$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: IuLvA2L3TzsG3FT7CIcmuWfUaqJ73w3a51CgFl4ULGQ= Subject key identifier: 29:2E:27:A5:3F:EE:CC:BF:AF:CB:F1:0B:35:C0:7C:E7:B6:70:C8:E0 Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 061C Signing time: Sun 19 Oct 2025 00:35:52 +0000 Manifest this update: Sun 19 Oct 2025 00:35:51 +0000 Manifest next update: Sun 26 Oct 2025 00:35:51 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: X3LkGLOQc/6q33TJ3zr4W+Hp1Ru4uZLNse73pt3weJs=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: HhWutos5vK2k7U1Y6D/GqMl0klIP1xZEoSAwh8yepqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: Oct 19 00:35:51 2025 GMT Not After : Oct 26 00:35:51 2025 GMT Subject: CN=68f43267-bb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:b9:a4:80:f2:c3:4b:5b:e3:73:57:1c:27: f9:d7:8a:a9:3d:7d:bd:b9:06:c9:25:75:55:fd:c5: b8:f4:48:8f:7e:ac:8f:d9:fd:31:22:54:de:34:9a: f3:18:4d:c6:87:21:8b:aa:4f:39:11:35:47:81:e5: df:a2:2a:5d:0a:1d:57:7b:78:b4:4a:40:72:ba:e9: d2:7b:33:86:13:3d:23:10:7e:07:ae:99:d5:cc:06: 58:91:5e:47:0b:1a:28:ef:ab:40:e2:7c:db:11:43: 20:ba:94:47:7d:5a:8a:a0:5f:cd:dd:6d:8b:51:01: 2b:59:eb:00:2c:25:b7:5e:1a:2b:f4:2b:47:46:bd: ee:c9:93:c3:f8:fa:a5:1b:a8:d5:12:f8:a3:2a:69: fd:98:24:76:5b:b2:4c:a9:de:71:3d:11:c7:ae:71: 8f:b8:95:55:77:1f:e2:e3:d3:29:cb:b2:4b:73:44: e4:0c:bf:40:89:53:ed:90:91:73:58:07:5e:78:f8: 73:79:e2:f7:11:cb:3e:87:12:c6:10:4f:d1:f4:80: 74:2e:10:8f:94:00:7a:2d:e0:d0:c1:0b:9e:3d:e5: 6d:ed:57:09:ac:80:c7:95:a7:8f:d9:c1:05:61:56: 86:44:8c:87:90:03:71:87:2d:5f:9e:6a:d5:ee:3c: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2E:27:A5:3F:EE:CC:BF:AF:CB:F1:0B:35:C0:7C:E7:B6:70:C8:E0 X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f2:c1:bc:e1:4c:58:d7:55:6f:e5:35:d7:b3:ae:d7:15:89: 01:89:b7:bd:9b:63:84:a8:3b:24:61:31:e3:fe:67:e5:ba:a9: 0e:45:37:2c:70:75:be:6b:b9:a7:66:02:d7:45:c2:a2:fb:1f: 0d:9a:96:8c:28:2a:ca:19:ea:2c:61:c6:e5:8a:e5:82:9c:4a: 3a:e9:cd:d0:aa:e8:66:76:a9:7a:18:c5:59:b6:60:01:1d:22: 56:b5:9f:f0:f7:f0:24:b4:7d:21:61:77:61:40:5c:76:47:42: bb:9f:09:ee:6f:47:b6:c8:e0:6d:6e:c6:2a:89:13:7e:e5:17: 16:a5:ec:2c:9f:e9:69:34:b1:1c:66:dc:87:69:e1:85:57:50: e8:50:7d:a8:4b:b2:05:3b:36:0e:d4:7e:1c:f5:33:ca:96:49: c4:5e:b3:ab:da:c9:2b:5d:8f:0a:67:15:16:25:cc:4d:1d:2f: 05:d8:09:30:18:d7:7f:50:99:49:e1:ed:4f:de:25:96:37:13: 44:12:22:06:6e:53:d8:ff:6b:e0:d1:ec:a7:6d:bd:8e:b1:0d: db:31:67:6d:29:b9:6e:59:5e:83:fa:9e:7e:2e:1c:33:da:2b: b8:6c:81:42:53:01:1b:46:ba:ee:6d:74:66:bb:67:ff:7a:e8: c0:72:aa:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjUxMDE5MDAzNTUxWhcNMjUxMDI2MDAzNTUxWjAYMRYwFAYD VQQDEw02OGY0MzI2Ny1iYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSi5pIDyw0tb43NXHCf514qpPX29uQbJJXVV/cW49EiPfqyP2f0xIlTeNJrz GE3GhyGLqk85ETVHgeXfoipdCh1Xe3i0SkByuunSezOGEz0jEH4HrpnVzAZYkV5H Cxoo76tA4nzbEUMgupRHfVqKoF/N3W2LUQErWesALCW3Xhor9CtHRr3uyZPD+Pql G6jVEvijKmn9mCR2W7JMqd5xPRHHrnGPuJVVdx/i49Mpy7JLc0TkDL9AiVPtkJFz WAdeePhzeeL3Ecs+hxLGEE/R9IB0LhCPlAB6LeDQwQuePeVt7VcJrIDHlaeP2cEF YVaGRIyHkANxhy1fnmrV7jy3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkuJ6U/ 7sy/r8vxCzXAfOe2cMjgMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg8sG84UxY11Vv5TXXs67XFYkBibe9m2OEqDskYTHj/mfluqkORTcs cHW+a7mnZgLXRcKi+x8NmpaMKCrKGeosYcbliuWCnEo66c3Qquhmdql6GMVZtmAB HSJWtZ/w9/AktH0hYXdhQFx2R0K7nwnub0e2yOBtbsYqiRN+5RcWpewsn+lpNLEc ZtyHaeGFV1DoUH2oS7IFOzYO1H4c9TPKlknEXrOr2skrXY8KZxUWJcxNHS8F2Akw GNd/UJlJ4e1P3iWWNxNEEiIGblPY/2vg0eynbb2OsQ3bMWdtKbluWV6D+p5+Lhwz 2iu4bIFCUwEbRrrubXRmu2f/eujAcqqe -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:57 2025 by rpki-client