$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: /xIo8ghCfMh2YmE6iIETTzlygH3+19EWYN3rchq+t3A= Subject key identifier: 84:E3:76:DF:23:10:46:D9:E8:DA:EF:3F:B1:9C:D8:8F:63:26:8B:A3 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: AD Signing time: Sun 19 Oct 2025 09:18:49 +0000 Manifest this update: Sun 19 Oct 2025 09:18:48 +0000 Manifest next update: Sun 26 Oct 2025 09:18:48 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: US5u0N9pTHGcqC0bUSn3PS/xj4W/WIwHp6b9J1czGeU=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Oct 19 09:18:48 2025 GMT Not After : Oct 26 09:18:48 2025 GMT Subject: CN=68f4acf9-fb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:9c:66:ec:77:ea:89:9a:9f:43:2a:96:a2: 27:03:d8:b1:d1:69:7e:64:b7:cb:4e:2f:41:0e:39: b7:e2:d7:70:a3:1f:26:35:4f:71:0d:aa:a3:a4:5a: 20:56:55:3c:6a:c7:0f:d6:ff:e4:b9:b9:f8:40:49: 89:76:1a:7b:51:bc:24:d0:58:43:88:2a:f5:c0:13: 8f:51:c3:c2:55:5b:3c:f8:1c:a4:51:f7:98:77:d8: 94:29:cf:cf:8a:ce:6b:4a:89:27:d7:99:c5:56:71: cb:60:d9:f5:59:36:9e:0c:05:62:c1:62:06:c6:b5: bb:ab:cc:7c:a0:40:62:4a:b2:13:c2:26:10:06:fe: 68:1a:96:39:68:f4:d5:3f:57:84:e9:79:3f:13:48: 93:c8:75:bb:82:da:59:0e:66:10:14:aa:8f:1f:06: 5b:d6:6d:ae:f4:02:77:dc:5a:88:0f:fa:82:e7:f0: 9b:d4:fd:d8:b8:74:f5:1b:db:90:c5:f8:f8:73:be: 2f:a0:87:dd:0a:69:9e:81:c2:26:d8:66:9b:e1:16: 4b:c4:76:e8:5d:12:ee:42:01:1b:b0:00:f6:02:75: 74:13:a6:a3:1b:d7:a6:ee:85:8b:19:fc:39:7f:1c: 65:af:0b:b0:f7:2a:c8:8a:a4:81:9b:4a:df:c7:07: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:76:DF:23:10:46:D9:E8:DA:EF:3F:B1:9C:D8:8F:63:26:8B:A3 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c6:ce:63:34:e8:ac:ab:26:51:3e:7b:f0:c1:1d:9a:c5:d0: 12:3d:63:bf:1f:03:7f:7e:94:d1:d9:10:f0:db:7d:a6:f2:d4: f0:c5:ee:dd:0e:8c:20:f1:60:fc:07:f0:9d:13:23:4d:ce:a2: c0:42:f7:03:26:6f:c1:6b:9e:7b:80:c6:6b:fa:8a:f2:d7:bd: a3:b0:77:ee:8a:70:af:c7:94:99:6b:a6:65:f6:24:eb:f5:e4: 7c:db:0b:fd:63:7d:cc:29:15:ae:13:4e:8e:9f:30:2c:eb:3a: fd:c6:72:61:7b:fd:d6:44:bf:4c:8e:06:d7:19:87:97:a2:20: 16:4f:36:e5:93:a7:44:92:fa:f8:57:a9:c1:e4:65:db:9b:bf: d4:e6:09:93:3b:d9:d1:51:eb:65:6e:39:fb:75:5e:73:06:66: 07:9c:80:ee:34:57:62:ea:5e:70:26:04:2f:5b:e3:58:d5:56: af:ab:62:c0:7d:85:e9:9a:df:ee:cc:87:70:27:18:d2:44:23: 66:db:dc:e3:42:44:c8:73:12:cc:ec:b7:1d:23:24:ca:e0:b6: 47:ce:a2:57:1d:fd:3c:4d:60:71:a2:3f:05:58:54:90:c0:36: 5b:7f:89:59:83:ee:dd:a6:a7:f9:c6:b5:35:59:04:7b:e3:44: 1a:0f:dc:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjUxMDE5MDkxODQ4WhcNMjUxMDI2MDkxODQ4WjAYMRYwFAYD VQQDEw02OGY0YWNmOS1mYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01acZux36oman0MqlqInA9ix0Wl+ZLfLTi9BDjm34tdwox8mNU9xDaqjpFog VlU8ascP1v/kubn4QEmJdhp7Ubwk0FhDiCr1wBOPUcPCVVs8+BykUfeYd9iUKc/P is5rSokn15nFVnHLYNn1WTaeDAViwWIGxrW7q8x8oEBiSrITwiYQBv5oGpY5aPTV P1eE6Xk/E0iTyHW7gtpZDmYQFKqPHwZb1m2u9AJ33FqID/qC5/Cb1P3YuHT1G9uQ xfj4c74voIfdCmmegcIm2Gab4RZLxHboXRLuQgEbsAD2AnV0E6ajG9em7oWLGfw5 fxxlrwuw9yrIiqSBm0rfxwcmfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITjdt8j EEbZ6NrvP7Gc2I9jJoujMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMxs5jNOisqyZRPnvwwR2axdASPWO/HwN/fpTR2RDw232m8tTwxe7d Dowg8WD8B/CdEyNNzqLAQvcDJm/Ba557gMZr+ory172jsHfuinCvx5SZa6Zl9iTr 9eR82wv9Y33MKRWuE06OnzAs6zr9xnJhe/3WRL9MjgbXGYeXoiAWTzblk6dEkvr4 V6nB5GXbm7/U5gmTO9nRUetlbjn7dV5zBmYHnIDuNFdi6l5wJgQvW+NY1Vavq2LA fYXpmt/uzIdwJxjSRCNm29zjQkTIcxLM7LcdIyTK4LZHzqJXHf08TWBxoj8FWFSQ wDZbf4lZg+7dpqf5xrU1WQR740QaD9zg -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:21 2025 by rpki-client