$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: +cB2m861GZzdhqumvj6K/ApDSW6O6nN77sCZcHf1OVs= Subject key identifier: 47:6F:18:DC:71:93:F8:8C:73:BA:3A:2F:2B:14:C9:0E:BA:D2:BF:B9 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 013D Signing time: Sun 19 Oct 2025 07:14:50 +0000 Manifest this update: Sun 19 Oct 2025 07:14:49 +0000 Manifest next update: Sun 26 Oct 2025 07:14:49 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: +VirclohSEo7B0BQlwTpw7k8eVr1oBDcPulXZumj7j0=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Oct 19 07:14:49 2025 GMT Not After : Oct 26 07:14:49 2025 GMT Subject: CN=68f48fea-9dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:f0:15:d7:56:3f:53:9d:8a:c3:28:d8:64: 44:1f:67:6b:6c:30:54:da:27:3f:43:b7:d2:70:05: 6f:62:9e:06:8e:2c:de:4c:85:34:75:fe:ff:73:88: 8c:53:c9:f4:bd:23:dd:9c:25:19:63:e1:5f:5c:03: c8:f1:0b:62:cf:b1:4f:fe:dc:13:fb:a9:a5:4e:ce: 97:0b:72:82:0a:2e:85:dd:e1:24:26:cd:6c:b7:ab: cb:e1:25:ee:d6:f4:f7:36:87:e5:06:65:e9:bf:c8: e6:5a:aa:13:e9:54:1e:67:d7:ca:08:e5:98:9e:bf: fd:77:18:42:0b:6d:e0:55:7a:b0:de:23:5b:17:35: 16:0e:f0:ec:f2:a1:49:da:55:5f:51:26:45:97:76: fa:9f:c5:d5:2a:8a:b0:73:69:80:71:63:f9:6f:af: 88:64:5b:da:73:d9:e8:9e:da:f1:0d:1b:44:e4:5b: 40:71:75:57:6a:5e:e6:f6:5f:b1:75:66:07:90:97: 9c:4b:65:2a:48:65:ec:76:01:04:cc:e5:18:12:84: 80:f5:78:a3:c7:6c:fa:3c:c3:e9:f9:7a:25:17:64: 42:cf:94:08:f7:9c:f2:55:da:18:50:25:45:e6:65: ec:42:7e:15:2b:ef:7e:92:74:a7:79:04:84:6e:c9: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6F:18:DC:71:93:F8:8C:73:BA:3A:2F:2B:14:C9:0E:BA:D2:BF:B9 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0f:22:44:01:b5:10:71:a0:47:fa:0f:35:51:ab:7d:e8:f2: 89:34:82:bf:0a:20:25:f3:fa:47:d1:6f:f8:97:69:db:4c:99: 40:af:be:c6:34:a5:7f:c9:ff:a8:09:5c:2f:a3:b3:49:d7:86: 9b:0e:08:6e:37:9b:e9:74:ff:50:90:03:db:04:f7:d2:8c:78: 2c:91:36:4b:63:88:44:ca:80:30:18:d7:47:fe:25:95:9a:05: e1:07:06:6f:b3:14:4c:c9:9b:84:41:5a:9e:6a:50:4e:24:52: 2f:57:9b:c2:7a:9c:29:2f:44:b6:1d:72:3d:ba:cf:6c:2f:83: 54:f0:e2:71:5b:5f:ba:e3:96:b2:90:e3:4f:4d:38:92:73:b5: e5:d7:1c:cd:7e:2e:32:dc:24:80:a7:52:1b:ef:31:5b:23:f9: 5d:a8:d4:d3:e6:88:c4:1f:dd:1d:47:7c:bd:e2:5c:20:42:71: a3:25:c8:36:48:5e:4c:f3:4d:63:8b:54:f4:c7:e3:f9:34:12: 4d:72:d9:ce:ee:1c:19:84:65:2c:8f:d8:48:cc:be:ee:06:36: 83:98:00:90:8c:01:dc:81:c7:65:14:6e:0c:bd:f4:09:d9:cd: 65:13:f1:50:f3:fc:87:3a:93:da:30:b9:9a:e2:2e:94:db:83: 20:5c:91:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjUxMDE5MDcxNDQ5WhcNMjUxMDI2MDcxNDQ5WjAYMRYwFAYD VQQDEw02OGY0OGZlYS05ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+DwFddWP1OdisMo2GREH2drbDBU2ic/Q7fScAVvYp4GjizeTIU0df7/c4iM U8n0vSPdnCUZY+FfXAPI8Qtiz7FP/twT+6mlTs6XC3KCCi6F3eEkJs1st6vL4SXu 1vT3NoflBmXpv8jmWqoT6VQeZ9fKCOWYnr/9dxhCC23gVXqw3iNbFzUWDvDs8qFJ 2lVfUSZFl3b6n8XVKoqwc2mAcWP5b6+IZFvac9nontrxDRtE5FtAcXVXal7m9l+x dWYHkJecS2UqSGXsdgEEzOUYEoSA9Xijx2z6PMPp+XolF2RCz5QI95zyVdoYUCVF 5mXsQn4VK+9+knSneQSEbsnkcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdvGNxx k/iMc7o6LysUyQ660r+5MB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfDyJEAbUQcaBH+g81Uat96PKJNIK/CiAl8/pH0W/4l2nbTJlAr77G NKV/yf+oCVwvo7NJ14abDghuN5vpdP9QkAPbBPfSjHgskTZLY4hEyoAwGNdH/iWV mgXhBwZvsxRMyZuEQVqealBOJFIvV5vCepwpL0S2HXI9us9sL4NU8OJxW1+645ay kONPTTiSc7Xl1xzNfi4y3CSAp1Ib7zFbI/ldqNTT5ojEH90dR3y94lwgQnGjJcg2 SF5M801ji1T0x+P5NBJNctnO7hwZhGUsj9hIzL7uBjaDmACQjAHcgcdlFG4MvfQJ 2c1lE/FQ8/yHOpPaMLma4i6U24MgXJES -----END CERTIFICATE-----Generated at Tue Oct 21 02:21:12 2025 by rpki-client