$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: 8vg6Y7snvmFegr91V0yohVVJUwXZlqv2Kv4wmPZFUtU= Subject key identifier: 0E:0B:4E:4F:B7:42:29:7B:6A:72:52:58:8E:D9:41:B1:24:15:F9:C6 Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 04F4 Signing time: Sun 19 Oct 2025 01:29:59 +0000 Manifest this update: Sun 19 Oct 2025 01:29:58 +0000 Manifest next update: Sun 26 Oct 2025 01:29:58 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: yhkPua4t7iIr8fz2e7zkFsTSvEVjeYA+R73NcjZszRk=) 2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: CoT7676o1FhYn/hTok256b21HFRTMynmtKsMLIXyZyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Oct 19 01:29:58 2025 GMT Not After : Oct 26 01:29:58 2025 GMT Subject: CN=68f43f17-c3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:7a:87:9d:1f:5e:15:50:1d:04:83:86:18: 31:54:07:64:22:97:98:04:50:e5:ba:94:12:0e:a4: 95:bf:23:fb:9e:e5:a6:e1:d2:d5:ce:1d:2c:a8:de: 77:9a:8e:4f:d4:bf:cd:2e:36:85:4a:d0:91:66:ae: ab:b5:41:88:62:31:9d:04:3e:cf:3a:c5:02:d3:a7: 19:be:46:39:cb:40:92:89:ec:cb:00:94:17:6b:ba: 60:89:ce:e9:74:a2:a7:8d:ac:55:a2:9d:28:94:2f: d4:cb:64:bf:da:a0:b0:17:08:54:48:f7:7b:e5:31: 54:df:96:dd:5e:1b:63:61:49:58:29:cb:79:82:fa: 97:e4:1e:bd:d6:2a:2f:2e:12:9d:6c:f0:e3:ba:03: 8f:59:9e:3e:4e:4a:0a:09:df:a0:8b:00:be:35:d2: 55:62:30:8b:fc:d5:9d:fa:0e:8b:66:3d:32:9a:e9: 5e:79:8e:9b:87:92:35:67:fc:a1:36:ee:83:af:f6: 1c:0b:53:07:3c:02:55:46:6e:ef:ca:3e:70:36:00: a6:00:60:47:ec:30:f8:b3:7b:db:63:45:51:eb:e3: 58:e0:41:ce:95:43:01:78:bf:73:75:30:4a:28:32: d7:b2:ea:28:79:2f:ea:60:ad:11:dc:1c:e4:73:c5: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:4E:4F:B7:42:29:7B:6A:72:52:58:8E:D9:41:B1:24:15:F9:C6 X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5e:d7:b1:33:db:da:ee:44:91:a2:1f:d8:f3:27:ce:6a:43: a1:d0:ec:4b:b2:de:c1:90:b0:75:ad:c6:0f:9c:c3:cc:31:08: d3:ec:25:fd:7a:16:91:d0:1f:9e:cb:61:ce:75:ab:b6:aa:01: 96:4d:1a:c5:36:c8:49:59:f6:d8:1b:88:86:fb:7a:4c:31:19: 0d:32:56:90:79:33:42:48:45:8d:ba:79:0d:86:de:f7:7d:5f: 03:10:63:2a:8f:ff:fe:c2:93:60:c6:1a:4b:8a:cf:78:04:20: 3b:b4:1b:09:b5:62:d1:ae:a0:d5:01:6d:8d:46:a4:f2:4d:93: bc:5c:5d:5b:6a:0d:ee:5f:4a:98:42:22:8d:88:ac:c8:28:5f: e7:a2:8f:1a:a0:f9:de:2c:9e:ae:71:92:cd:db:55:93:38:43: 8e:dd:04:b4:6a:6e:c6:b9:93:e8:31:ac:f5:5e:79:b6:44:a3: aa:b4:28:24:85:9e:7b:e7:60:a6:28:88:8a:4d:36:b6:bd:1d: bc:dd:bf:40:73:7b:96:7c:f3:c5:b3:9d:1c:e1:76:65:74:bf: 95:d6:4a:74:36:51:1f:08:02:0b:9d:13:4a:d7:14:f9:e5:55: c0:4d:0a:a9:5b:be:a8:0d:0b:a2:88:33:7b:ce:7e:8e:b1:1a: 5f:d4:64:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjUxMDE5MDEyOTU4WhcNMjUxMDI2MDEyOTU4WjAYMRYwFAYD VQQDEw02OGY0M2YxNy1jM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yZ6h50fXhVQHQSDhhgxVAdkIpeYBFDlupQSDqSVvyP7nuWm4dLVzh0sqN53 mo5P1L/NLjaFStCRZq6rtUGIYjGdBD7POsUC06cZvkY5y0CSiezLAJQXa7pgic7p dKKnjaxVop0olC/Uy2S/2qCwFwhUSPd75TFU35bdXhtjYUlYKct5gvqX5B691iov LhKdbPDjugOPWZ4+TkoKCd+giwC+NdJVYjCL/NWd+g6LZj0ymuleeY6bh5I1Z/yh Nu6Dr/YcC1MHPAJVRm7vyj5wNgCmAGBH7DD4s3vbY0VR6+NY4EHOlUMBeL9zdTBK KDLXsuooeS/qYK0R3Bzkc8VOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4LTk+3 Qil7anJSWI7ZQbEkFfnGMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARXtexM9va7kSRoh/Y8yfOakOh0OxLst7BkLB1rcYPnMPMMQjT7CX9 ehaR0B+ey2HOdau2qgGWTRrFNshJWfbYG4iG+3pMMRkNMlaQeTNCSEWNunkNht73 fV8DEGMqj//+wpNgxhpLis94BCA7tBsJtWLRrqDVAW2NRqTyTZO8XF1bag3uX0qY QiKNiKzIKF/noo8aoPneLJ6ucZLN21WTOEOO3QS0am7GuZPoMaz1Xnm2RKOqtCgk hZ5752CmKIiKTTa2vR283b9Ac3uWfPPFs50c4XZldL+V1kp0NlEfCAILnRNK1xT5 5VXATQqpW76oDQuiiDN7zn6OsRpf1GQz -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:54 2025 by rpki-client