$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: a4DfPm7VqVwd8anAvlmr+keNkiE0UlpccGJ4Y3w9i8c= Subject key identifier: 66:D3:39:C1:19:E2:82:EC:E0:37:AD:F0:0B:F3:11:51:D8:3E:42:96 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: F3 Signing time: Sun 19 Oct 2025 08:10:46 +0000 Manifest this update: Sun 19 Oct 2025 08:10:45 +0000 Manifest next update: Sun 26 Oct 2025 08:10:45 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: pHGVhXkmTZxsZvDypcQ2RMHllMsXGKH9PybSYZQf5JI=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: N6wnq+SiTT7KZAm9ihuMhFBquoYx3YiKfww2FuMhesA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Oct 19 08:10:45 2025 GMT Not After : Oct 26 08:10:45 2025 GMT Subject: CN=68f49d05-fd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:0a:24:67:1f:54:bd:ec:6a:dd:6f:a8:7b: dc:1f:50:c2:19:63:a3:72:81:5a:b5:14:b1:1e:a4: 52:ae:60:06:91:2d:62:ec:0a:fc:d2:57:67:54:3b: e2:58:2a:e8:19:fd:20:d1:cc:08:0c:f0:26:9d:54: 14:61:38:33:84:76:fa:8b:62:08:cc:63:1f:98:30: 4f:cc:9d:65:b5:28:89:67:ed:a2:b0:b9:04:48:fb: 0e:c0:32:55:86:10:32:a8:00:4d:fa:c7:0c:c6:0d: de:f6:30:13:f1:39:cb:bb:d9:56:3a:5e:fc:75:5a: 29:d7:c5:92:aa:e6:6f:a1:35:df:87:27:33:58:b9: 23:4a:48:7b:1d:2c:56:2c:5e:c8:8b:79:ac:a0:ed: be:27:34:10:d2:8b:f7:67:0e:82:48:cd:63:f9:b6: 3a:88:1e:03:c8:30:3d:df:cd:ec:3e:d7:67:92:f8: 14:ca:91:41:56:39:62:1b:eb:74:dd:90:4e:12:c1: 3d:86:17:dd:89:ff:d1:d3:57:20:4c:4e:de:60:37: 83:80:d8:0d:93:81:90:4c:dc:6c:46:fa:ea:3c:e7: 2b:a9:6f:c6:bd:06:64:87:e1:d7:c3:d9:66:be:42: dd:27:c9:14:82:e3:86:b1:ff:89:c8:57:5a:1f:77: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D3:39:C1:19:E2:82:EC:E0:37:AD:F0:0B:F3:11:51:D8:3E:42:96 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:79:ff:8d:cb:c6:d6:6b:f2:9c:c2:22:c6:18:21:ef:69:3b: 8e:a8:fd:a1:c4:71:2b:db:bf:70:1a:b0:bf:8c:71:f0:34:6b: 79:55:12:11:26:0a:76:50:01:f1:e8:eb:53:8e:df:4f:fb:bd: df:6f:e4:48:9d:c5:50:45:cb:44:fe:61:c4:8f:97:5d:01:f1: ee:3f:1e:7d:c3:77:f3:27:fc:55:f7:4b:4f:fd:fd:de:e7:d9: 6f:95:f1:4e:91:3d:ef:aa:50:39:d8:79:1c:7e:1b:02:60:e5: 69:c7:3e:74:0c:bf:bc:0c:6d:44:80:a1:91:c9:62:30:b6:aa: 9b:e2:42:7f:1f:c5:0f:2a:a8:df:cb:1f:dc:76:11:d2:f2:f8: ca:d9:16:9b:c4:53:9d:0c:3d:d0:60:7c:07:8b:b2:8f:5f:bb: a6:98:3e:89:95:86:94:34:6e:74:28:7d:ae:a0:78:1e:3d:d0: 4a:87:ab:8b:a8:59:dd:cf:3e:7b:2d:68:41:d5:21:3c:60:91: 2f:22:9c:ae:d1:f3:5d:dc:d1:d2:d5:e3:1c:f1:7e:a9:f7:fa: 4a:06:29:32:c4:f9:ae:39:bc:f2:20:88:39:7f:06:46:a0:39: d1:38:ad:35:ce:6c:9b:32:a8:ed:03:5c:80:64:e0:63:5d:75: 70:6e:69:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUxMDE5MDgxMDQ1WhcNMjUxMDI2MDgxMDQ1WjAYMRYwFAYD VQQDEw02OGY0OWQwNS1mZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzasKJGcfVL3sat1vqHvcH1DCGWOjcoFatRSxHqRSrmAGkS1i7Ar80ldnVDvi WCroGf0g0cwIDPAmnVQUYTgzhHb6i2IIzGMfmDBPzJ1ltSiJZ+2isLkESPsOwDJV hhAyqABN+scMxg3e9jAT8TnLu9lWOl78dVop18WSquZvoTXfhyczWLkjSkh7HSxW LF7Ii3msoO2+JzQQ0ov3Zw6CSM1j+bY6iB4DyDA9383sPtdnkvgUypFBVjliG+t0 3ZBOEsE9hhfdif/R01cgTE7eYDeDgNgNk4GQTNxsRvrqPOcrqW/GvQZkh+HXw9lm vkLdJ8kUguOGsf+JyFdaH3eOCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbTOcEZ 4oLs4Det8AvzEVHYPkKWMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMef+Ny8bWa/KcwiLGGCHvaTuOqP2hxHEr279wGrC/jHHwNGt5VRIR Jgp2UAHx6OtTjt9P+73fb+RIncVQRctE/mHEj5ddAfHuPx59w3fzJ/xV90tP/f3e 59lvlfFOkT3vqlA52HkcfhsCYOVpxz50DL+8DG1EgKGRyWIwtqqb4kJ/H8UPKqjf yx/cdhHS8vjK2RabxFOdDD3QYHwHi7KPX7ummD6JlYaUNG50KH2uoHgePdBKh6uL qFndzz57LWhB1SE8YJEvIpyu0fNd3NHS1eMc8X6p9/pKBikyxPmuObzyIIg5fwZG oDnROK01zmybMqjtA1yAZOBjXXVwbmlb -----END CERTIFICATE-----Generated at Mon Oct 20 05:44:49 2025 by rpki-client