$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: qCwIbZGDFq3WuXT7X/RgMijY/JJGgktOxT4gh/BMeyE= Subject key identifier: 09:CF:B4:6E:3A:54:5F:A2:26:39:69:70:B5:BF:D0:1F:D3:08:AF:44 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 08F9 Signing time: Sat 18 Oct 2025 21:29:35 +0000 Manifest this update: Sat 18 Oct 2025 21:29:34 +0000 Manifest next update: Sat 25 Oct 2025 21:29:34 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: Bhp0hn152SmgUfK9fpkIktprGgq3TcnS92TkO+EM3pM=) 2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: 9SsfPFEpNqBFgCdLY2IklkloHnAbZJJJLXhyoF85vCY=) 3: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: mrT/TQVc5LCUrmX9VtkN0plkNrICogqBYArk6etw7Y8=) 4: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: Leqb5XfRofLJ3cqjCHqmyKArkM3Rck1Tf0kybehmhSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Oct 18 21:29:34 2025 GMT Not After : Oct 25 21:29:34 2025 GMT Subject: CN=68f406be-3f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:ec:69:a7:9a:85:77:6d:5e:77:f7:12:39: 71:59:c3:c0:b7:b6:89:f7:78:0d:9a:ff:fa:b8:4a: 54:9d:2b:4a:b2:f9:67:f4:5b:21:2a:44:34:da:84: d9:f6:5d:22:51:ca:b3:bf:9e:c1:a6:9a:d6:fc:3a: f4:02:f2:1e:83:bf:d8:3b:be:8d:a4:d2:cc:c5:f6: 20:63:c5:1d:06:8e:4a:50:2d:7b:d9:5a:b1:45:8a: 5f:ce:ed:fe:2a:96:41:ca:4e:d7:e7:2c:f5:59:93: 42:16:45:45:ea:7d:03:f3:9c:65:14:f5:c9:8f:23: 48:30:6a:da:36:49:af:0e:d9:6b:a8:8f:a7:8b:fa: ed:17:9c:a8:9c:55:f5:92:9a:ba:92:84:e5:c1:2d: 03:c2:1b:a1:db:86:df:0f:3b:52:71:52:cb:2c:01: 8f:2e:f8:1b:56:da:81:60:18:ad:b1:c5:28:e6:1f: fd:8e:57:ac:51:b2:16:85:17:f4:7f:e8:19:8a:10: 79:ac:8b:c4:6d:57:bb:2e:da:77:b7:43:2f:a8:1f: 14:f4:37:57:86:c5:2f:a3:73:7a:bb:d5:3b:9f:54: 98:a3:30:7e:50:86:9d:41:32:d0:25:87:e1:0d:b7: 59:18:d0:98:54:1b:3e:66:9a:08:44:75:2c:95:75: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:B4:6E:3A:54:5F:A2:26:39:69:70:B5:BF:D0:1F:D3:08:AF:44 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d4:b7:16:9f:47:a2:50:7b:a0:2f:da:3a:35:00:cb:84:81: 54:13:a5:1f:d0:46:48:ce:d8:77:da:68:8d:d7:48:16:56:c8: 0c:31:d9:0e:0a:58:9d:fa:cf:45:12:0d:0b:7d:39:7b:ea:d7: b7:e4:98:91:e1:aa:2c:3f:50:1a:05:86:23:3e:e9:cc:60:fd: 37:81:84:9a:55:fc:f4:32:31:11:e4:ed:26:41:35:f1:89:bb: 6b:53:f4:cf:5d:9d:94:09:0e:cd:2f:27:35:ea:f7:0f:fc:0d: 6c:9b:09:e6:4c:53:8e:09:ca:e9:99:72:de:c5:3c:67:91:f1: ff:7d:03:91:34:28:f9:d4:16:ef:d9:41:cf:d4:a2:79:bb:14: f3:e2:94:13:76:25:c6:ca:79:02:a5:fc:37:fb:ec:2b:b7:6b: c2:91:1b:77:b4:a8:ce:25:a1:73:e2:e0:81:12:7d:00:c7:1e: 0d:c6:9d:0f:bb:51:f4:b5:28:2b:fc:9c:ea:d5:b3:15:00:48: 22:c5:50:f2:be:5e:6a:3b:89:2d:3c:52:34:68:39:88:94:78: 66:64:d5:bf:f0:15:a1:fa:bd:fc:a1:c3:17:21:1d:62:92:dc: 83:c8:7b:bb:8f:4f:57:15:d1:2a:de:64:4f:0a:02:ef:8a:67: e1:5d:be:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUxMDE4MjEyOTM0WhcNMjUxMDI1MjEyOTM0WjAYMRYwFAYD VQQDEw02OGY0MDZiZS0zZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTvsaaeahXdtXnf3EjlxWcPAt7aJ93gNmv/6uEpUnStKsvln9FshKkQ02oTZ 9l0iUcqzv57BpprW/Dr0AvIeg7/YO76NpNLMxfYgY8UdBo5KUC172VqxRYpfzu3+ KpZByk7X5yz1WZNCFkVF6n0D85xlFPXJjyNIMGraNkmvDtlrqI+ni/rtF5yonFX1 kpq6koTlwS0Dwhuh24bfDztScVLLLAGPLvgbVtqBYBitscUo5h/9jlesUbIWhRf0 f+gZihB5rIvEbVe7Ltp3t0MvqB8U9DdXhsUvo3N6u9U7n1SYozB+UIadQTLQJYfh DbdZGNCYVBs+ZpoIRHUslXUqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnPtG46 VF+iJjlpcLW/0B/TCK9EMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ1LcWn0eiUHugL9o6NQDLhIFUE6Uf0EZIzth32miN10gWVsgMMdkO Clid+s9FEg0LfTl76te35JiR4aosP1AaBYYjPunMYP03gYSaVfz0MjER5O0mQTXx ibtrU/TPXZ2UCQ7NLyc16vcP/A1smwnmTFOOCcrpmXLexTxnkfH/fQORNCj51Bbv 2UHP1KJ5uxTz4pQTdiXGynkCpfw3++wrt2vCkRt3tKjOJaFz4uCBEn0Axx4Nxp0P u1H0tSgr/Jzq1bMVAEgixVDyvl5qO4ktPFI0aDmIlHhmZNW/8BWh+r38ocMXIR1i ktyDyHu7j09XFdEq3mRPCgLvimfhXb7j -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:34 2025 by rpki-client