$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: O5FyrZeFdYwd6ACQK07D04nqve5KTNLoJcIQwP2tatY= Subject key identifier: 11:E6:F9:70:95:47:6E:18:1A:00:33:C9:7A:E0:39:C2:63:B0:6B:CC Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 0494 Signing time: Sun 19 Oct 2025 01:51:38 +0000 Manifest this update: Sun 19 Oct 2025 01:51:37 +0000 Manifest next update: Sun 26 Oct 2025 01:51:37 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: SICpCrxi5B+sDZ6rXlwJfHwaqUi0zZI6Hdjv0Pmqke8=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: Oct 19 01:51:37 2025 GMT Not After : Oct 26 01:51:37 2025 GMT Subject: CN=68f44429-3bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:a3:c1:6e:8e:d6:62:20:d6:ab:cb:19:5a: b4:fd:e5:3f:d5:f7:51:1d:fe:35:41:ae:a4:8d:7e: 7a:9c:e1:52:94:55:db:d1:c7:e2:73:10:3b:5c:9e: cb:8f:58:3c:6e:c4:ad:6e:5c:57:b6:2e:a0:5d:b3: 21:8f:94:2b:8b:54:1d:4d:08:bd:9e:17:37:3c:e2: 69:a3:12:c2:19:28:a9:a7:59:db:29:fb:32:f5:8d: dd:fb:4e:70:8b:ee:69:24:bc:cd:9e:22:e3:75:cb: b4:2f:89:a5:42:4b:62:d8:8d:d6:87:9a:a7:3b:8d: b2:93:0a:13:c9:b2:ca:c8:00:79:eb:bf:06:b3:f1: b7:d8:fb:4f:ba:11:6d:f1:15:9a:fb:05:47:c8:b2: 5e:87:57:6b:d0:9d:fb:88:94:7a:d2:ab:ce:27:f9: 5d:2f:c5:e9:77:81:67:09:ff:5c:bc:2f:b3:08:26: 6a:0e:72:ea:0e:94:75:91:0c:ca:29:99:87:c8:b2: 76:d4:3a:83:2a:fc:11:b4:e7:1a:75:a6:85:e8:08: 5c:d1:3c:06:b2:d3:31:9e:17:7b:03:99:7f:5a:e7: f4:b0:b1:5e:40:87:60:aa:cf:11:f4:f4:65:9c:c1: 6b:68:ab:af:d0:79:95:45:24:e4:2b:d7:d1:db:6b: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:F9:70:95:47:6E:18:1A:00:33:C9:7A:E0:39:C2:63:B0:6B:CC X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e9:56:0e:65:7d:2f:74:68:61:20:6d:33:d1:d6:4e:0c:70: 6f:bb:88:1d:bb:d0:5d:92:4f:44:c1:19:42:92:38:c9:99:c3: 4c:1b:50:fe:68:bb:f1:27:21:4c:05:d9:7f:02:70:e6:8b:7f: 19:b8:40:e4:b9:f8:89:14:4c:fc:01:96:e7:7c:60:23:0d:88: b3:c6:a9:b4:46:70:fd:62:8f:b5:3b:59:4f:ce:51:bf:eb:d4: a1:d1:aa:37:91:63:c3:02:00:50:4c:2c:49:87:e4:12:b4:12: 42:40:2d:34:d1:4f:62:8c:3f:aa:6a:af:7e:75:dc:6c:c4:65: 84:82:3c:12:11:6f:31:5b:c8:ba:75:58:aa:33:3c:e5:bf:52: cf:2e:fe:06:72:dd:df:e7:7d:94:97:f1:18:74:26:fd:8a:04: 82:56:9a:94:46:8e:4b:79:04:a5:69:b6:ae:99:8d:a9:0d:74: 74:71:e5:a0:43:4c:4a:8c:a5:1c:24:c8:1f:fc:48:10:9d:fb: 37:41:11:6e:5a:71:25:34:00:1f:c1:92:3e:14:2b:df:a8:35: c6:07:35:33:d8:bb:95:c3:a1:64:5d:7c:6a:73:7a:c1:a1:20: da:65:e1:66:e3:b4:7c:4e:bc:2f:43:14:a9:7b:a3:92:3b:7d: d5:f0:0e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUxMDE5MDE1MTM3WhcNMjUxMDI2MDE1MTM3WjAYMRYwFAYD VQQDEw02OGY0NDQyOS0zYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwSjwW6O1mIg1qvLGVq0/eU/1fdRHf41Qa6kjX56nOFSlFXb0cficxA7XJ7L j1g8bsStblxXti6gXbMhj5Qri1QdTQi9nhc3POJpoxLCGSipp1nbKfsy9Y3d+05w i+5pJLzNniLjdcu0L4mlQkti2I3Wh5qnO42ykwoTybLKyAB5678Gs/G32PtPuhFt 8RWa+wVHyLJeh1dr0J37iJR60qvOJ/ldL8Xpd4FnCf9cvC+zCCZqDnLqDpR1kQzK KZmHyLJ21DqDKvwRtOcadaaF6Ahc0TwGstMxnhd7A5l/Wuf0sLFeQIdgqs8R9PRl nMFraKuv0HmVRSTkK9fR22tyOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHm+XCV R24YGgAzyXrgOcJjsGvMMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB6VYOZX0vdGhhIG0z0dZODHBvu4gdu9Bdkk9EwRlCkjjJmcNMG1D+ aLvxJyFMBdl/AnDmi38ZuEDkufiJFEz8AZbnfGAjDYizxqm0RnD9Yo+1O1lPzlG/ 69Sh0ao3kWPDAgBQTCxJh+QStBJCQC000U9ijD+qaq9+ddxsxGWEgjwSEW8xW8i6 dViqMzzlv1LPLv4Gct3f532Ul/EYdCb9igSCVpqURo5LeQSlabaumY2pDXR0ceWg Q0xKjKUcJMgf/EgQnfs3QRFuWnElNAAfwZI+FCvfqDXGBzUz2LuVw6FkXXxqc3rB oSDaZeFm47R8TrwvQxSpe6OSO33V8A5y -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:37 2025 by rpki-client