o3wThyQcuTmPhh9ZI8jp5ZV1f0ryZu9U9jjEcGTk6POMVEuOehuGHG JsZBDu71zibi6ZHbbjbSW0IgV92GN1rnBfCZRmxbzDrX4tBvq+1D5KltGtd4Guqx Lx0ja30yy/m5wGWUznkFuqk0PAwX2F0ysVSbNbzcslET6utynJI1SaksZZDhu257 jGj1qIBaP9hH8RpNScRRP6JdU9PodQSiSao8ZFgNZthM6VPSO236cY59OtAFrQE4 DEtQkSRhvbiRmI1lBINKVvF/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTk6Spvrv pIArT2TIPmF2bflrorUwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAClEjEQnM7NuHIHBgyIGH3Z79lkLVvThy8/Wx+iA5ndRMw1C1GjUem9u C8uJ1BoBmQv0MJvMsLh6BBLvJtC0lfRprfOZ47MQOrgSBVtC2W3vgyXsUZ15UMKZ VkLAxC5fRnqF/G1umTszk2up7VgGUlpDey0+ETwHI5roSwJVY1NdarXouJCDqLUw Rbh3cg0Sr5hWWCpoll3xpIKha+A2kPyNJ2GRvqd7Z3fgcmben+3kmIbtJ//IsaJm xJ/Lci3yhlOxsMxYeW7SxoCRoUVJXoBZg/EG+mCngn3U0kTfDWRzsZO4pi2vBPB7 c+yBR27fxjTjpY9xUafQ8h7Kc292FUo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:45 2025 by rpki-client