$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: hAsiaU1/PEX5Puks6+kUmCQ9JCJNVtj3rPwAxuFrK/c= Subject key identifier: C6:30:6B:1F:A3:0B:AE:9A:5E:E2:C6:CF:9E:ED:F1:7E:AF:61:A1:FB Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 0334 Signing time: Sun 19 Oct 2025 03:16:58 +0000 Manifest this update: Sun 19 Oct 2025 03:16:57 +0000 Manifest next update: Sun 26 Oct 2025 03:16:57 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: fb0KkEaQaOiApnF8dRfQeMpecBQbxUQxExELDLjF7z4=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Oct 19 03:16:57 2025 GMT Not After : Oct 26 03:16:57 2025 GMT Subject: CN=68f45829-7e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:00:f7:08:64:23:ab:23:5d:07:29:90:07: 9f:48:b3:82:fd:20:2d:8d:ae:f7:88:ef:9d:2d:b1: 0b:8e:78:63:95:7a:0b:ba:a4:06:dd:e0:3f:d3:c9: 92:29:ec:f2:4d:16:ed:4a:da:83:87:64:94:73:ef: da:39:62:0e:cb:47:fb:58:fd:31:3e:cf:b5:30:7e: 68:01:22:43:de:30:34:d9:1b:77:d3:e8:9e:2b:4d: 5f:66:56:dd:45:8e:44:e9:cd:e1:2c:33:ec:d3:86: ae:78:2f:95:22:df:6d:b1:74:56:50:41:61:d0:d5: de:2c:70:d4:80:37:0d:8c:24:bd:32:ec:e5:34:9f: 66:87:90:6b:09:11:e0:1e:bf:66:bd:e7:b6:d8:53: 98:fe:1b:1a:30:86:69:56:06:6d:e8:c8:a3:0e:a2: aa:50:d2:b7:08:e7:af:ab:ff:45:78:45:45:2c:4e: 35:9f:36:ef:fc:b7:ad:60:1b:a7:3a:e1:0b:ae:32: c1:bc:97:8b:bd:a6:e8:37:7e:88:41:90:d3:21:f7: a1:be:03:a8:3d:1c:7d:5a:15:6e:52:3a:6e:fe:e6: 1e:24:32:2f:9d:ab:9f:47:fd:fd:b7:25:30:be:fa: 3b:ad:0a:d4:8c:58:c6:ff:95:e6:f4:79:34:44:3b: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:30:6B:1F:A3:0B:AE:9A:5E:E2:C6:CF:9E:ED:F1:7E:AF:61:A1:FB X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:64:95:3d:7c:4f:9d:a2:6b:a0:98:d0:7d:4c:01:be:a6: 13:e5:3d:0c:fc:75:76:88:2d:4d:67:a2:b7:74:d4:02:57:77: 6b:a9:58:1c:7b:ea:71:3e:c9:8f:ed:4a:c0:ea:c7:28:10:f1: c1:6d:f0:e1:d5:d2:1e:ea:bf:03:67:dc:11:f2:86:1f:af:34: 70:af:2d:b1:17:63:13:b8:98:47:4f:37:1e:f1:6c:10:fd:0d: 71:74:1b:41:3a:fd:b4:7b:c1:59:3e:61:14:77:e1:71:52:45: 91:01:46:85:c5:ef:62:3d:c6:5a:35:0a:bf:a4:32:47:27:26: f7:15:fe:c2:5a:57:b9:7b:f9:ed:f7:7f:a7:2d:2b:d8:bc:87: 9a:d3:88:22:73:44:9a:4d:3c:5b:ad:7f:8e:4a:db:7a:37:20: 2a:ae:10:0e:a1:b7:87:05:6b:31:06:d0:1b:dd:d8:bd:ce:0a: e7:56:1e:7c:c1:72:46:03:99:d7:6d:67:a9:f5:3b:ea:77:b3: 12:9a:09:4a:6b:67:f1:ed:d6:a3:8d:64:98:37:fd:28:96:26: ef:69:eb:78:90:2f:13:c9:82:70:f1:03:3f:0a:9a:e8:df:c5: 24:a3:3b:7f:06:0a:9a:d0:d7:9b:07:88:a2:90:e6:e8:a0:c0: 00:3b:6c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUxMDE5MDMxNjU3WhcNMjUxMDI2MDMxNjU3WjAYMRYwFAYD VQQDEw02OGY0NTgyOS03ZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0UA9whkI6sjXQcpkAefSLOC/SAtja73iO+dLbELjnhjlXoLuqQG3eA/08mS KezyTRbtStqDh2SUc+/aOWIOy0f7WP0xPs+1MH5oASJD3jA02Rt30+ieK01fZlbd RY5E6c3hLDPs04aueC+VIt9tsXRWUEFh0NXeLHDUgDcNjCS9MuzlNJ9mh5BrCRHg Hr9mvee22FOY/hsaMIZpVgZt6MijDqKqUNK3COevq/9FeEVFLE41nzbv/LetYBun OuELrjLBvJeLvaboN36IQZDTIfehvgOoPRx9WhVuUjpu/uYeJDIvnaufR/39tyUw vvo7rQrUjFjG/5Xm9Hk0RDvIwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYwax+j C66aXuLGz57t8X6vYaH7MB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbpWSVPXxPnaJroJjQfUwBvqYT5T0M/HV2iC1NZ6K3dNQCV3drqVgc e+pxPsmP7UrA6scoEPHBbfDh1dIe6r8DZ9wR8oYfrzRwry2xF2MTuJhHTzce8WwQ /Q1xdBtBOv20e8FZPmEUd+FxUkWRAUaFxe9iPcZaNQq/pDJHJyb3Ff7CWle5e/nt 93+nLSvYvIea04gic0SaTTxbrX+OStt6NyAqrhAOobeHBWsxBtAb3di9zgrnVh58 wXJGA5nXbWep9Tvqd7MSmglKa2fx7dajjWSYN/0olibvaet4kC8TyYJw8QM/Cpro 38Ukozt/Bgqa0NebB4iikObooMAAO2y0 -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:00 2025 by rpki-client