$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: 9uF/cEW6JgoPHDquRr07AZJEV/6gJ75BfnY8WG1dAy0= Subject key identifier: B1:F1:50:20:90:57:F9:E8:03:68:80:01:D6:99:0F:24:18:5D:B6:89 Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 02AF Signing time: Sun 19 Oct 2025 03:44:43 +0000 Manifest this update: Sun 19 Oct 2025 03:44:43 +0000 Manifest next update: Sun 26 Oct 2025 03:44:43 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: /q8BShNxwd7A1XTGQbU7dPXKZIqTkXi3Pf7i1aCrgCs=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: hbJJRaC5M5LUQTbnkq8W618J1VcGyMM13Drb0UsxWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Oct 19 03:44:43 2025 GMT Not After : Oct 26 03:44:43 2025 GMT Subject: CN=68f45eab-1805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:1c:ea:94:7d:2a:65:b6:33:e7:b7:e8:ec: cc:15:e2:c4:63:fc:3b:6d:92:d9:05:ef:2b:a4:a4: b0:e2:d0:5e:1a:22:f7:18:6c:12:2d:cb:c8:ff:c6: 43:68:81:89:f4:fe:7e:f4:a1:86:90:a3:b0:c7:eb: c7:dd:2c:95:a0:09:e6:72:53:1b:c2:10:39:bb:8d: b5:4a:98:c1:e8:50:cb:ac:73:69:5b:c8:cf:02:2d: df:0d:41:ab:54:f0:df:55:a6:c0:8a:6b:82:dd:2b: 47:cd:cd:a2:80:e5:30:a1:81:02:fd:c7:ae:6a:09: 3e:31:df:9c:c1:36:ba:da:52:f1:bc:28:b3:23:c7: b4:6b:3a:55:9f:71:9b:21:8e:6f:e6:5c:62:1e:1b: 10:9d:39:5e:45:c1:a2:e8:63:6b:72:5a:bf:b3:83: 2e:f5:41:4f:5b:d1:1f:a8:75:b1:76:4d:6f:33:41: 2d:d2:9c:a0:8c:0a:c6:e8:14:a3:e1:ca:c5:71:6c: dc:40:38:b5:7b:08:86:c3:26:42:23:67:35:35:59: 1a:5d:fd:b8:6b:46:59:fa:c9:6d:f3:77:37:fd:49: 05:33:cf:d4:24:fc:d8:c5:9f:9d:9a:b4:27:13:05: 1b:37:08:32:c7:d2:5f:b9:81:24:37:71:a3:6f:3b: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F1:50:20:90:57:F9:E8:03:68:80:01:D6:99:0F:24:18:5D:B6:89 X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:40:94:fb:f5:05:26:97:31:14:69:80:d0:e9:6d:32:d6:d8: 19:25:3d:3a:34:54:15:a3:74:99:b4:8e:e5:82:34:74:eb:a2: 21:75:34:a2:f6:42:5f:e7:33:35:bd:d8:ed:00:c5:5a:ff:58: cc:bf:e1:ab:8e:d6:9b:20:0b:b5:4f:7b:2e:15:75:d5:ba:94: be:e1:fb:e8:7e:57:e2:ee:30:18:c8:89:a7:e0:a3:5b:61:fa: 5f:a9:e3:c9:0f:68:2d:d3:63:79:ca:a6:a2:79:3f:6e:44:1a: 6d:f4:e9:d2:bd:b4:89:9e:e2:58:cd:cb:91:8f:92:e0:f7:e0: dc:a8:97:3a:d7:c0:65:45:da:3f:19:4c:a1:60:b3:17:63:01: 20:c1:6f:b2:ea:dd:3f:b8:3e:cb:a0:2c:69:fb:cb:c7:89:1d: 89:fd:71:d2:c5:dd:d0:2e:3c:00:38:c0:7c:44:be:7c:61:8f: 51:ad:06:c1:ff:f0:44:97:ee:ca:9a:51:de:c7:e2:ed:4f:3c: 19:82:e8:de:d1:3c:93:14:39:1d:fd:bc:21:c8:41:36:c0:d7: eb:23:0b:cb:64:39:14:01:f1:af:24:5b:0c:f0:41:d6:34:42: c0:22:0f:3d:5c:25:2b:08:7f:f9:9e:ff:fb:1d:51:5a:c6:79: 1b:30:4f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjUxMDE5MDM0NDQzWhcNMjUxMDI2MDM0NDQzWjAYMRYwFAYD VQQDEw02OGY0NWVhYi0xODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy40c6pR9KmW2M+e36OzMFeLEY/w7bZLZBe8rpKSw4tBeGiL3GGwSLcvI/8ZD aIGJ9P5+9KGGkKOwx+vH3SyVoAnmclMbwhA5u421SpjB6FDLrHNpW8jPAi3fDUGr VPDfVabAimuC3StHzc2igOUwoYEC/ceuagk+Md+cwTa62lLxvCizI8e0azpVn3Gb IY5v5lxiHhsQnTleRcGi6GNrclq/s4Mu9UFPW9EfqHWxdk1vM0Et0pygjArG6BSj 4crFcWzcQDi1ewiGwyZCI2c1NVkaXf24a0ZZ+slt83c3/UkFM8/UJPzYxZ+dmrQn EwUbNwgyx9JfuYEkN3GjbzugSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHxUCCQ V/noA2iAAdaZDyQYXbaJMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuQJT79QUmlzEUaYDQ6W0y1tgZJT06NFQVo3SZtI7lgjR066IhdTSi 9kJf5zM1vdjtAMVa/1jMv+GrjtabIAu1T3suFXXVupS+4fvoflfi7jAYyImn4KNb YfpfqePJD2gt02N5yqaieT9uRBpt9OnSvbSJnuJYzcuRj5Lg9+DcqJc618BlRdo/ GUyhYLMXYwEgwW+y6t0/uD7LoCxp+8vHiR2J/XHSxd3QLjwAOMB8RL58YY9RrQbB //BEl+7KmlHex+LtTzwZguje0TyTFDkd/bwhyEE2wNfrIwvLZDkUAfGvJFsM8EHW NELAIg89XCUrCH/5nv/7HVFaxnkbME/E -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:10 2025 by rpki-client