$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: +vJuxDRur1sPck4xjE0oRbHl7XjnTJ9jLLoNIlPhdCE= Subject key identifier: 24:69:41:1A:09:B3:B0:14:E8:E5:5F:42:46:89:37:E7:17:D4:48:A7 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0B7B Signing time: Mon 20 Oct 2025 19:55:49 +0000 Manifest this update: Mon 20 Oct 2025 19:55:49 +0000 Manifest next update: Mon 27 Oct 2025 19:55:49 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: gqfF6I1BiNjBXVSh3m84uBsNf5z0YdLO/aDwkS/caXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Oct 20 19:55:49 2025 GMT Not After : Oct 27 19:55:49 2025 GMT Subject: CN=68f693c5-59b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:5c:a0:8e:58:e4:35:8b:4d:d1:5a:ef:c6: e0:51:ee:fd:e6:01:bc:1a:78:02:53:64:4c:11:9b: 65:69:7a:75:42:38:54:a9:fb:c4:7d:5b:89:23:8c: 85:33:30:fe:3b:81:ce:e8:ff:d4:52:a4:3f:11:ad: 9f:f5:a6:11:58:9f:b8:e6:d6:58:c6:33:6f:ee:a8: 73:4e:d1:fa:0e:14:7c:9a:76:58:e6:ca:3b:71:3a: 32:e6:e3:60:11:1d:c1:4d:00:c5:aa:5d:80:22:55: 1c:ff:e8:9a:d9:5a:80:2c:03:74:50:a5:c8:a4:34: b9:7b:a1:d0:c1:79:ee:0f:7e:45:32:12:49:45:5c: e4:b1:0e:11:c6:f3:a2:77:e4:32:c1:17:f6:cd:41: 34:03:85:4b:1c:44:eb:dd:f0:5a:6e:fb:28:9d:be: 86:ab:54:17:9f:5c:0c:eb:bb:31:33:81:71:e2:f9: 6e:7d:df:bf:df:28:e9:76:eb:12:e9:01:ea:e3:93: b3:2b:6f:5c:71:e6:07:99:d6:b3:ac:52:3c:1e:a4: c9:a4:4d:50:cb:85:d1:4d:7d:2a:cd:cd:d0:1d:36: 24:e8:18:8f:f5:33:10:cb:79:fe:11:e4:0d:20:c9: d0:8a:6d:43:66:50:a1:76:49:4c:df:78:58:d4:ad: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:41:1A:09:B3:B0:14:E8:E5:5F:42:46:89:37:E7:17:D4:48:A7 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:55:1b:d6:de:95:48:1c:00:3a:43:c1:1d:cb:86:81:79:41: 6c:ad:8c:b3:89:b1:cf:b3:af:71:8b:65:66:c1:0d:32:30:3e: 7e:59:d3:5c:61:5c:7f:66:cd:2d:24:26:d1:8b:e1:94:aa:cd: 25:3e:0e:37:63:9e:7f:f0:fd:7c:5f:52:de:14:53:a4:ba:c6: f0:3d:24:04:7d:8b:20:86:2b:3f:6e:d6:d6:d8:a1:6e:01:01: 0c:50:76:a1:a0:f1:cc:aa:c9:7e:a4:96:d9:95:f5:95:01:56: ff:81:51:a5:a6:33:06:10:15:bb:95:70:08:27:4c:63:e1:26: fe:8e:fc:ea:8f:aa:b3:57:c5:21:91:7d:71:95:15:10:af:78: 87:3e:f1:5b:ec:d2:d9:8d:29:ab:dc:4a:ca:ba:bf:89:56:ff: 07:0f:24:52:09:d0:85:0e:fa:aa:6e:19:21:d2:5e:64:aa:b5: cb:ca:bf:20:82:06:85:51:7d:fb:3c:d7:79:26:cf:b0:a5:e1: 96:84:61:9b:ad:ae:4e:f1:46:0b:d7:68:dc:7f:5e:89:47:09: 3a:58:20:1e:49:0d:d8:ea:6e:30:f3:cc:77:b7:d3:dc:e2:4f: 78:b9:a5:fc:33:c8:31:21:d1:7c:67:98:2e:15:59:26:40:ec: 69:5a:91:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUxMDIwMTk1NTQ5WhcNMjUxMDI3MTk1NTQ5WjAYMRYwFAYD VQQDEw02OGY2OTNjNS01OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznNcoI5Y5DWLTdFa78bgUe795gG8GngCU2RMEZtlaXp1QjhUqfvEfVuJI4yF MzD+O4HO6P/UUqQ/Ea2f9aYRWJ+45tZYxjNv7qhzTtH6DhR8mnZY5so7cToy5uNg ER3BTQDFql2AIlUc/+ia2VqALAN0UKXIpDS5e6HQwXnuD35FMhJJRVzksQ4RxvOi d+QywRf2zUE0A4VLHETr3fBabvsonb6Gq1QXn1wM67sxM4Fx4vlufd+/3yjpdusS 6QHq45OzK29cceYHmdazrFI8HqTJpE1Qy4XRTX0qzc3QHTYk6BiP9TMQy3n+EeQN IMnQim1DZlChdklM33hY1K3YxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRpQRoJ s7AU6OVfQkaJN+cX1EinMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJVRvW3pVIHAA6Q8Edy4aBeUFsrYyzibHPs69xi2VmwQ0yMD5+WdNc YVx/Zs0tJCbRi+GUqs0lPg43Y55/8P18X1LeFFOkusbwPSQEfYsghis/btbW2KFu AQEMUHahoPHMqsl+pJbZlfWVAVb/gVGlpjMGEBW7lXAIJ0xj4Sb+jvzqj6qzV8Uh kX1xlRUQr3iHPvFb7NLZjSmr3ErKur+JVv8HDyRSCdCFDvqqbhkh0l5kqrXLyr8g ggaFUX37PNd5Js+wpeGWhGGbra5O8UYL12jcf16JRwk6WCAeSQ3Y6m4w88x3t9Pc 4k94uaX8M8gxIdF8Z5guFVkmQOxpWpGt -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:22 2025 by rpki-client