$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: wvl3eQ9tyYWQZ+UOf8GqLeJ+EUOZf9Yizba5ta823K4= Subject key identifier: F3:19:3A:77:77:CD:8D:C0:6B:B4:86:BC:2B:46:34:1F:F1:85:EB:67 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 0684 Signing time: Sun 19 Oct 2025 00:13:08 +0000 Manifest this update: Sun 19 Oct 2025 00:13:07 +0000 Manifest next update: Sun 26 Oct 2025 00:13:07 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: ilLuWgP2ZtsCFeUFzo3qajRbwUIRH6Ydbr4MYZz8W5s=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: +s2eZecZzBHi2TTyZXd1eJhQogRo8Y85r4PmKMG3WZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Oct 19 00:13:07 2025 GMT Not After : Oct 26 00:13:07 2025 GMT Subject: CN=68f42d14-8d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a0:3c:ec:f7:86:48:3e:8e:c5:ae:76:d6:5a: 6b:9b:3b:11:9e:dd:b6:44:10:2c:28:c5:3a:ee:ee: 96:f0:5e:92:78:51:0d:16:b8:05:96:8a:6a:18:7c: 14:e7:5f:99:6d:d5:6a:80:15:b2:b9:41:2f:68:72: 04:83:7e:d6:5d:2f:58:88:10:c5:96:a8:33:59:83: 49:27:e3:1f:2c:42:a0:e8:7e:92:ed:5a:10:e9:f5: 36:8f:f3:f6:1e:14:33:2a:ff:71:91:5c:ff:d9:df: 81:d1:ac:52:2b:b7:34:aa:4e:8c:b5:51:ca:af:fa: a6:d9:86:86:40:11:a8:90:0f:a3:22:e0:9e:0b:5b: 54:a5:14:bd:e8:c1:c8:f9:a5:af:9f:9b:be:d5:5d: 2e:68:02:e6:3d:df:ba:ab:78:30:2c:19:da:05:0c: 70:71:24:05:cc:b0:b8:e8:ed:6a:57:02:49:93:d3: 49:e8:a2:76:09:91:a3:30:d0:ba:16:07:6b:64:9c: 90:e8:5a:37:01:08:1b:ea:eb:5d:b9:81:e8:59:ae: 91:d3:83:fa:8b:c2:b8:97:28:1f:1c:4a:ae:87:f8: 93:59:24:f0:67:f6:0c:aa:c8:75:e9:47:f4:a4:08: 47:78:96:24:7a:10:f2:7e:18:08:e3:72:20:f9:f6: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:19:3A:77:77:CD:8D:C0:6B:B4:86:BC:2B:46:34:1F:F1:85:EB:67 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:30:b8:d1:ef:6c:74:dd:71:72:2c:ee:ae:49:f3:70:23:36: 1d:d9:5c:bf:9c:5f:b8:c4:dc:4c:ee:53:a7:0d:0c:31:97:c4: 0e:41:28:73:3e:6c:71:39:9a:fe:fe:69:1e:58:6a:ce:0e:92: 16:be:9d:16:0c:91:0b:10:cb:c5:78:e2:72:03:b4:1e:4b:3a: 86:24:96:6c:d9:bd:31:65:03:c6:2b:24:11:9a:5b:de:85:aa: 04:69:94:99:ce:00:b4:21:ff:f1:13:e3:44:ac:e6:ad:86:16: 1f:89:5c:82:03:77:9c:c9:63:88:d9:54:81:a4:d5:94:32:87: 94:45:89:81:13:1c:07:45:f8:1d:60:12:d3:03:72:ea:75:1c: a0:34:2c:46:ca:3c:4d:3c:db:6c:81:5a:da:65:5b:d9:dd:77: 83:d9:49:41:da:77:70:ec:40:40:3c:a1:d6:ef:28:80:c9:2e: 72:d5:7c:f1:62:50:1b:c5:14:74:a8:00:37:e8:22:24:05:17: b4:12:cc:b0:9f:e9:8a:33:56:c3:18:95:ef:27:20:87:ba:b7: a0:0e:80:39:d7:90:13:0b:e2:2f:21:51:70:e4:e7:e9:2f:c5: f9:fe:62:6d:18:55:d6:1e:ba:f3:84:66:1b:d8:16:ea:ba:5b: ad:61:d3:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjUxMDE5MDAxMzA3WhcNMjUxMDI2MDAxMzA3WjAYMRYwFAYD VQQDEw02OGY0MmQxNC04ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+6A87PeGSD6Oxa521lprmzsRnt22RBAsKMU67u6W8F6SeFENFrgFlopqGHwU 51+ZbdVqgBWyuUEvaHIEg37WXS9YiBDFlqgzWYNJJ+MfLEKg6H6S7VoQ6fU2j/P2 HhQzKv9xkVz/2d+B0axSK7c0qk6MtVHKr/qm2YaGQBGokA+jIuCeC1tUpRS96MHI +aWvn5u+1V0uaALmPd+6q3gwLBnaBQxwcSQFzLC46O1qVwJJk9NJ6KJ2CZGjMNC6 FgdrZJyQ6Fo3AQgb6utduYHoWa6R04P6i8K4lygfHEquh/iTWSTwZ/YMqsh16Uf0 pAhHeJYkehDyfhgI43Ig+fbmRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMZOnd3 zY3Aa7SGvCtGNB/xhetnMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUMLjR72x03XFyLO6uSfNwIzYd2Vy/nF+4xNxM7lOnDQwxl8QOQShz PmxxOZr+/mkeWGrODpIWvp0WDJELEMvFeOJyA7QeSzqGJJZs2b0xZQPGKyQRmlve haoEaZSZzgC0If/xE+NErOathhYfiVyCA3ecyWOI2VSBpNWUMoeURYmBExwHRfgd YBLTA3LqdRygNCxGyjxNPNtsgVraZVvZ3XeD2UlB2ndw7EBAPKHW7yiAyS5y1Xzx YlAbxRR0qAA36CIkBRe0Esywn+mKM1bDGJXvJyCHuregDoA515ATC+IvIVFw5Ofp L8X5/mJtGFXWHrrzhGYb2BbqulutYdNb -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:00 2025 by rpki-client