$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: 2Hcfas8lLuanoWVtxPjoLCmlXT4r2pqVfC3m0pvjLWE= Subject key identifier: E2:10:CC:6E:32:C4:08:13:E0:CC:A1:B6:2D:D3:E6:C8:98:8D:5B:0E Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: D6 Signing time: Sun 19 Oct 2025 08:47:44 +0000 Manifest this update: Sun 19 Oct 2025 08:47:43 +0000 Manifest next update: Sun 26 Oct 2025 08:47:43 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: D7tnSQuN5L28KSbXJzGjCG1i2PVSAvaJ8k8My+Vrv1U=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: pqYtg4cncigu7vCLAu3kw34XMxqu+DFcXncQWlJ6fSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Oct 19 08:47:43 2025 GMT Not After : Oct 26 08:47:43 2025 GMT Subject: CN=68f4a5af-7a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:96:dd:a9:c4:06:40:1a:5d:74:cb:73:85: 45:ca:36:a2:6c:91:af:3d:84:d0:e6:ac:ad:cc:53: bd:48:d3:99:d2:20:0e:ea:13:b5:de:c3:33:26:3d: c3:3d:a7:2d:ce:98:4f:53:15:08:4e:86:73:83:bc: cd:31:2b:d5:14:25:48:86:73:ca:64:c4:75:0d:9e: a7:45:df:05:06:68:5e:08:46:20:08:ab:87:59:06: 5d:05:09:25:86:bd:0c:88:20:a8:df:2a:22:87:f5: 66:89:7f:bb:9e:1d:4e:b6:1e:4a:a3:47:78:af:24: 3b:43:b2:6d:a7:68:4e:3c:18:57:f4:60:a6:c2:83: 44:20:53:67:da:da:84:b7:1f:fc:55:63:e7:5c:75: 81:53:fa:8c:ab:b0:e8:c5:eb:90:44:ca:22:7d:b0: fb:ea:4d:17:9e:d1:07:79:0c:ed:2f:1b:9d:a8:ed: 91:40:ed:55:df:6a:62:eb:25:97:30:c9:83:8c:b9: 8a:5b:22:b0:9f:d2:ac:ad:91:2d:5f:a7:ae:59:ab: 9e:0f:84:54:c1:59:cc:b8:47:f1:f5:c2:1d:d7:86: e1:17:24:85:b1:47:a4:96:bb:bf:2a:92:6d:24:c6: 45:0b:08:91:1f:78:11:c8:ad:03:01:33:73:b8:1a: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:CC:6E:32:C4:08:13:E0:CC:A1:B6:2D:D3:E6:C8:98:8D:5B:0E X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:76:4a:a9:19:eb:fd:31:8b:68:8f:cf:42:b5:98:b7:ab:2f: 70:e2:bc:af:35:aa:ca:04:7b:4f:d7:19:97:b3:70:aa:cd:ac: f3:0a:30:33:15:c4:bc:4a:12:d6:d4:a3:e9:5e:e3:6c:f3:b0: ab:b6:f1:0f:d4:a6:10:5b:9c:46:80:c8:a3:09:32:40:c4:4f: a5:07:e4:0b:e0:37:d0:bd:3b:71:d3:c5:2d:86:9e:49:9a:b1: f1:d2:87:8c:06:f5:b3:4a:9e:34:3e:1d:a1:4b:b2:0b:72:2c: 19:b4:10:9e:9a:d5:b9:15:ac:93:7a:f1:b4:fb:57:7b:db:d0: 68:9c:b6:46:82:80:24:48:89:aa:04:87:6f:82:64:71:3c:5d: 52:f2:d8:4e:fa:8a:f4:84:92:89:de:76:f8:63:bc:43:21:68: 06:e7:11:5d:7c:f2:f6:7e:b9:9c:25:8c:37:46:e9:52:60:d3: 0b:ab:5a:48:4a:4f:c7:46:bc:d4:08:08:80:83:e4:9e:dd:c3: 7b:5c:3e:3f:bf:b6:30:c6:fa:df:54:03:ef:05:fb:5d:8a:7f: ca:06:5d:ba:93:51:32:b6:81:96:71:6f:46:47:fe:0b:79:9c: e7:fa:9e:34:23:91:93:e7:b3:8e:62:b4:b2:f7:e6:dd:2d:9f: c1:35:15:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKEY1NEY4MDgwMTZBQjRCQjA2Rjc5NkE4OTQ2NjdDNzBC REQ0OEZCRjYwHhcNMjUxMDE5MDg0NzQzWhcNMjUxMDI2MDg0NzQzWjAYMRYwFAYD VQQDEw02OGY0YTVhZi03YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzuW3anEBkAaXXTLc4VFyjaibJGvPYTQ5qytzFO9SNOZ0iAO6hO13sMzJj3D PactzphPUxUIToZzg7zNMSvVFCVIhnPKZMR1DZ6nRd8FBmheCEYgCKuHWQZdBQkl hr0MiCCo3yoih/VmiX+7nh1Oth5Ko0d4ryQ7Q7Jtp2hOPBhX9GCmwoNEIFNn2tqE tx/8VWPnXHWBU/qMq7DoxeuQRMoifbD76k0XntEHeQztLxudqO2RQO1V32pi6yWX MMmDjLmKWyKwn9KsrZEtX6euWaueD4RUwVnMuEfx9cId14bhFySFsUeklru/KpJt JMZFCwiRH3gRyK0DATNzuBr1hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIQzG4y xAgT4Myhti3T5siYjVsOMB8GA1UdIwQYMBaAFPVPgIAWq0uwb3lqiUZnxwvdSPv2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi80N0NBMzVFNDcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3QnZlV3FKUm1mSEM5MUkt X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1fWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi80N0NBMzVFNDcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3 QnZlV3FKUm1mSEM5MUktX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtdkqpGev9MYtoj89CtZi3qy9w4ryvNarKBHtP1xmXs3CqzazzCjAz FcS8ShLW1KPpXuNs87CrtvEP1KYQW5xGgMijCTJAxE+lB+QL4DfQvTtx08Uthp5J mrHx0oeMBvWzSp40Ph2hS7ILciwZtBCemtW5FayTevG0+1d729BonLZGgoAkSImq BIdvgmRxPF1S8thO+or0hJKJ3nb4Y7xDIWgG5xFdfPL2frmcJYw3RulSYNMLq1pI Sk/HRrzUCAiAg+Se3cN7XD4/v7YwxvrfVAPvBftdin/KBl26k1EytoGWcW9GR/4L eZzn+p40I5GT57OOYrSy9+bdLZ/BNRWG -----END CERTIFICATE-----Generated at Tue Oct 21 02:15:17 2025 by rpki-client