$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json) Hash identifier: f6rSV0OE20XmP4yv5sjEm9Tn/sKGkYQbItJCbmuidxA= Subject key identifier: 47:3A:DD:CC:57:93:81:DF:6D:AB:93:97:95:DA:76:67:52:80:0E:07 Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81 Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft Manifest number: 0439 Signing time: Sun 19 Oct 2025 02:10:01 +0000 Manifest this update: Sun 19 Oct 2025 02:10:01 +0000 Manifest next update: Sun 26 Oct 2025 02:10:01 +0000 Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: eHJ5p0RPzaFhEItTt3e/qt9zlGrlQ97jRD6XAg+O5e8=) 2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681 Validity Not Before: Oct 19 02:10:01 2025 GMT Not After : Oct 26 02:10:01 2025 GMT Subject: CN=68f44879-d29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:0b:4e:e6:e0:b1:65:a5:2f:a6:bf:be:a7: 36:aa:04:c5:21:4a:60:99:01:cc:fc:1e:b9:27:89: 59:26:ae:75:36:56:bc:71:96:e6:4b:23:05:5c:b7: 1b:7a:e8:85:53:7e:6d:f5:fa:45:63:32:b2:ef:82: d6:c5:e5:62:22:a9:d2:85:28:82:f8:16:75:79:6a: b8:49:ef:97:4d:44:3f:0b:9d:12:db:d7:86:1c:d2: 31:b9:3e:58:09:07:a5:ff:e5:ce:05:cd:ab:89:e1: b7:5c:99:4f:80:9c:8a:77:9f:c1:b5:1b:df:87:33: a1:d0:f2:d2:75:04:5a:19:76:e7:8d:9c:7a:0e:ba: 0c:e8:f6:78:47:1f:e6:c6:12:52:29:73:48:96:b1: a4:81:5c:0e:df:5a:4a:ab:a9:93:d2:22:56:f2:5a: 05:d8:3a:61:f0:5f:1f:7f:71:ce:c2:0b:59:73:70: 5e:7f:44:ff:49:b8:22:3b:60:cb:d1:ce:87:19:0a: e4:0f:f8:b6:92:c6:38:c0:20:1b:94:9c:66:b2:d3: a0:44:44:55:62:03:44:7a:dd:86:50:10:81:3d:3c: 38:62:ff:8c:31:cf:3b:48:d7:c4:6c:7f:02:68:ef: b7:0c:c2:55:be:21:4b:fe:69:b3:81:47:08:a8:96: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3A:DD:CC:57:93:81:DF:6D:AB:93:97:95:DA:76:67:52:80:0E:07 X509v3 Authority Key Identifier: keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:96:8e:14:08:66:bd:ab:59:63:37:f7:c5:ca:7f:b4:bd:03: 12:6a:41:98:c0:ea:c2:e3:25:74:9d:41:bf:0c:4d:73:a4:3d: b8:42:06:79:b7:e1:06:71:ad:20:0d:79:7b:30:ae:2e:12:61: 85:4a:21:64:bd:66:89:10:a7:7d:f1:67:b3:3a:3a:dc:99:0c: 9d:37:16:53:0d:cd:4b:ab:8e:14:23:f6:2c:17:81:46:88:8c: 49:ab:95:21:fe:cf:d0:e6:d0:84:26:23:7c:eb:87:fc:9f:03: af:f1:49:73:e2:c2:de:75:67:70:16:88:35:92:06:2f:59:e3: a3:27:58:2b:2a:cd:06:38:6d:0b:41:ac:97:2d:9a:d2:40:3b: 59:16:7a:a2:d3:f4:a2:5f:dc:ef:6c:7c:22:b6:4f:97:67:4d: 17:07:7c:fd:5d:de:ec:26:04:4b:5d:44:bf:dc:6f:b9:20:23: a7:8b:0c:d6:74:97:f4:cc:f5:18:91:ce:56:a3:c4:f7:4c:92: 24:88:9d:26:fe:46:b4:2a:c3:68:b8:84:a3:18:3e:d5:0c:9e: 47:26:3e:6a:da:5b:31:45:e1:47:a0:af:6b:25:ed:93:13:9f: 27:e2:cb:41:53:ae:cd:37:af:00:a8:b7:a1:ab:03:1b:fa:22: a4:76:0a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCQ0ExMTAvBgNVBAUTKEY0Q0M0MzA0RTE3OTBFMDhGNUVDOTI5QTg3MzcyMjY5 RDA4RkI2ODEwHhcNMjUxMDE5MDIxMDAxWhcNMjUxMDI2MDIxMDAxWjAYMRYwFAYD VQQDEw02OGY0NDg3OS1kMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkULTubgsWWlL6a/vqc2qgTFIUpgmQHM/B65J4lZJq51Nla8cZbmSyMFXLcb euiFU35t9fpFYzKy74LWxeViIqnShSiC+BZ1eWq4Se+XTUQ/C50S29eGHNIxuT5Y CQel/+XOBc2rieG3XJlPgJyKd5/BtRvfhzOh0PLSdQRaGXbnjZx6DroM6PZ4Rx/m xhJSKXNIlrGkgVwO31pKq6mT0iJW8loF2Dph8F8ff3HOwgtZc3Bef0T/SbgiO2DL 0c6HGQrkD/i2ksY4wCAblJxmstOgRERVYgNEet2GUBCBPTw4Yv+MMc87SNfEbH8C aO+3DMJVviFL/mmzgUcIqJbVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEc63cxX k4HfbauTl5XadmdSgA4HMB8GA1UdIwQYMBaAFPTMQwTheQ4I9eySmoc3ImnQj7aB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0JDQS82MkJDRDVERTdB OUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURnajE3SkthaHpjaWFkQ1B0 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNeERCT0Y1RGdqMTdKS2FoemNpYWRDUHRvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0JDQS82MkJDRDVERTdBOUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURn ajE3SkthaHpjaWFkQ1B0b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDplo4UCGa9q1ljN/fFyn+0vQMSakGYwOrC4yV0nUG/DE1zpD24QgZ5 t+EGca0gDXl7MK4uEmGFSiFkvWaJEKd98WezOjrcmQydNxZTDc1Lq44UI/YsF4FG iIxJq5Uh/s/Q5tCEJiN864f8nwOv8Ulz4sLedWdwFog1kgYvWeOjJ1grKs0GOG0L QayXLZrSQDtZFnqi0/SiX9zvbHwitk+XZ00XB3z9Xd7sJgRLXUS/3G+5ICOniwzW dJf0zPUYkc5Wo8T3TJIkiJ0m/ka0KsNouISjGD7VDJ5HJj5q2lsxReFHoK9rJe2T E58n4stBU67NN68AqLehqwMb+iKkdgob -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:37 2025 by rpki-client