$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: zKVbcHM33plH8UfASOgOVsjKa4uUa03pdiHn8o+NlaI= Subject key identifier: BA:D5:69:01:14:E6:D5:02:95:03:BB:00:FF:1E:38:2A:57:94:AA:B1 Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: BB Signing time: Sun 19 Oct 2025 09:08:47 +0000 Manifest this update: Sun 19 Oct 2025 09:08:47 +0000 Manifest next update: Sun 26 Oct 2025 09:08:47 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: cgqViMga0/J8HGhCQD1ArX4qzQ0rqf7JuXj589JGv68=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Oct 19 09:08:47 2025 GMT Not After : Oct 26 09:08:47 2025 GMT Subject: CN=68f4aa9f-e658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:db:d5:b0:7b:e5:fb:d1:e2:17:dc:25:06: 0d:9a:ad:62:33:09:d6:f9:10:9a:12:a4:5e:d1:73: d0:e8:32:a9:de:4f:21:03:69:83:0c:48:fb:fb:6d: 87:d0:b9:8f:c0:36:13:3a:d9:b8:a2:e9:8b:65:e2: 2f:1b:9f:8a:43:68:3b:f5:ef:5f:ea:13:84:f4:0b: 52:27:1e:8a:38:a8:c4:ab:4e:4f:19:92:b0:87:d0: 92:cb:68:a3:bc:f1:0d:7f:8b:10:f1:8c:05:3d:c9: 93:72:04:44:40:1a:be:fd:1f:10:1b:c4:9c:2b:08: 65:a0:66:2a:61:9f:96:8b:ec:f2:10:f9:42:d6:de: e0:cc:39:0e:f8:25:25:76:a5:b7:c7:de:15:4a:cc: 4b:5e:14:6c:34:1d:b9:e0:df:95:95:3a:c1:0d:7f: 1f:9c:d5:56:6d:9f:c5:3f:42:63:6c:0f:a1:05:b6: da:98:f6:e6:8e:7c:52:74:cb:b0:4a:05:4b:dc:df: 0a:d8:86:f1:d9:04:95:87:69:99:c1:9f:71:6d:de: b7:e6:15:d4:41:bb:23:79:db:92:9e:0a:89:6a:d4: 68:a1:02:fb:98:46:01:e2:ad:4a:c3:8d:b4:ad:cb: 54:6d:a6:72:99:9b:23:07:0b:9d:e0:8d:ae:10:be: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D5:69:01:14:E6:D5:02:95:03:BB:00:FF:1E:38:2A:57:94:AA:B1 X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3b:05:55:20:7c:cf:bb:64:6c:f5:fc:5b:87:1f:7c:7f:39: a5:22:3f:c3:8f:e8:18:5a:98:35:da:5d:a9:76:e1:e5:0c:b8: 2a:11:dd:70:ae:cf:60:15:99:ea:24:34:4c:fa:da:c6:e3:eb: df:51:79:e0:c7:d2:d4:c7:79:96:01:4e:a0:8b:b1:36:be:7b: c7:1f:8b:6c:5a:7a:30:51:00:b3:e8:58:a8:83:47:09:cc:74: b1:ea:2f:59:06:13:21:0d:18:96:08:d5:c5:6a:bb:be:01:1e: e6:c7:7a:32:90:4e:4a:e2:ff:db:45:bb:66:22:07:8f:b0:ba: 9e:ef:d6:2d:35:d2:e7:8d:2e:1f:fc:b5:73:0a:8d:f1:6b:9d: 4b:48:8c:78:e7:91:d1:68:86:db:bd:7e:34:f7:59:6d:71:f2: 4a:b6:b1:be:d4:e2:67:f3:c9:c6:19:12:d0:5b:38:d5:d4:0f: f7:b5:13:22:4d:8a:91:2d:81:f6:ff:e7:16:cf:f2:38:83:f1: 65:56:58:97:a4:a8:15:51:5c:66:6a:44:06:63:ed:95:31:20: f3:68:e2:4c:e2:26:27:bd:df:c9:49:80:f2:92:51:f8:3c:11: ef:ab:59:e1:dd:ab:d3:b0:d8:57:a8:10:47:4c:e8:f9:72:df: 12:76:af:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjUxMDE5MDkwODQ3WhcNMjUxMDI2MDkwODQ3WjAYMRYwFAYD VQQDEw02OGY0YWE5Zi1lNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsrb1bB75fvR4hfcJQYNmq1iMwnW+RCaEqRe0XPQ6DKp3k8hA2mDDEj7+22H 0LmPwDYTOtm4oumLZeIvG5+KQ2g79e9f6hOE9AtSJx6KOKjEq05PGZKwh9CSy2ij vPENf4sQ8YwFPcmTcgREQBq+/R8QG8ScKwhloGYqYZ+Wi+zyEPlC1t7gzDkO+CUl dqW3x94VSsxLXhRsNB254N+VlTrBDX8fnNVWbZ/FP0JjbA+hBbbamPbmjnxSdMuw SgVL3N8K2Ibx2QSVh2mZwZ9xbd635hXUQbsjeduSngqJatRooQL7mEYB4q1Kw420 rctUbaZymZsjBwud4I2uEL5k6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrVaQEU 5tUClQO7AP8eOCpXlKqxMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZOwVVIHzPu2Rs9fxbhx98fzmlIj/Dj+gYWpg12l2pduHlDLgqEd1w rs9gFZnqJDRM+trG4+vfUXngx9LUx3mWAU6gi7E2vnvHH4tsWnowUQCz6Fiog0cJ zHSx6i9ZBhMhDRiWCNXFaru+AR7mx3oykE5K4v/bRbtmIgePsLqe79YtNdLnjS4f /LVzCo3xa51LSIx455HRaIbbvX4091ltcfJKtrG+1OJn88nGGRLQWzjV1A/3tRMi TYqRLYH2/+cWz/I4g/FlVliXpKgVUVxmakQGY+2VMSDzaOJM4iYnvd/JSYDyklH4 PBHvq1nh3avTsNhXqBBHTOj5ct8Sdq/9 -----END CERTIFICATE-----Generated at Tue Oct 21 01:38:15 2025 by rpki-client