$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft File: g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json) Hash identifier: hvkk8FAoNB7CMfxKnw764eSLU6kX4TcBR//A5KIOm1c= Subject key identifier: 55:44:48:5A:E9:57:49:03:0E:72:B6:93:EF:E6:D9:D9:61:42:09:1B Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C Certificate issuer: /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft Manifest number: 9A Signing time: Sun 19 Oct 2025 09:37:48 +0000 Manifest this update: Sun 19 Oct 2025 09:37:48 +0000 Manifest next update: Sun 26 Oct 2025 09:37:48 +0000 Files and hashes: 1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: NRXQIKlPnEgdGYZy0FVpjkWKS2ctWMJEl6szueaPbXQ=) 2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 9VTnLi5T+YYltF+k17fA4MmiG8WRs/lt6DHBJeHF2Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C Validity Not Before: Oct 19 09:37:48 2025 GMT Not After : Oct 26 09:37:48 2025 GMT Subject: CN=68f4b16c-daab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:a1:e2:5e:c8:b1:24:f9:43:db:3c:fc:46: 8a:18:2c:db:f4:77:f0:e8:3e:06:3e:dc:0a:f3:22: b6:d4:a4:7a:14:06:a1:23:09:56:77:7e:b5:45:f4: 2e:1d:44:23:c6:40:50:6b:ca:85:db:50:d5:2d:15: 38:16:fb:a1:78:25:da:f4:4d:c1:e3:b7:d3:ed:4e: bd:57:17:ed:ca:e1:76:00:ec:fa:a0:94:3c:79:3c: 37:45:b8:d8:be:45:e2:77:5a:ce:9f:12:6c:22:d7: a0:3a:e2:9a:f9:da:77:eb:77:8f:40:02:76:1e:28: 09:b0:05:09:68:54:c4:1f:87:cd:37:49:ff:e0:ec: cd:15:fc:a4:31:7c:f3:e4:72:54:bf:2a:e2:eb:08: 9e:d0:c1:9f:72:2c:3c:5f:4a:84:3c:14:3c:0a:b7: 7d:40:35:cb:6f:33:3c:fa:75:13:6a:ea:d5:63:d3: 6d:c6:e2:37:13:6c:7d:1b:00:a1:e0:9d:c2:e5:94: 6b:a6:11:59:b4:a8:94:6c:25:f8:ff:a9:8a:14:7b: d7:f0:c9:f6:9c:a1:38:0c:fc:89:4a:8c:c4:b4:b8: 72:84:e2:04:31:22:c9:7a:65:07:a6:02:1d:6c:6b: cd:cd:01:01:f9:21:7c:c5:fa:4d:2b:9e:94:c6:1b: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:44:48:5A:E9:57:49:03:0E:72:B6:93:EF:E6:D9:D9:61:42:09:1B X509v3 Authority Key Identifier: keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:42:08:e4:e6:87:b8:21:69:c6:11:21:e5:28:eb:08:6c:8e: a8:f1:c7:49:fc:75:ac:58:32:22:35:cd:8f:73:57:23:f5:f1: 31:74:ac:f8:07:ce:60:6e:a8:1f:a1:00:d5:9a:15:2d:e4:70: 80:29:ca:23:1f:24:d2:10:44:0e:08:d3:fe:27:03:eb:e3:0d: 49:d0:ff:47:37:b2:7b:06:15:ce:80:2f:fe:65:d1:12:31:e0: 66:03:1b:97:cb:6b:e8:88:94:09:23:fe:d5:46:b8:8d:f0:c1: b1:0d:cb:50:a1:e1:3a:17:c3:78:cc:6a:f3:48:3d:19:20:d3: 94:cb:6c:90:1d:fc:4e:28:52:0a:56:9c:7a:fa:4d:c0:e5:44: d2:59:9b:bd:b8:92:6d:2c:d1:5d:aa:36:79:bc:44:df:f3:85: ad:7b:96:db:3c:26:af:6a:32:8b:56:85:93:3a:d7:92:1f:03: 17:6e:d4:96:88:29:04:5d:2d:11:28:28:28:c5:c7:13:8a:63: 47:61:37:be:de:94:8f:41:94:cc:1b:7e:78:47:57:72:97:a0: 92:17:ad:bf:59:39:dd:89:0c:af:c1:7f:6d:5c:18:8c:e8:75: e1:63:50:e9:49:76:74:ea:c8:22:30:7b:e1:76:2b:5e:9e:c7: 12:1b:67:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MTAxMTAvBgNVBAUTKDgzOTU1RUI5QkIyNURDMzNBNzhFQzk2Q0IwODExNzQx OUM2NEJBNUMwHhcNMjUxMDE5MDkzNzQ4WhcNMjUxMDI2MDkzNzQ4WjAYMRYwFAYD VQQDEw02OGY0YjE2Yy1kYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0mh4l7IsST5Q9s8/EaKGCzb9Hfw6D4GPtwK8yK21KR6FAahIwlWd361RfQu HUQjxkBQa8qF21DVLRU4FvuheCXa9E3B47fT7U69VxftyuF2AOz6oJQ8eTw3RbjY vkXid1rOnxJsItegOuKa+dp363ePQAJ2HigJsAUJaFTEH4fNN0n/4OzNFfykMXzz 5HJUvyri6wie0MGfciw8X0qEPBQ8Crd9QDXLbzM8+nUTaurVY9NtxuI3E2x9GwCh 4J3C5ZRrphFZtKiUbCX4/6mKFHvX8Mn2nKE4DPyJSozEtLhyhOIEMSLJemUHpgId bGvNzQEB+SF8xfpNK56Uxhvh9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVESFrp V0kDDnK2k+/m2dlhQgkbMB8GA1UdIwQYMBaAFIOVXrm7Jdwzp47JbLCBF0GcZLpc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgxMC83Mzk3ODhFMkM3 MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9nNVZldWJzbDNET25qc2xzc0lFWFFaeGt1 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c1VmV1YnNsM0RPbmpzbHNzSUVYUVp4a3Vsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgxMC83Mzk3ODhFMkM3MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9nNVZldWJzbDNE T25qc2xzc0lFWFFaeGt1bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgQgjk5oe4IWnGESHlKOsIbI6o8cdJ/HWsWDIiNc2Pc1cj9fExdKz4 B85gbqgfoQDVmhUt5HCAKcojHyTSEEQOCNP+JwPr4w1J0P9HN7J7BhXOgC/+ZdES MeBmAxuXy2voiJQJI/7VRriN8MGxDctQoeE6F8N4zGrzSD0ZINOUy2yQHfxOKFIK Vpx6+k3A5UTSWZu9uJJtLNFdqjZ5vETf84Wte5bbPCavajKLVoWTOteSHwMXbtSW iCkEXS0RKCgoxccTimNHYTe+3pSPQZTMG354R1dyl6CSF62/WTndiQyvwX9tXBiM 6HXhY1DpSXZ06sgiMHvhditenscSG2f8 -----END CERTIFICATE-----Generated at Tue Oct 21 07:28:11 2025 by rpki-client