$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft File: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json) Hash identifier: +TUfQ2s0IMmqdpGQOIq+rFzBHDu79BYClZfY9EQ6ewk= Subject key identifier: 96:4D:8E:10:78:A7:EC:07:DE:5D:27:23:A7:37:4D:33:22:97:B2:39 Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft Manifest number: 13 Signing time: Sun 19 Oct 2025 11:29:15 +0000 Manifest this update: Sun 19 Oct 2025 11:29:14 +0000 Manifest next update: Sun 26 Oct 2025 11:29:14 +0000 Files and hashes: 1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: Fnf4rdZliZLfvqor5F8lFGarH8U94f9mN0bB2MNTXxw=) 2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Validity Not Before: Oct 19 11:29:14 2025 GMT Not After : Oct 26 11:29:14 2025 GMT Subject: CN=68f4cb8b-f2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:b1:16:49:e2:da:d0:17:8a:c1:02:79:fe: ee:1f:4d:6b:d5:19:b3:8f:37:e3:a1:26:79:d5:aa: c8:8e:61:39:33:21:b6:51:19:48:25:19:2d:22:b1: ea:35:8d:be:98:b7:50:d9:e3:5b:1f:52:11:36:76: 09:88:8c:59:0c:f6:5b:a5:68:9d:27:55:93:98:46: 4d:f9:55:26:91:d1:fe:67:7c:a0:f3:9a:aa:8d:cd: f5:9f:00:f8:e6:d1:0c:de:8f:9f:c3:24:e1:48:62: 09:d0:2f:4d:84:1e:b1:22:ad:ca:97:78:8c:0b:8c: a2:68:b6:8f:94:09:18:d8:b0:03:21:11:3f:9b:0a: 60:92:0b:19:f1:dc:13:a2:e4:da:d8:1d:d5:62:15: 1f:99:07:c8:f5:ea:23:54:69:a1:61:f5:5f:79:e8: 14:1f:1e:1b:12:f2:41:28:ac:28:ca:c5:99:86:b7: c6:47:b2:40:f3:eb:83:b1:03:72:31:98:02:6e:f4: fb:40:a1:3c:b6:9c:81:01:da:eb:26:a9:88:f2:d6: e1:fc:1c:83:21:55:05:7d:28:f5:a9:d9:15:82:25: ee:de:35:8c:ef:58:4c:ca:0f:1a:f9:f1:37:3b:bb: a8:73:25:d2:1a:61:1d:14:e7:6c:b9:bd:f6:5b:25: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:8E:10:78:A7:EC:07:DE:5D:27:23:A7:37:4D:33:22:97:B2:39 X509v3 Authority Key Identifier: keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:50:22:32:ce:ed:34:bd:79:f3:ad:c7:9c:f7:88:e9:28:03: 67:d1:0e:c8:b4:c9:fd:5b:b6:90:1a:b7:5b:08:0e:71:3b:ce: f0:1c:c9:d9:d7:c8:fd:38:b5:20:ac:9a:7d:7c:c5:d1:28:68: c1:8b:a6:64:23:81:06:9e:97:e4:0f:6c:07:df:8a:8e:22:e9: b4:aa:b2:ed:c5:d3:0b:63:e0:f6:9f:39:0c:6e:21:74:1b:1e: c4:42:7a:2d:ee:bf:7a:b1:ef:19:cf:1c:61:05:98:1a:25:8f: f7:5a:3a:7f:b5:cb:fe:7c:f3:af:5b:a7:e1:18:8f:0c:a6:e1: aa:a3:2a:70:4e:df:07:5b:c2:16:51:0a:c6:f2:8f:a0:af:60: 09:36:ea:3d:37:23:b4:26:2f:c3:e7:ac:1a:11:7c:2a:1b:49: 9d:e0:f9:b9:d1:b5:87:34:af:65:72:e5:d1:56:83:ce:18:fb: 6a:1b:cb:38:82:5a:33:57:1b:bf:70:62:31:31:21:cf:21:dc: cf:a3:ff:37:2c:1d:5b:78:be:f2:e1:13:02:b0:2e:a9:f4:70: a1:f6:80:07:74:8b:cf:01:5d:7a:4b:47:e5:2a:26:1c:52:19: 33:4f:ae:e2:c2:0e:c3:38:ea:0e:4b:83:fc:02:97:6f:e1:1b: b6:77:f1:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NERBQzExMC8GA1UEBRMoOUJCNkIxNEVGQjUyMjQ4RTg0QkJGQjZDODM3OUZEQUVE QjA5OUNGNDAeFw0yNTEwMTkxMTI5MTRaFw0yNTEwMjYxMTI5MTRaMBgxFjAUBgNV BAMTDTY4ZjRjYjhiLWYyZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLVLEWSeLa0BeKwQJ5/u4fTWvVGbOPN+OhJnnVqsiOYTkzIbZRGUglGS0iseo1 jb6Yt1DZ41sfUhE2dgmIjFkM9lulaJ0nVZOYRk35VSaR0f5nfKDzmqqNzfWfAPjm 0Qzej5/DJOFIYgnQL02EHrEircqXeIwLjKJoto+UCRjYsAMhET+bCmCSCxnx3BOi 5NrYHdViFR+ZB8j16iNUaaFh9V956BQfHhsS8kEorCjKxZmGt8ZHskDz64OxA3Ix mAJu9PtAoTy2nIEB2usmqYjy1uH8HIMhVQV9KPWp2RWCJe7eNYzvWEzKDxr58Tc7 u6hzJdIaYR0U52y5vfZbJaQBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlk2OEHin 7AfeXScjpzdNMyKXsjkwHwYDVR0jBBgwFoAUm7axTvtSJI6Eu/tsg3n9rtsJnPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0REFDL0RCNDgwRkI4OTA5 NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5Q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTdheFR2dFNKSTZFdV90c2czbjlydHNKblBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 REFDL0RCNDgwRkI4OTA5NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2 RXVfdHNnM245cnRzSm5QUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1QIjLO7TS9efOtx5z3iOkoA2fRDsi0yf1btpAat1sIDnE7zvAcydnX yP04tSCsmn18xdEoaMGLpmQjgQael+QPbAffio4i6bSqsu3F0wtj4PafOQxuIXQb HsRCei3uv3qx7xnPHGEFmBolj/daOn+1y/58869bp+EYjwym4aqjKnBO3wdbwhZR Csbyj6CvYAk26j03I7QmL8PnrBoRfCobSZ3g+bnRtYc0r2Vy5dFWg84Y+2obyziC WjNXG79wYjExIc8h3M+j/zcsHVt4vvLhEwKwLqn0cKH2gAd0i88BXXpLR+UqJhxS GTNPruLCDsM46g5Lg/wCl2/hG7Z38UA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:00 2025 by rpki-client