$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: TMBobTVYV5qUY+Ku/VXy+3V84pmNfbA7XShHnDiC8Fs= Subject key identifier: 5F:A3:36:57:65:DB:F3:72:18:CF:A9:4D:22:A2:77:99:78:B1:66:86 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 9D Signing time: Sun 19 Oct 2025 09:34:40 +0000 Manifest this update: Sun 19 Oct 2025 09:34:40 +0000 Manifest next update: Sun 26 Oct 2025 09:34:40 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: NchZIyu96SLWSX+H7j7zWqt5FnOfkdv9oeGmN2q9MTM=) 2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Oct 19 09:34:40 2025 GMT Not After : Oct 26 09:34:40 2025 GMT Subject: CN=68f4b0b0-0569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:fe:e7:dc:92:a8:60:a8:4f:1a:a1:39:b6: 90:fe:28:99:d8:d0:2d:52:79:af:b7:30:26:60:5d: b5:74:c0:52:79:29:24:e9:d4:bd:3b:12:70:36:1e: 7e:59:91:35:81:8e:da:dd:be:c9:7d:e1:b5:99:d5: 3f:f7:e3:a2:44:81:4e:5d:b4:be:44:ab:b9:09:56: 99:a1:69:30:7e:fa:27:8e:47:28:51:79:da:87:56: c6:6d:a2:41:de:2b:08:76:98:f9:0a:1a:ae:0e:de: 37:ac:30:97:30:e8:aa:f8:2c:44:6a:bc:fd:8a:c4: 0a:cd:0a:46:92:ee:23:36:4d:d4:ba:92:92:2f:bf: ec:dd:46:d1:96:cf:ca:8c:1a:6e:85:61:76:2c:93: 8e:8a:77:f6:c8:41:1a:b6:89:3a:8e:ec:25:09:7f: df:d2:44:44:3e:d5:9f:7c:d4:9a:5b:d4:95:8c:13: 25:90:ea:04:20:cb:c9:0b:ff:c0:14:6e:2d:4d:a0: b9:81:37:40:10:35:31:58:19:b0:6d:07:80:b7:82: a6:92:69:e3:03:a4:cc:d8:df:ac:f8:c4:1f:f1:cd: 38:b2:e6:06:2c:db:b3:d8:81:34:8c:79:6a:1e:52: 66:34:f0:00:41:18:51:98:7e:ab:6d:ef:56:a8:10: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A3:36:57:65:DB:F3:72:18:CF:A9:4D:22:A2:77:99:78:B1:66:86 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8f:40:d0:22:c9:07:51:63:20:a2:88:3a:c0:8c:bb:db:71: 7f:21:59:ed:99:da:c6:0b:f8:67:8b:f2:65:0c:e1:36:0e:c7: c4:2a:25:2e:88:21:e8:a2:6a:f2:b6:fd:05:21:9d:bd:2b:9d: 38:78:e8:3f:a5:75:01:d5:6a:0a:2d:07:bc:db:92:7e:25:80: 4a:b0:39:d7:d0:12:dc:61:8c:5d:de:1b:9c:b9:13:83:30:bb: 07:06:26:d4:1b:bc:9c:1e:2b:2f:cb:8f:3f:43:08:a7:33:7f: a7:da:3c:1a:b2:cf:6c:05:86:1a:2a:a7:b6:13:e3:60:61:b8: 8c:f1:50:a5:8c:1c:b5:a0:47:36:17:f6:db:43:06:a6:4b:48: 3f:6b:aa:50:c2:8c:1d:a5:f8:8d:3b:78:01:a8:10:c0:5b:21: 44:29:50:ca:c4:9d:20:99:18:e5:dc:e0:cc:bf:dc:f2:16:a9: e0:5d:98:fb:db:89:2f:24:4c:7f:d7:b8:f0:aa:d8:0f:14:cb: db:fe:51:07:cb:e5:8e:97:d5:c9:3b:c5:ba:f7:5b:be:95:ee: d9:c4:1c:d2:3c:98:04:28:7c:51:43:f8:66:a2:6d:93:27:ba: 27:6c:d7:ed:e1:98:4e:b4:97:29:d1:72:9e:61:d8:d9:73:de: 7d:03:af:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC MTY0NENCOEEwHhcNMjUxMDE5MDkzNDQwWhcNMjUxMDI2MDkzNDQwWjAYMRYwFAYD VQQDEw02OGY0YjBiMC0wNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNz+59ySqGCoTxqhObaQ/iiZ2NAtUnmvtzAmYF21dMBSeSkk6dS9OxJwNh5+ WZE1gY7a3b7JfeG1mdU/9+OiRIFOXbS+RKu5CVaZoWkwfvonjkcoUXnah1bGbaJB 3isIdpj5ChquDt43rDCXMOiq+CxEarz9isQKzQpGku4jNk3UupKSL7/s3UbRls/K jBpuhWF2LJOOinf2yEEatok6juwlCX/f0kREPtWffNSaW9SVjBMlkOoEIMvJC//A FG4tTaC5gTdAEDUxWBmwbQeAt4KmkmnjA6TM2N+s+MQf8c04suYGLNuz2IE0jHlq HlJmNPAAQRhRmH6rbe9WqBBInQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+jNldl 2/NyGM+pTSKid5l4sWaGMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE MWozX2I4WkFsX0t4WkV5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZj0DQIskHUWMgoog6wIy723F/IVntmdrGC/hni/JlDOE2DsfEKiUu iCHoomrytv0FIZ29K504eOg/pXUB1WoKLQe825J+JYBKsDnX0BLcYYxd3hucuROD MLsHBibUG7ycHisvy48/QwinM3+n2jwass9sBYYaKqe2E+NgYbiM8VCljBy1oEc2 F/bbQwamS0g/a6pQwowdpfiNO3gBqBDAWyFEKVDKxJ0gmRjl3ODMv9zyFqngXZj7 24kvJEx/17jwqtgPFMvb/lEHy+WOl9XJO8W691u+le7ZxBzSPJgEKHxRQ/hmom2T J7onbNft4ZhOtJcp0XKeYdjZc959A69d -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:33 2025 by rpki-client