$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: NxBICTxirDCb4laIWws8ybjjX5QPzdfROc0ZFFdQkPM= Subject key identifier: C4:56:48:63:F3:05:07:CC:87:AA:A5:95:E4:70:30:30:E2:EF:4A:D4 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 3503 Signing time: Mon 20 Oct 2025 14:35:01 +0000 Manifest this update: Mon 20 Oct 2025 14:35:01 +0000 Manifest next update: Mon 27 Oct 2025 14:35:01 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: UYr1v/sTPSKn0Gid/JHNuRkO48VQg9xUEPIT44hYlYc=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Oct 20 14:35:01 2025 GMT Not After : Oct 27 14:35:01 2025 GMT Subject: CN=68f64895-8d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:da:44:97:07:e3:5e:d4:3a:eb:eb:d3:ad:7b: 68:01:02:6e:5c:83:6e:da:d7:87:e0:d7:53:97:2f: 75:1d:86:54:fd:1b:19:0f:a9:5d:78:0a:ec:32:41: 3b:ef:2a:fc:16:ba:83:97:1a:e3:cf:d3:67:d2:74: 0a:17:54:5d:4f:02:0d:2f:e8:d9:b2:b2:97:46:06: 6e:2d:8b:91:f6:54:8c:f9:6f:08:9a:b8:6a:af:2c: 70:1a:fe:e1:e4:38:22:65:c7:f6:59:1e:58:78:a3: 58:26:6e:2f:c8:8a:82:a9:c7:08:d4:00:03:b7:61: 99:d5:57:85:24:66:17:53:1c:cc:97:90:05:f4:70: 5e:43:fc:70:ee:9f:5a:71:5d:6c:bf:7f:79:ed:6e: 92:4b:01:31:56:15:bb:95:87:76:93:3c:aa:cd:a6: 4d:fc:fc:f0:6b:43:37:2a:1f:67:92:4c:48:01:65: 3c:b8:2b:3d:7f:99:2d:27:76:db:73:12:03:51:fb: a6:58:43:fb:6d:4c:32:6e:fd:07:28:a8:ba:b2:aa: 21:ff:25:06:d9:e8:23:04:cb:b0:82:4c:8c:cd:39: 0a:22:6d:22:6e:61:e9:74:bb:fa:c4:3a:26:d1:ec: 23:3f:24:d2:ce:9b:f0:21:b5:8f:98:50:29:6f:38: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:48:63:F3:05:07:CC:87:AA:A5:95:E4:70:30:30:E2:EF:4A:D4 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:73:37:f6:ca:a6:3d:71:85:3b:ca:c8:fb:79:ab:5a:67:99: c5:5e:20:4a:bd:38:e5:bf:eb:0a:23:fe:a6:49:43:1a:98:21: d6:16:e1:66:5e:23:a8:28:97:f4:19:50:d5:2d:7a:c1:b9:60: 31:8f:bf:85:9f:d6:57:91:66:28:e6:39:f8:67:6b:36:f0:73: e4:69:05:0e:b1:d3:98:42:25:49:12:f5:e9:f5:54:99:dd:fa: f4:3c:3f:34:cb:1a:11:ca:6a:5d:eb:9f:68:b1:84:49:4f:ac: c0:aa:62:6d:d8:40:0a:b5:79:d7:e2:1f:ff:37:d1:61:32:ac: fe:73:be:01:2a:9a:c4:3a:80:03:2f:61:c5:21:25:30:e1:e2: 4f:d2:97:89:84:b5:22:72:39:95:5d:b8:a5:4d:a3:0d:6e:af: af:a3:73:0a:ad:5f:92:af:74:93:b1:27:d7:e9:c2:53:9a:33: aa:77:04:e5:fe:8a:0d:69:b2:33:ed:45:2a:33:63:28:3b:e3: 79:8b:90:34:f4:cc:0d:03:cb:22:46:d0:8c:6d:e7:95:92:30: e2:33:7b:af:62:51:63:05:b3:ff:35:4e:ec:0e:2a:74:f4:b7: 69:0d:f7:b5:d8:3d:74:97:2a:94:b5:41:97:00:03:bb:b4:29: b6:d5:b3:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUxMDIwMTQzNTAxWhcNMjUxMDI3MTQzNTAxWjAYMRYwFAYD VQQDEw02OGY2NDg5NS04ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dpElwfjXtQ66+vTrXtoAQJuXINu2teH4NdTly91HYZU/RsZD6ldeArsMkE7 7yr8FrqDlxrjz9Nn0nQKF1RdTwINL+jZsrKXRgZuLYuR9lSM+W8ImrhqryxwGv7h 5DgiZcf2WR5YeKNYJm4vyIqCqccI1AADt2GZ1VeFJGYXUxzMl5AF9HBeQ/xw7p9a cV1sv3957W6SSwExVhW7lYd2kzyqzaZN/Pzwa0M3Kh9nkkxIAWU8uCs9f5ktJ3bb cxIDUfumWEP7bUwybv0HKKi6sqoh/yUG2egjBMuwgkyMzTkKIm0ibmHpdLv6xDom 0ewjPyTSzpvwIbWPmFApbzg9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRWSGPz BQfMh6qlleRwMDDi70rUMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLczf2yqY9cYU7ysj7eataZ5nFXiBKvTjlv+sKI/6mSUMamCHWFuFm XiOoKJf0GVDVLXrBuWAxj7+Fn9ZXkWYo5jn4Z2s28HPkaQUOsdOYQiVJEvXp9VSZ 3fr0PD80yxoRympd659osYRJT6zAqmJt2EAKtXnX4h//N9FhMqz+c74BKprEOoAD L2HFISUw4eJP0peJhLUicjmVXbilTaMNbq+vo3MKrV+Sr3STsSfX6cJTmjOqdwTl /ooNabIz7UUqM2MoO+N5i5A09MwNA8siRtCMbeeVkjDiM3uvYlFjBbP/NU7sDip0 9LdpDfe12D10lyqUtUGXAAO7tCm21bPz -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:12 2025 by rpki-client