$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: gnSawNhwbsVXk96dHY0mA/GbUj7Wfx6hLrgBww8rz3E= Subject key identifier: 62:AC:0D:18:B9:81:4D:BB:B5:6B:40:92:17:B2:A9:F1:BB:DA:D5:75 Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 0490 Signing time: Sun 19 Oct 2025 02:40:16 +0000 Manifest this update: Sun 19 Oct 2025 02:40:16 +0000 Manifest next update: Sun 26 Oct 2025 02:40:16 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: vL/YLSMr3YTspw+akzNobvbNg014lfqzKfeCtdR+Kk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: Oct 19 02:40:16 2025 GMT Not After : Oct 26 02:40:16 2025 GMT Subject: CN=68f44f90-046e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:b8:c6:44:93:70:4c:14:90:38:22:ce:f1: 0b:83:2b:8e:17:0e:2b:d2:88:f6:53:74:3f:a0:c2: 76:d1:4e:df:db:17:8c:dc:1c:bd:4a:8c:84:88:93: 73:8f:dd:48:ff:f0:8a:30:c9:ce:51:fb:45:52:36: ad:97:e0:54:f4:f1:12:55:70:b6:48:f0:19:86:01: 8b:c9:66:62:b0:fc:b0:79:2b:5d:d6:44:c7:b2:b7: f1:c2:c0:5f:d4:54:f4:0d:ac:4b:e7:28:c9:43:bd: 03:48:c8:d5:4c:c8:10:7e:84:64:86:3a:2f:ae:77: 4b:9e:80:9e:43:90:3c:0c:33:6a:c1:5c:eb:d2:b6: 26:52:0b:19:dc:59:b2:cd:49:ec:cc:1f:c0:de:6f: c2:9f:c6:c0:df:86:bb:d4:2c:3c:04:7b:71:4f:ee: 80:00:18:e9:32:af:5d:c3:1a:98:7f:64:db:d7:85: e0:90:10:fe:9b:8b:c1:38:0a:92:b8:1c:9f:23:6b: 25:2e:e5:aa:bc:18:18:80:55:ae:59:88:d7:b6:90: 86:b9:b7:a6:55:6d:01:70:0c:87:ee:f7:58:1e:8b: 3c:fa:8b:0b:62:f7:46:04:a6:14:77:33:d1:d2:64: 3b:28:31:47:7f:7e:10:3b:f8:35:ab:e1:10:47:d2: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AC:0D:18:B9:81:4D:BB:B5:6B:40:92:17:B2:A9:F1:BB:DA:D5:75 X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:82:c0:42:3c:4f:dc:79:73:d9:a3:60:92:5b:c8:88:6e: d4:07:d7:57:7f:48:7e:a9:22:a9:fa:55:9f:9b:b6:8f:10:45: bf:b8:fb:9f:f6:22:f9:38:d0:e7:ea:2e:57:14:dd:47:11:2f: 5f:1a:e3:b7:43:67:a5:a6:a4:ef:e8:63:cd:d6:b7:8a:7f:03: d3:94:64:46:c4:ee:75:58:a5:3c:23:d1:84:bf:d3:a3:ab:73: e6:33:e9:a2:53:a2:f7:65:83:3e:c3:7c:9c:bf:a7:13:d6:24: 4e:c5:b9:9c:f8:3c:3b:9b:ee:76:d1:90:ea:fd:e8:48:bd:6f: a3:08:fd:f6:28:54:d6:d7:0e:d7:c6:e3:f1:96:1b:e9:a3:f9: f7:5a:f8:1c:31:e0:96:53:03:92:30:27:76:e6:79:a8:68:1e: c4:00:3d:13:78:99:ca:3b:61:d8:a3:aa:21:07:0e:96:5f:51: 9a:27:cc:2b:8b:84:3d:e4:07:8b:5d:fa:4a:e1:d4:d2:69:ab: 4a:cb:a3:e7:0f:aa:a4:87:62:82:c2:a8:03:d3:d6:fa:20:21: 6e:15:34:33:aa:1a:ff:df:79:06:94:22:84:e3:fe:f5:c5:92: f2:e1:fd:88:b7:90:0a:cd:7e:65:b4:a4:03:fe:87:0b:4d:12: cd:1b:76:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDAyODlFMUUwODJCNkRBMUFCQTU1NTI4NDBDMENBQjAy QzJBM0I3NEUwHhcNMjUxMDE5MDI0MDE2WhcNMjUxMDI2MDI0MDE2WjAYMRYwFAYD VQQDEw02OGY0NGY5MC0wNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZa4xkSTcEwUkDgizvELgyuOFw4r0oj2U3Q/oMJ20U7f2xeM3By9SoyEiJNz j91I//CKMMnOUftFUjatl+BU9PESVXC2SPAZhgGLyWZisPyweStd1kTHsrfxwsBf 1FT0DaxL5yjJQ70DSMjVTMgQfoRkhjovrndLnoCeQ5A8DDNqwVzr0rYmUgsZ3Fmy zUnszB/A3m/Cn8bA34a71Cw8BHtxT+6AABjpMq9dwxqYf2Tb14XgkBD+m4vBOAqS uByfI2slLuWqvBgYgFWuWYjXtpCGubemVW0BcAyH7vdYHos8+osLYvdGBKYUdzPR 0mQ7KDFHf34QO/g1q+EQR9K+vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKsDRi5 gU27tWtAkheyqfG72tV1MB8GA1UdIwQYMBaAFAKJ4eCCttoaulVShAwMqwLCo7dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJocTZWVktFREF5ckFzS2p0 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJo cTZWVktFREF5ckFzS2p0MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrKYLAQjxP3Hlz2aNgklvIiG7UB9dXf0h+qSKp+lWfm7aPEEW/uPuf 9iL5ONDn6i5XFN1HES9fGuO3Q2elpqTv6GPN1reKfwPTlGRGxO51WKU8I9GEv9Oj q3PmM+miU6L3ZYM+w3ycv6cT1iROxbmc+Dw7m+520ZDq/ehIvW+jCP32KFTW1w7X xuPxlhvpo/n3WvgcMeCWUwOSMCd25nmoaB7EAD0TeJnKO2HYo6ohBw6WX1GaJ8wr i4Q95AeLXfpK4dTSaatKy6PnD6qkh2KCwqgD09b6ICFuFTQzqhr/33kGlCKE4/71 xZLy4f2It5AKzX5ltKQD/ocLTRLNG3ZQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:58 2025 by rpki-client