$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: 6AsTXrQCoom6xCnI1APnJ0N2jTQtm+RyJ+H+2fCMcR8= Subject key identifier: C4:BF:24:A9:13:1A:1B:73:05:5C:35:5F:AB:B2:EC:12:ED:14:32:0B Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 0245 Signing time: Sun 19 Oct 2025 04:06:41 +0000 Manifest this update: Sun 19 Oct 2025 04:06:40 +0000 Manifest next update: Sun 26 Oct 2025 04:06:40 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: 3E70IeuypnjX/HFvP/J7Q4IKCqPmQTsAiZB/Meef8p8=) 2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=) 3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: eVGJpjXfZuqnT2xF5gSdYG+4NURN3G12aXx32PS/6hU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: Oct 19 04:06:40 2025 GMT Not After : Oct 26 04:06:40 2025 GMT Subject: CN=68f463d0-98af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:c5:37:de:d9:f1:d2:b5:3b:e6:9f:0d:69: b0:b2:63:66:13:f5:0e:77:3e:8c:fd:c5:b8:4c:36: 85:bd:9e:b1:8b:32:8c:c8:7c:95:82:ee:eb:e4:11: 31:28:c8:94:b2:4d:9c:8e:6f:0c:bd:5d:ce:cc:a7: 0e:62:52:05:a9:4d:f8:a1:21:24:93:0b:60:43:1a: 31:51:6a:0b:b7:2b:8c:8f:db:ea:93:09:56:f1:9e: a8:aa:e7:80:52:92:67:ac:c9:e2:69:e0:dd:7d:59: bb:c4:5e:0b:d7:e8:72:25:03:1c:67:b5:13:f2:be: e5:eb:d7:12:ca:66:c0:05:ee:05:83:9c:fc:72:21: 28:b0:f1:ee:0b:82:3b:da:ae:ec:9d:b1:fa:d7:59: d9:d7:87:b2:6c:20:49:e1:bc:99:a1:15:3e:33:b1: 4a:b3:12:9b:d5:f7:22:f6:e5:45:2f:ea:1c:87:a4: fe:8c:97:da:e7:df:cf:54:1f:68:75:ec:81:e6:ef: 9e:28:02:66:ba:47:e6:b6:9b:87:50:84:54:20:93: 62:ed:43:31:83:8f:5d:81:2c:be:13:4e:f2:ac:cc: 3a:0b:6e:35:16:e7:54:ac:71:6a:98:29:fc:e3:e4: 17:96:04:02:09:06:3d:24:87:b6:99:f2:a3:66:d9: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:24:A9:13:1A:1B:73:05:5C:35:5F:AB:B2:EC:12:ED:14:32:0B X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5f:60:c8:2a:2f:e2:80:2a:c3:2b:7d:0d:10:e4:95:8c:fe: 23:11:0d:f6:39:25:07:f5:b0:53:52:be:84:2c:06:be:86:d5: fa:07:4a:e1:eb:6d:18:b5:1f:5d:89:96:06:9e:de:7b:59:59: e5:c6:52:0a:b3:57:35:cc:cb:c8:2e:8d:f5:f5:0b:41:ee:7c: e8:44:3b:e9:6c:68:02:fd:2e:61:19:b7:b3:5d:b0:f4:28:aa: 4c:e4:ef:5b:cf:66:36:8a:c5:29:9c:84:97:d9:40:a1:d7:e8: d1:80:3d:14:82:26:2b:ce:3e:a3:30:d2:2c:10:cf:e9:c6:66: b3:ff:ce:61:c4:c1:5a:cd:91:13:73:83:f4:1d:00:01:98:d0: d8:5b:bd:d8:1c:77:ef:be:9a:f1:d7:64:56:7f:87:cd:22:6f: 0d:bc:c6:9e:5e:3b:83:f5:49:ed:85:4e:9b:83:96:0c:37:2d: 85:84:df:1f:0c:02:95:90:30:6d:1f:90:3d:0b:23:71:4d:db: 38:6c:57:f5:1b:1d:3f:5b:f5:59:33:3f:42:0c:ee:bf:85:38: ea:3a:99:be:3c:0e:ca:0c:f0:12:c5:88:3c:dd:07:86:fa:ff: b1:e1:22:cc:5f:89:4e:35:0d:b8:60:9b:5e:ff:80:8e:70:13: 26:f1:c9:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjUxMDE5MDQwNjQwWhcNMjUxMDI2MDQwNjQwWjAYMRYwFAYD VQQDEw02OGY0NjNkMC05OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozbFN97Z8dK1O+afDWmwsmNmE/UOdz6M/cW4TDaFvZ6xizKMyHyVgu7r5BEx KMiUsk2cjm8MvV3OzKcOYlIFqU34oSEkkwtgQxoxUWoLtyuMj9vqkwlW8Z6oqueA UpJnrMniaeDdfVm7xF4L1+hyJQMcZ7UT8r7l69cSymbABe4Fg5z8ciEosPHuC4I7 2q7snbH611nZ14eybCBJ4byZoRU+M7FKsxKb1fci9uVFL+och6T+jJfa59/PVB9o deyB5u+eKAJmukfmtpuHUIRUIJNi7UMxg49dgSy+E07yrMw6C241FudUrHFqmCn8 4+QXlgQCCQY9JIe2mfKjZtkeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS/JKkT GhtzBVw1X6uy7BLtFDILMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChX2DIKi/igCrDK30NEOSVjP4jEQ32OSUH9bBTUr6ELAa+htX6B0rh 620YtR9diZYGnt57WVnlxlIKs1c1zMvILo319QtB7nzoRDvpbGgC/S5hGbezXbD0 KKpM5O9bz2Y2isUpnISX2UCh1+jRgD0UgiYrzj6jMNIsEM/pxmaz/85hxMFazZET c4P0HQABmNDYW73YHHfvvprx12RWf4fNIm8NvMaeXjuD9UnthU6bg5YMNy2FhN8f DAKVkDBtH5A9CyNxTds4bFf1Gx0/W/VZMz9CDO6/hTjqOpm+PA7KDPASxYg83QeG +v+x4SLMX4lONQ24YJte/4COcBMm8clQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:13 2025 by rpki-client