$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: rXDE3V5EC9WXw7e2JGU50MiHOLeymaO18pa6Xcd1irM= Subject key identifier: 2F:EF:3B:E3:B5:01:61:1E:B9:89:E9:D9:B0:EB:E8:7E:84:70:2B:02 Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0C4C Signing time: Sat 18 Oct 2025 19:23:10 +0000 Manifest this update: Sat 18 Oct 2025 19:23:09 +0000 Manifest next update: Sat 25 Oct 2025 19:23:09 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: gTP1b/aQuK06qR2oq41Z5Fc7OaVoVMWL9L2ipGc/nns=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 3f3zqC4M9r+CBjBgJL/J6zSN/PgrTrc+js52IEKhV5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: Oct 18 19:23:09 2025 GMT Not After : Oct 25 19:23:09 2025 GMT Subject: CN=68f3e91e-df34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:e6:b2:67:f6:cc:87:a2:27:28:42:98:68: 04:9f:66:73:0a:16:76:34:ce:74:ba:3e:c3:e3:b1: a4:c7:34:c4:d9:75:0c:ea:e6:87:5e:e9:35:5c:2e: 15:6a:1e:06:9e:1a:bf:83:a4:8c:51:94:59:de:d0: 65:87:ac:d6:57:04:8b:28:56:33:1e:b8:45:26:14: c7:b5:62:da:09:05:d0:e3:0f:14:de:d0:d5:4d:94: 90:94:80:b9:03:b9:05:3d:93:f8:ee:7f:71:b2:c8: c6:33:21:97:64:7f:d6:60:d3:61:91:4a:d0:f6:ca: 2d:c8:f7:3f:50:d9:37:bc:63:b1:88:de:1c:75:15: 77:c8:05:47:90:ce:a0:ba:85:91:08:9a:33:00:e1: 48:6f:ae:2b:e4:b1:bb:5f:8a:ff:19:30:89:cd:72: 86:53:3a:f5:da:e2:50:b5:8c:cb:d9:c9:91:7f:58: af:0f:52:e9:c1:1b:7d:72:09:1a:0d:87:25:67:c2: d4:50:2b:cb:34:14:13:13:e1:9d:76:13:44:1b:d3: c6:73:c3:88:00:4a:01:9a:5d:dc:71:e1:80:4d:55: 7e:e1:c2:f5:91:89:4e:30:3d:28:f9:43:57:1a:4e: e5:99:c4:17:57:9e:25:d0:64:a7:9f:2c:b6:43:8f: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EF:3B:E3:B5:01:61:1E:B9:89:E9:D9:B0:EB:E8:7E:84:70:2B:02 X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5e:c5:93:f5:b1:76:70:40:1e:9e:09:e4:f1:6a:f0:80:9f: 8b:85:e3:84:4b:a7:67:55:af:fb:49:49:2b:74:84:7d:b9:2e: 35:a4:c2:e6:52:d9:14:61:f7:43:f1:d3:7d:25:24:56:42:61: 43:88:b5:36:8e:12:9d:ed:d5:c5:ae:59:78:97:ce:4a:11:07: b0:c4:37:78:82:25:67:72:de:d1:a4:a3:69:df:c2:38:6c:bd: 7d:33:41:43:42:85:5a:99:00:16:c7:23:f9:bb:16:6e:2c:b0: dc:31:15:86:9f:8a:ae:ba:65:fe:63:c8:90:b9:48:c5:1a:f3: 8e:4c:91:05:4b:6b:64:8a:8b:dc:17:90:c4:4a:70:f2:f9:29: 46:ea:62:e9:a8:b1:58:23:ed:ed:58:27:94:94:e3:43:92:ef: c3:71:3b:84:79:72:4a:97:00:43:66:2c:7e:93:ab:09:f7:b7: fc:ca:6d:50:f0:01:1a:67:09:1e:99:48:6f:e0:a9:f0:c3:4a: ee:95:ff:8f:86:db:30:1c:cc:64:a4:ef:58:d6:02:df:97:18: c1:4c:7d:50:73:a9:ff:a0:ce:6c:2c:2d:f1:bd:7e:f4:aa:84: f2:8a:8c:19:5d:c5:01:d7:3e:35:ce:e6:bf:82:98:02:7b:dd: ca:01:97:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjUxMDE4MTkyMzA5WhcNMjUxMDI1MTkyMzA5WjAYMRYwFAYD VQQDEw02OGYzZTkxZS1kZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcvmsmf2zIeiJyhCmGgEn2ZzChZ2NM50uj7D47GkxzTE2XUM6uaHXuk1XC4V ah4Gnhq/g6SMUZRZ3tBlh6zWVwSLKFYzHrhFJhTHtWLaCQXQ4w8U3tDVTZSQlIC5 A7kFPZP47n9xssjGMyGXZH/WYNNhkUrQ9sotyPc/UNk3vGOxiN4cdRV3yAVHkM6g uoWRCJozAOFIb64r5LG7X4r/GTCJzXKGUzr12uJQtYzL2cmRf1ivD1LpwRt9cgka DYclZ8LUUCvLNBQTE+GddhNEG9PGc8OIAEoBml3cceGATVV+4cL1kYlOMD0o+UNX Gk7lmcQXV54l0GSnnyy2Q4+egwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/vO+O1 AWEeuYnp2bDr6H6EcCsCMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyXsWT9bF2cEAengnk8WrwgJ+LheOES6dnVa/7SUkrdIR9uS41pMLm UtkUYfdD8dN9JSRWQmFDiLU2jhKd7dXFrll4l85KEQewxDd4giVnct7RpKNp38I4 bL19M0FDQoVamQAWxyP5uxZuLLDcMRWGn4quumX+Y8iQuUjFGvOOTJEFS2tkiovc F5DESnDy+SlG6mLpqLFYI+3tWCeUlONDku/DcTuEeXJKlwBDZix+k6sJ97f8ym1Q 8AEaZwkemUhv4Knww0rulf+PhtswHMxkpO9Y1gLflxjBTH1Qc6n/oM5sLC3xvX70 qoTyiowZXcUB1z41zua/gpgCe93KAZf6 -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:16 2025 by rpki-client