$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: MPCaCH0O6cX0Y21tlJt2/UQKCBZbwEWBC/HOwSffwwQ= Subject key identifier: 38:E9:CF:BE:3C:E8:EE:A2:67:89:51:ED:7D:A7:A4:CD:87:8D:E4:2D Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 182E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 1826 Signing time: Mon 20 Oct 2025 16:52:22 +0000 Manifest this update: Mon 20 Oct 2025 16:52:21 +0000 Manifest next update: Mon 27 Oct 2025 16:52:21 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: PZbovzS0W2VLXX6x5nAu43EVvluSEZYuDcBNl8c2SU8=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6190 (0x182e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Oct 20 16:52:21 2025 GMT Not After : Oct 27 16:52:21 2025 GMT Subject: CN=68f668c6-04ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:be:41:66:8c:92:6b:dd:cc:cc:82:52:b5: df:b9:ef:15:18:24:da:71:8c:81:d4:79:4c:6a:d2: 49:18:2f:9e:4a:fe:3e:fc:c2:7f:ac:a4:63:ff:8c: cb:8e:91:04:a8:6d:98:d6:01:92:72:e3:ce:09:e3: 7d:b5:d5:dd:f3:6e:95:6f:bd:9f:5e:c4:95:82:92: f5:b1:e3:83:16:80:b6:a5:1b:f7:8f:5c:4b:49:fb: f1:5e:d3:ac:b8:76:f7:43:cb:7e:84:fa:9f:10:9f: 96:3c:85:d3:49:99:50:6a:10:45:76:8d:83:99:bc: 76:fc:7f:9f:8a:d4:bc:36:60:80:99:90:39:2b:17: 38:61:63:74:21:60:00:af:41:69:02:40:b9:9a:a7: d7:96:0e:f5:7e:8d:25:bf:49:1b:93:b4:29:24:e2: 2b:eb:ba:a0:43:ac:9d:8a:80:36:1b:db:6f:46:f4: 2a:22:86:7f:70:4f:aa:52:d2:2b:5f:b5:0c:e4:52: a5:c8:02:52:99:50:e7:7e:ca:0a:c9:fa:b0:31:97: ed:b0:ab:cb:05:62:a1:d9:c5:1f:cc:51:5d:e5:35: eb:a6:92:0d:4a:66:04:2f:54:96:6b:80:6f:7d:a5: 80:b1:30:a4:6f:c9:be:54:1e:62:39:91:17:64:73: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E9:CF:BE:3C:E8:EE:A2:67:89:51:ED:7D:A7:A4:CD:87:8D:E4:2D X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ad:75:c0:19:a1:63:ea:9f:9d:2d:c5:06:ae:b7:66:7c:c9: c9:83:13:81:34:3a:f8:13:f4:ce:bf:d9:f1:59:af:d2:68:99: 02:db:fa:ed:28:63:95:d5:d9:d6:70:8f:e6:50:50:8f:58:0a: c9:0c:a4:fe:09:2e:12:11:5f:68:81:f5:99:7b:32:95:2f:ac: a3:e9:9c:9c:66:f5:e6:0d:c7:be:8e:1e:32:c8:3f:6a:34:2d: 28:e4:73:9e:aa:23:76:12:09:52:d0:3e:f6:d3:96:9e:d3:cf: 81:f9:a9:a9:46:0e:52:4c:ca:98:67:01:b5:6e:66:73:03:7b: 90:73:38:9c:a6:a3:9f:94:dc:3e:30:74:fc:5f:06:a7:3d:49: 59:99:4a:91:14:41:6e:a2:57:a8:73:f8:1a:03:5e:7b:e2:7b: aa:f1:88:f9:30:67:cd:77:23:74:e2:69:7d:ae:24:dd:23:66: 94:7d:ad:11:af:4e:7b:fb:ec:a7:11:0f:cd:58:70:36:a4:05: 60:cb:fe:c1:ba:70:29:8b:bf:30:47:63:12:a1:c7:b7:3f:a1: b8:a3:39:f4:62:de:0c:3c:37:2a:02:92:9b:95:22:60:5d:e7: 7e:f1:80:c2:c0:77:f5:a8:5b:3a:9e:94:31:11:6a:3f:d8:15: 92:d5:c4:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUxMDIwMTY1MjIxWhcNMjUxMDI3MTY1MjIxWjAYMRYwFAYD VQQDEw02OGY2NjhjNi0wNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgu+QWaMkmvdzMyCUrXfue8VGCTacYyB1HlMatJJGC+eSv4+/MJ/rKRj/4zL jpEEqG2Y1gGScuPOCeN9tdXd826Vb72fXsSVgpL1seODFoC2pRv3j1xLSfvxXtOs uHb3Q8t+hPqfEJ+WPIXTSZlQahBFdo2Dmbx2/H+fitS8NmCAmZA5Kxc4YWN0IWAA r0FpAkC5mqfXlg71fo0lv0kbk7QpJOIr67qgQ6ydioA2G9tvRvQqIoZ/cE+qUtIr X7UM5FKlyAJSmVDnfsoKyfqwMZftsKvLBWKh2cUfzFFd5TXrppINSmYEL1SWa4Bv faWAsTCkb8m+VB5iOZEXZHO2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjpz748 6O6iZ4lR7X2npM2HjeQtMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9rXXAGaFj6p+dLcUGrrdmfMnJgxOBNDr4E/TOv9nxWa/SaJkC2/rt KGOV1dnWcI/mUFCPWArJDKT+CS4SEV9ogfWZezKVL6yj6ZycZvXmDce+jh4yyD9q NC0o5HOeqiN2EglS0D7205ae08+B+ampRg5STMqYZwG1bmZzA3uQczicpqOflNw+ MHT8XwanPUlZmUqRFEFuoleoc/gaA1574nuq8Yj5MGfNdyN04ml9riTdI2aUfa0R r057++ynEQ/NWHA2pAVgy/7BunApi78wR2MSoce3P6G4ozn0Yt4MPDcqApKblSJg Xed+8YDCwHf1qFs6npQxEWo/2BWS1cSB -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:23 2025 by rpki-client