$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: /qX+p2IinhhjaqZ/GSoUPhZo0or7tzV8fveaU2M992g= Subject key identifier: EB:D0:0F:67:DC:30:7D:FB:D5:BB:E8:0D:08:D2:B8:C6:9D:84:12:A5 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: AF Signing time: Sun 19 Oct 2025 09:15:17 +0000 Manifest this update: Sun 19 Oct 2025 09:15:16 +0000 Manifest next update: Sun 26 Oct 2025 09:15:16 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: na+u5x7tc6mSf9BMbEQijlcZCj+ciVB7LAQoB5p8Edw=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Oct 19 09:15:16 2025 GMT Not After : Oct 26 09:15:16 2025 GMT Subject: CN=68f4ac25-74f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:19:e1:a3:29:a3:ef:96:49:e3:3d:46:d3: 94:58:56:53:58:35:b2:b9:54:7e:2c:b6:fc:00:13: 8b:80:2c:27:5f:21:d2:37:97:a6:a0:b3:94:43:e4: 83:74:8d:d6:cb:86:bc:a9:97:cb:1f:9e:77:c0:61: d5:f0:98:82:af:a0:a4:35:29:2b:e7:39:19:6c:26: 8f:59:1c:25:f4:62:da:fa:53:8d:26:ac:f9:de:18: 8d:6c:43:cf:38:0e:de:36:48:7e:8e:11:3c:66:12: 5b:a9:cd:29:b7:24:17:4b:c6:29:93:77:45:54:e3: 15:de:7f:87:28:a0:b6:26:8c:22:6e:9d:5d:66:7b: 3e:73:7f:50:2e:14:c5:1f:96:75:02:2d:d6:a3:5e: 33:7e:c3:31:e7:0b:31:07:b8:49:91:ea:43:8c:76: 53:5b:df:34:21:dc:d9:c0:14:d0:c3:c9:d9:2c:56: f0:9d:07:c8:ac:9d:ce:b8:f8:01:4e:56:2b:b3:e2: a0:4d:d9:e3:7f:90:4f:6e:84:1d:17:4c:9a:09:3f: b2:e7:66:1d:14:fe:78:e2:a9:ef:65:ee:61:07:b8: c3:60:cb:ca:50:3d:7f:e2:99:55:1c:78:62:1c:b4: 73:75:66:c0:47:42:74:44:da:bb:cc:c0:e6:50:bc: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:0F:67:DC:30:7D:FB:D5:BB:E8:0D:08:D2:B8:C6:9D:84:12:A5 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:8c:61:26:0a:6f:7a:0b:e2:23:90:e5:6b:83:62:ef:16: f3:a2:52:9d:f9:12:c7:30:49:d4:48:80:78:95:f8:68:15:b5: 1b:29:5e:7b:05:b6:9f:c7:2b:02:75:e8:9c:c7:5e:9d:f3:eb: bf:87:cd:ab:14:f4:a6:84:ab:c2:89:28:ee:da:0e:e6:1b:74: a5:a8:bd:06:6d:0c:41:dc:71:98:a2:56:64:59:2a:11:7c:c2: 69:6f:87:2e:bf:88:fd:da:d3:c9:8a:ea:38:8a:a1:75:5a:ae: d7:b4:23:ee:33:cc:8f:ae:d2:21:e4:79:80:a9:60:4d:93:bd: 41:af:0e:61:8b:97:50:f0:53:eb:12:ec:96:d8:ec:db:3d:48: b5:5e:16:57:3c:b5:b5:22:30:ef:15:08:8f:c0:44:2e:fd:92: 6a:4c:8c:3c:bd:80:e0:66:58:ac:4f:c1:3a:0e:14:06:91:97: 8f:cd:41:4d:12:eb:16:83:9d:a0:82:96:3f:4f:84:41:ca:03: 32:df:c4:54:74:44:7a:6b:68:93:a9:ef:9f:a4:58:3f:80:b2: ed:29:f0:2f:a5:66:c2:91:9c:c7:c6:44:60:70:8f:80:99:18: 3d:76:4c:6c:38:85:66:a4:b6:f5:43:c1:81:9f:bd:cf:09:f4: 0a:a3:37:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUxMDE5MDkxNTE2WhcNMjUxMDI2MDkxNTE2WjAYMRYwFAYD VQQDEw02OGY0YWMyNS03NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfkZ4aMpo++WSeM9RtOUWFZTWDWyuVR+LLb8ABOLgCwnXyHSN5emoLOUQ+SD dI3Wy4a8qZfLH553wGHV8JiCr6CkNSkr5zkZbCaPWRwl9GLa+lONJqz53hiNbEPP OA7eNkh+jhE8ZhJbqc0ptyQXS8Ypk3dFVOMV3n+HKKC2Jowibp1dZns+c39QLhTF H5Z1Ai3Wo14zfsMx5wsxB7hJkepDjHZTW980IdzZwBTQw8nZLFbwnQfIrJ3OuPgB TlYrs+KgTdnjf5BPboQdF0yaCT+y52YdFP544qnvZe5hB7jDYMvKUD1/4plVHHhi HLRzdWbAR0J0RNq7zMDmULyV5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvQD2fc MH371bvoDQjSuMadhBKlMB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbYYxhJgpvegviI5Dla4Ni7xbzolKd+RLHMEnUSIB4lfhoFbUbKV57 BbafxysCdeicx16d8+u/h82rFPSmhKvCiSju2g7mG3SlqL0GbQxB3HGYolZkWSoR fMJpb4cuv4j92tPJiuo4iqF1Wq7XtCPuM8yPrtIh5HmAqWBNk71Brw5hi5dQ8FPr EuyW2OzbPUi1XhZXPLW1IjDvFQiPwEQu/ZJqTIw8vYDgZlisT8E6DhQGkZePzUFN EusWg52ggpY/T4RBygMy38RUdER6a2iTqe+fpFg/gLLtKfAvpWbCkZzHxkRgcI+A mRg9dkxsOIVmpLb1Q8GBn73PCfQKozdZ -----END CERTIFICATE-----Generated at Mon Oct 20 21:08:18 2025 by rpki-client