$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: YZB4b/D0wgmxqJNLsVdtPtJo8upI2risCklszI73How= Subject key identifier: 42:91:3D:28:39:39:4D:31:45:B9:B4:C8:F2:FD:C9:F1:B7:AF:B6:A7 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0C79 Signing time: Mon 20 Oct 2025 19:04:47 +0000 Manifest this update: Mon 20 Oct 2025 19:04:46 +0000 Manifest next update: Mon 27 Oct 2025 19:04:46 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: DSlWVMVhCCZ2rl49ne8pC4JX3lqh0Yk9gFxVmGJnCWk=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Oct 20 19:04:46 2025 GMT Not After : Oct 27 19:04:46 2025 GMT Subject: CN=68f687cf-046d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:f9:ef:cd:08:7f:cc:53:7d:1e:d4:24:bc: c5:e5:3e:42:a4:c5:a2:91:bf:b6:8f:7c:be:ee:5d: 44:b7:f8:e4:c0:c8:d0:e7:83:a0:bf:24:a5:b7:e4: cf:7b:07:99:a1:7a:2b:ae:f2:22:b8:bb:48:25:78: 80:97:25:db:6c:e5:04:4a:8d:72:24:73:06:98:04: a2:70:71:44:44:dc:27:a3:36:85:7f:1c:00:fd:90: ac:eb:12:d4:3e:7a:fa:be:80:57:82:e9:f6:69:13: 30:88:e8:41:ef:31:eb:a8:89:bb:39:2e:79:c5:a0: 54:b9:c1:80:4d:c3:d2:13:33:78:96:54:11:45:97: da:54:fa:07:7e:ef:dd:ae:64:68:8c:59:27:b7:41: 97:63:b8:11:f1:b6:e5:c4:a5:f6:3e:ae:c2:c3:9e: 21:f5:ce:5a:1b:2c:aa:2c:e3:95:7a:90:a7:06:3a: 9b:8f:4f:00:7a:ef:7d:56:8d:d6:51:95:c3:1c:5b: cf:ed:4b:84:7e:fd:ca:4f:e2:4e:ff:53:93:c8:2c: 67:1a:d2:71:44:4b:47:53:fe:e3:49:49:38:91:83: cd:52:63:26:76:8e:82:33:34:e8:03:8d:9a:d4:04: 7b:bb:07:58:e6:e9:c1:be:ac:ec:5b:ae:da:d8:4a: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:3D:28:39:39:4D:31:45:B9:B4:C8:F2:FD:C9:F1:B7:AF:B6:A7 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:75:bf:2d:c5:f8:b2:0a:21:27:d1:49:c6:af:57:0a:6f:a9: 35:0f:ca:d7:11:f4:b8:54:30:d8:42:25:45:2e:b1:93:80:72: 68:a6:9a:63:5e:9c:d9:8b:7c:b5:6e:f7:0a:2a:77:2b:65:f4: fd:13:39:70:dc:a1:d8:83:0d:27:85:1c:a5:57:56:e4:cb:d2: 77:96:25:d1:91:52:90:4b:bb:62:09:7c:5e:d3:11:2c:4a:d7: fe:1b:b1:c4:4e:c3:fa:e9:52:07:51:3b:e7:c1:c1:e5:a4:be: de:c3:10:96:ee:c8:a7:d9:3c:21:c2:48:c8:bf:ad:f7:38:9f: 51:fc:67:5d:58:ea:2b:ae:20:82:bd:29:f3:c5:e1:68:fb:e4: 3c:7b:74:78:63:39:72:5a:d2:c7:2b:42:75:e1:24:c8:f6:04: cb:8b:43:da:8f:48:0f:db:b6:d8:64:02:38:ab:0a:52:5c:3a: 01:74:31:08:46:1c:fd:17:58:33:a8:da:54:5f:59:19:33:33: 5e:10:cf:74:05:3f:c3:8e:cd:17:9b:39:f2:cc:e1:43:78:ae: 91:85:8c:76:2b:40:9d:57:2c:bc:8e:26:68:c6:31:c9:af:cf: ef:96:be:72:a6:c0:7b:62:92:4d:4b:be:91:1f:63:2f:5a:65: bd:7c:78:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjUxMDIwMTkwNDQ2WhcNMjUxMDI3MTkwNDQ2WjAYMRYwFAYD VQQDEw02OGY2ODdjZi0wNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMn5780If8xTfR7UJLzF5T5CpMWikb+2j3y+7l1Et/jkwMjQ54OgvySlt+TP eweZoXorrvIiuLtIJXiAlyXbbOUESo1yJHMGmASicHFERNwnozaFfxwA/ZCs6xLU Pnr6voBXgun2aRMwiOhB7zHrqIm7OS55xaBUucGATcPSEzN4llQRRZfaVPoHfu/d rmRojFknt0GXY7gR8bblxKX2Pq7Cw54h9c5aGyyqLOOVepCnBjqbj08Aeu99Vo3W UZXDHFvP7UuEfv3KT+JO/1OTyCxnGtJxREtHU/7jSUk4kYPNUmMmdo6CMzToA42a 1AR7uwdY5unBvqzsW67a2EocewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKRPSg5 OU0xRbm0yPL9yfG3r7anMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBdb8txfiyCiEn0UnGr1cKb6k1D8rXEfS4VDDYQiVFLrGTgHJopppj XpzZi3y1bvcKKncrZfT9Ezlw3KHYgw0nhRylV1bky9J3liXRkVKQS7tiCXxe0xEs Stf+G7HETsP66VIHUTvnwcHlpL7ewxCW7sin2TwhwkjIv633OJ9R/GddWOorriCC vSnzxeFo++Q8e3R4YzlyWtLHK0J14STI9gTLi0Paj0gP27bYZAI4qwpSXDoBdDEI Rhz9F1gzqNpUX1kZMzNeEM90BT/Djs0XmznyzOFDeK6RhYx2K0CdVyy8jiZoxjHJ r8/vlr5ypsB7YpJNS76RH2MvWmW9fHgT -----END CERTIFICATE-----Generated at Mon Oct 20 22:23:33 2025 by rpki-client