$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: Dy0UOI0f+tnHhDgi+H7iOf1x7/ERFoTeEq4WJ+cBIRA= Subject key identifier: 04:0D:47:62:3C:53:A3:66:D5:E5:9E:23:78:13:FB:88:75:FD:6F:8D Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1CB6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C9B Signing time: Mon 20 Oct 2025 16:28:26 +0000 Manifest this update: Mon 20 Oct 2025 16:28:25 +0000 Manifest next update: Mon 27 Oct 2025 16:28:25 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: M1nDrB9j2R5h9MP1A8QNz3117v1x7mC9j+b0l5eZPls=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7350 (0x1cb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Oct 20 16:28:25 2025 GMT Not After : Oct 27 16:28:25 2025 GMT Subject: CN=68f66329-e702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:b2:ad:91:93:b0:c3:e5:85:01:e6:8b:79: 5e:9a:d6:de:cf:da:5a:bb:17:eb:92:c6:80:1e:ca: a2:28:be:48:94:39:55:5a:b4:43:f5:68:02:ec:40: e7:f8:a6:fc:f3:8c:94:13:81:33:5e:bc:ee:ba:42: 87:28:63:26:ba:4c:2e:b4:8b:98:53:50:dd:0f:ab: 21:93:8b:47:4f:ea:de:9a:a9:9d:c1:ff:82:27:2e: 08:c7:0c:f5:48:62:82:7f:51:c2:61:72:b0:1b:f9: dc:c8:5e:e7:8f:84:cd:8b:a8:dc:48:75:73:ae:8e: 06:32:6b:e5:95:96:39:36:63:0d:8e:3b:47:ab:c1: 51:d3:d2:81:6c:b3:b0:c6:1d:32:af:93:87:60:14: a5:3d:d5:33:c2:17:ec:06:02:8c:84:48:7d:e0:8b: f8:75:65:d8:f3:1b:4b:6e:39:4d:cc:8c:14:39:0a: 7a:42:53:81:d4:9e:fe:47:40:dc:40:a4:e5:35:1f: e1:95:66:39:c7:51:d7:e5:04:44:4b:dd:72:35:aa: 09:fc:88:39:96:c7:06:c5:43:ae:af:85:87:2a:b6: fa:8e:27:7c:3e:7c:d1:58:00:67:d4:3b:b5:6e:77: 61:6b:63:99:87:1f:7e:0d:76:b9:76:c1:f3:f5:3a: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:47:62:3C:53:A3:66:D5:E5:9E:23:78:13:FB:88:75:FD:6F:8D X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d0:14:57:c2:34:db:3c:71:58:be:56:d5:af:d7:10:8f:ae: 2c:97:f6:88:b4:c6:5a:3a:d9:fb:72:a9:e8:23:1f:1a:be:9a: 07:fb:33:5e:1c:99:5e:2a:09:1e:b7:99:4a:41:1a:d2:cd:52: 15:4a:0c:e0:b1:8f:1f:73:36:d2:69:71:6d:fb:ce:a9:4a:e0: 4f:26:43:56:a9:09:c2:f7:51:7e:db:f0:49:a2:8c:a0:14:28: 29:7f:47:9b:3a:7a:b8:cf:cf:ee:56:a4:20:59:76:29:af:5e: e9:19:14:00:71:fc:a1:5c:46:a3:18:9a:68:01:a6:87:18:93: b4:21:fa:a1:f9:52:0c:c3:4c:13:7d:07:e4:2d:fe:54:be:b3: 56:aa:95:27:f7:d7:03:19:ef:21:d2:4f:d1:86:f5:fd:21:90: f5:71:f6:04:e8:92:01:1e:ef:c2:ae:41:6b:af:fa:c3:ae:d2: 0d:23:4c:d0:8b:25:12:5f:b8:63:0b:5c:b8:9f:77:60:f8:53: 5f:cd:e2:2d:23:53:bf:ba:e4:f0:db:e2:23:99:d5:5d:9b:81: 05:0e:5e:6f:1b:49:ab:f4:05:84:36:17:05:af:01:21:ac:9e: 38:3d:d2:57:55:8d:e2:0a:99:fd:3d:e0:e8:79:48:61:3b:2b: c4:55:73:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUxMDIwMTYyODI1WhcNMjUxMDI3MTYyODI1WjAYMRYwFAYD VQQDEw02OGY2NjMyOS1lNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0riyrZGTsMPlhQHmi3lemtbez9pauxfrksaAHsqiKL5IlDlVWrRD9WgC7EDn +Kb884yUE4EzXrzuukKHKGMmukwutIuYU1DdD6shk4tHT+remqmdwf+CJy4Ixwz1 SGKCf1HCYXKwG/ncyF7nj4TNi6jcSHVzro4GMmvllZY5NmMNjjtHq8FR09KBbLOw xh0yr5OHYBSlPdUzwhfsBgKMhEh94Iv4dWXY8xtLbjlNzIwUOQp6QlOB1J7+R0Dc QKTlNR/hlWY5x1HX5QRES91yNaoJ/Ig5lscGxUOur4WHKrb6jid8PnzRWABn1Du1 bndha2OZhx9+DXa5dsHz9Tq3HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQNR2I8 U6Nm1eWeI3gT+4h1/W+NMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt0BRXwjTbPHFYvlbVr9cQj64sl/aItMZaOtn7cqnoIx8avpoH+zNe HJleKgket5lKQRrSzVIVSgzgsY8fczbSaXFt+86pSuBPJkNWqQnC91F+2/BJooyg FCgpf0ebOnq4z8/uVqQgWXYpr17pGRQAcfyhXEajGJpoAaaHGJO0Ifqh+VIMw0wT fQfkLf5UvrNWqpUn99cDGe8h0k/RhvX9IZD1cfYE6JIBHu/CrkFrr/rDrtINI0zQ iyUSX7hjC1y4n3dg+FNfzeItI1O/uuTw2+IjmdVdm4EFDl5vG0mr9AWENhcFrwEh rJ44PdJXVY3iCpn9PeDoeUhhOyvEVXN1 -----END CERTIFICATE-----Generated at Tue Oct 21 10:43:22 2025 by rpki-client