$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: tuydZmZV91I+EEkAWSb1nzcoDI9I58y1rDbWG8AoiDg= Subject key identifier: B7:49:2C:BB:55:F4:9A:AB:2A:F1:52:AD:70:D9:17:44:B4:63:9D:B9 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0CEC Signing time: Sat 18 Oct 2025 18:46:54 +0000 Manifest this update: Sat 18 Oct 2025 18:46:53 +0000 Manifest next update: Sat 25 Oct 2025 18:46:53 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: UZD6yFPhpAZrYkbBcP/geEfUG8vtjIunWhJjf+mDJ0k=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Oct 18 18:46:53 2025 GMT Not After : Oct 25 18:46:53 2025 GMT Subject: CN=68f3e09d-87a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:e9:00:10:3c:06:5a:01:cc:26:9d:6d:17: 23:cb:a1:19:03:e0:24:42:d0:de:df:9b:df:0f:4a: 0e:9e:57:6a:83:68:5a:f9:4b:c7:68:23:00:2d:70: 8e:3d:9d:3f:a2:fe:f1:e2:41:a5:07:0a:b2:69:30: 46:e4:40:1c:e8:99:5b:73:9b:9b:b0:6d:c5:4f:5d: 21:d0:81:9b:a6:2f:94:79:20:44:a8:e7:18:84:d1: 67:c5:b5:46:4b:8c:63:eb:30:16:64:6d:99:3a:05: e9:be:be:a8:cf:59:ec:f0:94:4f:e0:97:bb:25:04: e6:e1:05:ea:e0:91:33:de:61:66:82:d3:b9:04:69: a2:73:e1:9e:19:16:04:67:e1:c5:8c:f3:c3:5d:60: 05:e8:00:e1:87:d7:47:ef:ce:04:ed:76:3b:67:0f: 07:e5:2b:c6:46:98:67:4d:14:17:51:12:9b:09:31: f7:26:c8:de:b7:b2:6f:92:46:98:b5:e9:50:4b:43: e4:f9:6a:8f:3c:99:79:35:1f:8e:21:f8:fc:6c:66: 40:3c:94:e4:aa:3b:ca:2d:a8:89:87:01:37:76:b2: 54:3c:78:4d:bf:06:71:1e:1b:f7:e8:6a:bb:2d:a1: 14:d1:2d:e5:6a:cd:1a:7a:6d:7a:d1:08:98:04:e2: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:49:2C:BB:55:F4:9A:AB:2A:F1:52:AD:70:D9:17:44:B4:63:9D:B9 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:2e:02:b3:ef:f1:a5:66:cd:1a:c0:61:3d:07:cf:f1:03: e5:8c:24:80:c9:71:3a:78:b2:78:33:7a:b0:2a:5c:00:24:7a: 0a:6f:a8:9d:41:9b:94:b2:51:5f:23:b8:17:f9:f1:55:89:ff: c9:52:25:34:63:0c:82:2e:89:3d:0e:8a:12:ba:15:75:31:e2: 76:12:84:94:6c:e7:25:26:99:ac:e0:df:ac:50:9a:bd:bd:dd: 1b:69:69:b3:bf:72:cd:9f:7c:b1:4f:4c:b0:25:32:68:44:f1: 1b:f2:e1:9e:3d:0b:c1:18:a9:40:19:f8:cd:7a:07:73:d0:be: 2f:53:9e:9c:17:53:30:32:8a:0a:15:7d:93:8c:09:24:05:e6: 16:ee:b9:17:63:b6:b0:d8:a2:95:46:50:00:d3:12:c8:e3:25: 23:e5:7d:c1:ce:9f:af:0b:e2:02:30:c9:d6:1a:bb:a3:6d:aa: b4:e4:73:e2:67:ee:c3:1d:62:2f:55:60:8d:9d:63:f8:98:a4: 9c:be:a1:56:37:50:0f:8f:75:1a:87:dd:43:61:a2:66:f2:45: 94:a6:91:ac:3a:86:58:bd:48:d8:ce:d1:83:cd:d7:6d:93:5c: d8:41:f5:75:42:7c:ca:71:67:d1:c7:8c:82:82:79:83:4a:56: 2c:8c:48:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUxMDE4MTg0NjUzWhcNMjUxMDI1MTg0NjUzWjAYMRYwFAYD VQQDEw02OGYzZTA5ZC04N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r3pABA8BloBzCadbRcjy6EZA+AkQtDe35vfD0oOnldqg2ha+UvHaCMALXCO PZ0/ov7x4kGlBwqyaTBG5EAc6Jlbc5ubsG3FT10h0IGbpi+UeSBEqOcYhNFnxbVG S4xj6zAWZG2ZOgXpvr6oz1ns8JRP4Je7JQTm4QXq4JEz3mFmgtO5BGmic+GeGRYE Z+HFjPPDXWAF6ADhh9dH784E7XY7Zw8H5SvGRphnTRQXURKbCTH3Jsjet7JvkkaY telQS0Pk+WqPPJl5NR+OIfj8bGZAPJTkqjvKLaiJhwE3drJUPHhNvwZxHhv36Gq7 LaEU0S3las0aem160QiYBOJeHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdJLLtV 9JqrKvFSrXDZF0S0Y525MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8hC4Cs+/xpWbNGsBhPQfP8QPljCSAyXE6eLJ4M3qwKlwAJHoKb6id QZuUslFfI7gX+fFVif/JUiU0YwyCLok9DooSuhV1MeJ2EoSUbOclJpms4N+sUJq9 vd0baWmzv3LNn3yxT0ywJTJoRPEb8uGePQvBGKlAGfjNegdz0L4vU56cF1MwMooK FX2TjAkkBeYW7rkXY7aw2KKVRlAA0xLI4yUj5X3Bzp+vC+ICMMnWGrujbaq05HPi Z+7DHWIvVWCNnWP4mKScvqFWN1APj3Uah91DYaJm8kWUppGsOoZYvUjYztGDzddt k1zYQfV1QnzKcWfRx4yCgnmDSlYsjEht -----END CERTIFICATE-----Generated at Mon Oct 20 05:52:37 2025 by rpki-client