$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json) Hash identifier: EBbMhjhiluSNJB9o9I2W76JMyO9DR+TP7b4hqjZrypQ= Subject key identifier: 69:95:9A:EA:CF:D2:2F:34:CE:3F:45:15:BA:2F:A2:09:E3:28:A7:28 Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft Manifest number: 09F9 Signing time: Sat 18 Oct 2025 20:58:18 +0000 Manifest this update: Sat 18 Oct 2025 20:58:18 +0000 Manifest next update: Sat 25 Oct 2025 20:58:18 +0000 Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: Us0cUmfIOEx7OTYbnigb2CqNaWHAaqZOzYM0ZJiZ7Lw=) 2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: Fn/SXrKcwrvikRaZqbM9UmvxwM1m/am9+sz8PJUtJeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Validity Not Before: Oct 18 20:58:18 2025 GMT Not After : Oct 25 20:58:18 2025 GMT Subject: CN=68f3ff6a-d43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5b:3e:68:f0:5d:9c:70:70:81:e9:6f:21:5f: f1:cf:50:93:e7:a9:d7:a8:96:77:2c:cb:88:92:55: 49:51:be:cc:3d:7f:3b:51:b2:20:2c:9f:43:d2:b1: 1b:ea:96:a8:43:76:2b:a3:19:d9:aa:35:47:c8:37: 07:f7:a4:53:2f:86:33:9a:89:d5:94:66:52:4f:58: 51:e5:31:d0:10:1e:e7:d0:9c:6d:4a:82:b8:25:84: 15:77:73:e9:ce:94:23:5a:2f:22:e5:59:63:81:69: 9b:c6:8b:25:71:b8:f5:e1:e5:b8:5a:1d:f5:4e:af: 15:9b:7f:46:93:ab:eb:0f:7c:36:6c:65:04:6d:a9: 3e:4f:9b:fe:6f:b9:e5:36:26:61:c6:37:f3:0b:d0: 63:0f:11:13:b2:1d:4a:20:64:2c:e3:42:68:f7:5e: 39:5a:f2:4d:e3:80:aa:ed:b0:bd:48:8f:16:bd:11: b5:b5:b5:88:03:38:cb:a6:83:07:b3:b4:5a:fd:d4: 91:09:c3:d3:1a:4a:eb:67:43:96:3c:d5:6d:ce:f5: 3f:df:92:c6:5c:54:93:d6:98:40:41:51:5d:e9:2a: 7e:5a:f3:04:1e:4a:92:33:0a:10:d4:90:72:84:fd: f5:01:da:9c:7e:2c:44:d4:2a:25:06:92:13:87:3e: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:9A:EA:CF:D2:2F:34:CE:3F:45:15:BA:2F:A2:09:E3:28:A7:28 X509v3 Authority Key Identifier: keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f8:e3:68:68:48:5b:be:b7:60:26:af:2f:3d:c7:02:70:f3: 47:01:13:4e:98:6b:49:3b:6c:64:55:2f:ff:89:06:bc:1d:9d: 14:4c:cc:5a:0a:f0:d9:a7:c8:b0:26:ff:fd:6c:79:7c:62:00: 1b:fd:b9:39:88:b5:b2:3f:6e:90:73:49:9e:90:6b:27:30:00: 32:a2:d1:de:c9:9c:98:d6:e2:d9:fa:73:15:f7:40:2e:f9:0e: 67:b8:e4:a7:e3:3a:d7:12:44:54:42:c1:3a:8d:b3:90:81:0b: 8e:a9:ce:44:56:07:4c:e9:93:35:52:ba:dd:76:c2:12:ac:f1: ae:22:a8:6d:8e:9d:c6:1e:0b:2d:06:fa:e4:af:57:7e:44:94: e8:a8:51:a1:ed:5b:07:ab:00:29:0c:85:e6:d0:51:df:e4:ad: 1f:27:96:3c:f7:39:0f:fd:3b:ae:3c:c3:41:bc:27:af:3c:fe: 8e:b0:2f:35:c7:6f:88:2c:b6:ae:e1:ed:f8:cc:a9:68:6e:fb: 18:d3:1f:98:1a:5b:1f:fb:8a:dd:e7:68:38:d4:d9:58:62:60: ed:46:a2:a4:e2:ee:10:e4:d9:ea:c2:30:7c:a1:91:8b:50:fd: 54:b8:af:e5:b7:53:d9:bb:29:6e:47:86:a0:0c:f0:77:0e:56: 23:15:79:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3 MEE2NkEwNTUwHhcNMjUxMDE4MjA1ODE4WhcNMjUxMDI1MjA1ODE4WjAYMRYwFAYD VQQDEw02OGYzZmY2YS1kNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11s+aPBdnHBwgelvIV/xz1CT56nXqJZ3LMuIklVJUb7MPX87UbIgLJ9D0rEb 6paoQ3YroxnZqjVHyDcH96RTL4YzmonVlGZST1hR5THQEB7n0JxtSoK4JYQVd3Pp zpQjWi8i5VljgWmbxoslcbj14eW4Wh31Tq8Vm39Gk6vrD3w2bGUEbak+T5v+b7nl NiZhxjfzC9BjDxETsh1KIGQs40Jo9145WvJN44Cq7bC9SI8WvRG1tbWIAzjLpoMH s7Ra/dSRCcPTGkrrZ0OWPNVtzvU/35LGXFST1phAQVFd6Sp+WvMEHkqSMwoQ1JBy hP31AdqcfixE1ColBpIThz4dAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmVmurP 0i80zj9FFbovognjKKcoMB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REU3QS9CQzcxRUNDNjhENDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cx T3NUTkw0UFJHd1J3cG1vRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH+ONoaEhbvrdgJq8vPccCcPNHARNOmGtJO2xkVS//iQa8HZ0UTMxa CvDZp8iwJv/9bHl8YgAb/bk5iLWyP26Qc0mekGsnMAAyotHeyZyY1uLZ+nMV90Au +Q5nuOSn4zrXEkRUQsE6jbOQgQuOqc5EVgdM6ZM1UrrddsISrPGuIqhtjp3GHgst Bvrkr1d+RJToqFGh7VsHqwApDIXm0FHf5K0fJ5Y89zkP/TuuPMNBvCevPP6OsC81 x2+ILLau4e34zKlobvsY0x+YGlsf+4rd52g41NlYYmDtRqKk4u4Q5NnqwjB8oZGL UP1UuK/lt1PZuyluR4agDPB3DlYjFXmY -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:05 2025 by rpki-client