$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: g4EsT2ahAuIFUr/O8gyj3zwaWAcen0brTqTsFgpYQOg= Subject key identifier: 60:AF:64:2A:7C:58:B9:4B:C2:31:11:BF:57:5C:05:F2:F7:CF:99:03 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B94 Signing time: Sat 18 Oct 2025 19:51:43 +0000 Manifest this update: Sat 18 Oct 2025 19:51:43 +0000 Manifest next update: Sat 25 Oct 2025 19:51:43 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: kyomcKxP1eC19O7KptzSMMnb9kq7kt9wvNYfYLv+YpM=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Oct 18 19:51:43 2025 GMT Not After : Oct 25 19:51:43 2025 GMT Subject: CN=68f3efcf-ced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:55:83:75:a6:fc:b0:46:7a:d6:64:62:e2: a1:3d:95:5b:2d:3c:4e:8e:29:17:f1:53:60:82:86: 92:fb:6f:30:4a:1f:4d:22:0b:fd:7e:8a:a8:38:85: e8:d4:0a:05:59:e9:0e:e3:8e:75:86:64:19:cb:14: 90:54:2f:55:a8:6a:e3:9d:8b:fb:bf:a8:0f:21:a2: 3d:b0:6a:f7:6b:00:f3:71:7d:36:06:33:84:c0:c5: 6e:be:df:b6:57:aa:f0:f3:df:56:fd:70:af:ac:01: ef:3e:df:bd:27:af:09:28:94:c6:89:0d:d8:95:82: a8:9a:5c:e8:3b:cc:a4:5a:30:52:9d:ff:a0:7b:88: 6d:85:3f:2e:b8:9e:1f:d7:38:05:a4:68:05:74:94: 4a:59:a9:4a:39:75:b6:78:21:38:fc:83:f4:b9:19: 45:17:e3:a9:67:ca:27:a8:83:ee:cf:2a:c4:8c:27: f9:85:e5:95:c1:94:76:1e:8e:d6:f9:6b:0f:fd:c2: d8:93:20:38:74:f2:96:d8:7b:ca:9a:d2:79:92:8c: 31:bb:f6:1c:bc:0b:85:d2:48:ac:b8:78:64:bc:6e: 74:e0:61:3e:ac:77:83:04:bf:47:8b:58:91:bf:6e: 7d:38:e4:1a:f8:47:71:4b:54:a5:95:fa:aa:22:44: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:64:2A:7C:58:B9:4B:C2:31:11:BF:57:5C:05:F2:F7:CF:99:03 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:84:88:f2:2a:8b:e3:83:bb:9b:f7:37:1b:4d:dc:b0:7a:ef: fa:10:3c:ce:53:56:86:e6:72:33:df:e6:ed:9a:86:8c:2a:e8: a9:7e:79:be:49:d6:d5:6b:83:62:2f:66:76:f8:84:97:76:24: 21:9a:54:f3:25:f4:28:96:7f:0f:cb:ea:58:b5:6b:6c:f7:29: 47:ec:92:8c:b4:34:23:b7:b1:41:45:88:70:58:f0:0b:26:cd: 0d:43:d5:64:f6:e9:63:00:f9:27:47:56:dd:99:56:fb:49:59: 89:a1:a2:23:4d:a4:95:0c:8a:a3:47:2c:8b:20:6f:5c:6f:dd: b2:0e:64:14:a6:66:f0:91:ba:98:96:b8:6e:b8:ca:b4:5f:05: a2:f5:41:ff:af:81:39:bb:dd:88:f3:f0:fc:8c:b1:5b:97:41: bb:16:a6:b4:8c:ff:a3:9b:93:c3:e6:61:32:72:e4:69:b0:61: c1:20:ae:47:a0:42:3e:c9:45:86:ff:b7:e0:1a:d6:15:a5:b8: bd:e5:f5:37:88:b3:bb:98:50:f3:ab:fa:25:b0:81:c4:55:a0: a6:4d:25:1c:73:93:ca:e7:b5:af:23:47:a4:f0:c4:86:e5:17: 19:79:d7:44:0c:6f:7b:56:66:65:5f:98:09:36:94:5e:f0:f7: 15:66:21:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUxMDE4MTk1MTQzWhcNMjUxMDI1MTk1MTQzWjAYMRYwFAYD VQQDEw02OGYzZWZjZi1jZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk5Vg3Wm/LBGetZkYuKhPZVbLTxOjikX8VNggoaS+28wSh9NIgv9foqoOIXo 1AoFWekO4451hmQZyxSQVC9VqGrjnYv7v6gPIaI9sGr3awDzcX02BjOEwMVuvt+2 V6rw899W/XCvrAHvPt+9J68JKJTGiQ3YlYKomlzoO8ykWjBSnf+ge4hthT8uuJ4f 1zgFpGgFdJRKWalKOXW2eCE4/IP0uRlFF+OpZ8onqIPuzyrEjCf5heWVwZR2Ho7W +WsP/cLYkyA4dPKW2HvKmtJ5kowxu/YcvAuF0kisuHhkvG504GE+rHeDBL9Hi1iR v259OOQa+EdxS1SllfqqIkR1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCvZCp8 WLlLwjERv1dcBfL3z5kDMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPhIjyKovjg7ub9zcbTdyweu/6EDzOU1aG5nIz3+btmoaMKuipfnm+ SdbVa4NiL2Z2+ISXdiQhmlTzJfQoln8Py+pYtWts9ylH7JKMtDQjt7FBRYhwWPAL Js0NQ9Vk9uljAPknR1bdmVb7SVmJoaIjTaSVDIqjRyyLIG9cb92yDmQUpmbwkbqY lrhuuMq0XwWi9UH/r4E5u92I8/D8jLFbl0G7Fqa0jP+jm5PD5mEycuRpsGHBIK5H oEI+yUWG/7fgGtYVpbi95fU3iLO7mFDzq/olsIHEVaCmTSUcc5PK57WvI0ek8MSG 5RcZeddEDG97VmZlX5gJNpRe8PcVZiHM -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:09 2025 by rpki-client