$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: XTHArSdPchJbWpcyvYksSnR1bzYhL0b+uKTuInhdg0E= Subject key identifier: 2E:3B:65:15:99:88:B5:74:C8:55:75:3E:A2:A9:F0:F6:C8:5C:50:26 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: AC Signing time: Sun 19 Oct 2025 09:45:08 +0000 Manifest this update: Sun 19 Oct 2025 09:45:08 +0000 Manifest next update: Sun 26 Oct 2025 09:45:08 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: gjUM3Wy6DF1+u1QB1LjYHX6QTTQNWiH8EEeOgLJt/cQ=) 2: D14C1FE06AB211F0976F001AC4F9AE02.roa (hash: CNFybG+1Rnqg1iljhEw8ck5HDJaCoHmMcCeBkIlBTRM=) 3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=) 4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=) 5: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=) 6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: 64RDTBNuccDdoIvEJOJA8ogdzC5IFskACfXeFbwpVtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Oct 19 09:45:08 2025 GMT Not After : Oct 26 09:45:08 2025 GMT Subject: CN=68f4b324-8e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:79:49:f1:ef:f2:17:53:96:66:57:88:fe: dc:cc:5b:1f:06:df:4a:04:90:d8:65:cb:fb:bb:d0: 54:35:eb:88:dc:a3:89:8d:0d:51:0d:a5:7c:01:77: 7d:fa:3f:29:15:62:5b:fe:1c:04:4f:2a:99:ce:d9: ba:a4:56:69:d3:49:59:57:58:32:39:c2:66:0d:63: 0f:1d:a8:ca:dd:8e:23:fc:cb:92:57:28:a9:f7:dd: 26:2e:15:e6:9f:f1:0a:91:d3:1b:8d:56:f9:d1:45: 99:4e:4f:67:4b:06:de:60:b8:72:84:51:91:c7:84: 6b:1e:f6:e5:b9:35:cc:8a:ff:b9:72:cd:b3:bb:1e: e9:45:7e:ca:1f:08:e2:a0:c4:08:9b:3d:92:14:e9: 4e:8c:67:dc:c0:74:04:af:39:bc:b7:ba:2f:ff:1b: 6b:1e:d8:af:98:02:b1:be:eb:1c:87:5e:89:99:f6: d9:3f:bd:13:e1:ee:19:77:20:77:05:e3:0a:b7:62: 9f:1a:cd:a3:f5:8a:90:48:38:86:ad:cd:18:69:9f: 6f:e6:2d:95:6b:f4:55:3c:3a:ba:83:bb:5c:3f:af: e8:4c:5b:57:e7:02:06:66:89:87:1f:0d:2d:e6:4a: 1a:c1:33:0f:90:db:77:32:dc:27:21:9b:63:d3:c2: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3B:65:15:99:88:B5:74:C8:55:75:3E:A2:A9:F0:F6:C8:5C:50:26 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f1:c6:a7:3a:1e:65:88:d1:36:96:06:5d:aa:b5:08:e2:19: aa:00:02:dc:7d:16:dc:e6:8a:8c:5b:cf:bc:44:09:94:03:c1: 63:c2:b9:fe:61:1e:7e:b4:da:69:a2:a5:01:68:07:e0:20:d9: ac:20:ca:fd:0f:d3:1d:46:6a:f9:df:5e:5b:5d:f3:fe:cb:ce: 81:a6:0d:3e:db:4a:6c:53:e5:ca:e9:9d:1b:de:dc:2e:8d:8b: eb:90:32:f6:71:06:01:8a:50:0e:a6:b7:31:ad:9f:f5:c4:c0: 9e:08:66:4f:81:27:96:b4:8e:48:fa:83:90:5c:4f:1a:a6:5c: 7e:42:b5:b1:85:ec:ca:40:f2:f6:d5:df:51:f8:b6:42:1d:93: f7:34:62:4f:12:d1:c3:1e:f5:4e:00:c7:6c:97:cf:73:87:1f: d1:4b:c7:b7:ca:0c:d4:4a:5f:26:17:be:93:f1:a1:bb:8a:23: 3c:ea:5c:76:4c:0a:fb:73:01:cc:c1:29:ac:db:09:1e:e0:81: 08:b7:0f:98:c7:8b:f8:a1:b3:71:cb:11:6f:4c:dc:3a:ae:e1: 8e:05:2a:ed:b9:0f:3f:81:de:1f:cf:fd:88:6a:2d:74:bb:db: bc:7b:26:3f:48:63:c3:f3:76:1e:ac:c7:90:ae:a6:5b:5e:6f: 7c:d2:af:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjUxMDE5MDk0NTA4WhcNMjUxMDI2MDk0NTA4WjAYMRYwFAYD VQQDEw02OGY0YjMyNC04ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3J5SfHv8hdTlmZXiP7czFsfBt9KBJDYZcv7u9BUNeuI3KOJjQ1RDaV8AXd9 +j8pFWJb/hwETyqZztm6pFZp00lZV1gyOcJmDWMPHajK3Y4j/MuSVyip990mLhXm n/EKkdMbjVb50UWZTk9nSwbeYLhyhFGRx4RrHvbluTXMiv+5cs2zux7pRX7KHwji oMQImz2SFOlOjGfcwHQErzm8t7ov/xtrHtivmAKxvusch16JmfbZP70T4e4ZdyB3 BeMKt2KfGs2j9YqQSDiGrc0YaZ9v5i2Va/RVPDq6g7tcP6/oTFtX5wIGZomHHw0t 5koawTMPkNt3MtwnIZtj08KVjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC47ZRWZ iLV0yFV1PqKp8PbIXFAmMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe8canOh5liNE2lgZdqrUI4hmqAALcfRbc5oqMW8+8RAmUA8Fjwrn+ YR5+tNppoqUBaAfgINmsIMr9D9MdRmr5315bXfP+y86Bpg0+20psU+XK6Z0b3twu jYvrkDL2cQYBilAOprcxrZ/1xMCeCGZPgSeWtI5I+oOQXE8aplx+QrWxhezKQPL2 1d9R+LZCHZP3NGJPEtHDHvVOAMdsl89zhx/RS8e3ygzUSl8mF76T8aG7iiM86lx2 TAr7cwHMwSms2wke4IEItw+Yx4v4obNxyxFvTNw6ruGOBSrtuQ8/gd4fz/2Iai10 u9u8eyY/SGPD83YerMeQrqZbXm980q88 -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:36 2025 by rpki-client