$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: 6GzqftYh/qceDH09asWEzRRnF3elT6VpqMM29OlNF/g= Subject key identifier: 31:03:D4:CD:FF:F4:B0:35:2D:AE:02:27:C6:51:5C:A5:D0:86:37:EC Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 0842 Signing time: Sat 18 Oct 2025 21:57:24 +0000 Manifest this update: Sat 18 Oct 2025 21:57:23 +0000 Manifest next update: Sat 25 Oct 2025 21:57:23 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: m3wzcegYNFTxFtvlqVSIMlkL6pm+r189hyG1lJfBOag=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Oct 18 21:57:23 2025 GMT Not After : Oct 25 21:57:23 2025 GMT Subject: CN=68f40d43-344a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:fe:56:a1:e7:5b:1a:bb:d9:e5:f4:62:a9: 6f:23:f6:2f:fc:ec:da:aa:34:dd:20:93:f3:bb:00: c9:66:0d:8b:5a:fb:39:84:9b:52:11:c6:0a:18:37: 7c:0c:15:bb:da:35:de:48:99:85:ba:1b:cf:14:6f: 59:ac:61:24:50:7e:e5:b4:58:21:0a:e3:a0:9e:4e: 8d:89:4a:77:ec:e3:c8:ef:81:d0:05:bb:77:06:98: 92:ba:84:ac:51:35:a3:20:8e:b1:53:2a:98:d3:36: 53:91:c4:35:fc:54:49:3e:d6:fc:86:3f:cf:f8:a2: fe:2d:e3:98:e8:17:a6:e3:0f:fc:65:6b:9b:c2:22: 9a:37:75:b2:eb:e1:ed:cd:7c:1f:9d:ba:ba:cf:ed: fb:99:28:4b:98:3a:44:50:6b:36:17:41:cb:e1:b9: 39:03:7f:a3:4d:a3:98:a9:01:66:db:01:26:24:b6: 2a:92:c1:16:77:3b:ff:5c:cc:9e:82:ee:32:77:62: 67:90:e3:39:59:6a:bc:d1:88:40:af:85:48:71:45: 4d:5e:ac:1b:20:f6:ba:98:ed:cc:ad:0c:2a:ce:7d: d6:e3:df:aa:a4:f4:98:1c:62:5f:30:a0:41:fa:29: 1c:31:7c:d2:f1:78:06:8c:5f:3d:ae:04:5b:b9:3e: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:03:D4:CD:FF:F4:B0:35:2D:AE:02:27:C6:51:5C:A5:D0:86:37:EC X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0e:cf:2d:cc:ed:0c:a7:cc:c9:19:52:52:a7:1b:88:d8:54: 5e:46:3b:a1:88:03:0f:25:e8:89:3c:bd:8b:fc:f4:3f:7d:3d: dd:58:2c:75:5c:fe:51:c6:d9:a0:49:fc:71:f5:b3:ac:b7:b2: 80:c3:ce:7a:a2:af:50:63:1d:1a:e8:cf:13:37:c3:0e:4e:12: 13:3f:14:c6:96:c5:3c:59:14:66:aa:30:83:c8:9c:39:f4:f3: 4d:75:3c:e7:32:f6:4d:79:75:fe:93:30:0f:6f:04:7b:f2:a8: 06:59:f8:2a:7a:fd:6a:98:ca:43:02:80:78:22:bd:20:68:0d: 62:5f:9b:51:7d:e4:d8:95:00:fa:a8:fc:02:3f:ad:6e:6e:fd: 47:a1:dc:a3:e8:91:5e:23:af:bf:dd:47:57:bb:df:41:92:28: ed:32:04:a0:13:a9:2f:72:75:12:c3:af:1f:a6:77:f2:3c:9c: 0f:65:eb:20:12:3c:6b:94:57:bb:c0:c9:2e:08:e1:a4:9d:2d: 45:ab:90:0a:81:b5:02:ea:50:2c:17:10:23:fb:18:e1:6a:81: ae:10:56:d8:34:a0:d1:6d:cc:7a:c6:84:64:8d:d0:d5:76:73: 9a:10:12:1a:7a:c9:c4:26:e5:e0:ab:ee:fa:7e:83:f9:cf:ae: 52:3f:ff:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUxMDE4MjE1NzIzWhcNMjUxMDI1MjE1NzIzWjAYMRYwFAYD VQQDEw02OGY0MGQ0My0zNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfv+VqHnWxq72eX0YqlvI/Yv/OzaqjTdIJPzuwDJZg2LWvs5hJtSEcYKGDd8 DBW72jXeSJmFuhvPFG9ZrGEkUH7ltFghCuOgnk6NiUp37OPI74HQBbt3BpiSuoSs UTWjII6xUyqY0zZTkcQ1/FRJPtb8hj/P+KL+LeOY6Bem4w/8ZWubwiKaN3Wy6+Ht zXwfnbq6z+37mShLmDpEUGs2F0HL4bk5A3+jTaOYqQFm2wEmJLYqksEWdzv/XMye gu4yd2JnkOM5WWq80YhAr4VIcUVNXqwbIPa6mO3MrQwqzn3W49+qpPSYHGJfMKBB +ikcMXzS8XgGjF89rgRbuT5pIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDED1M3/ 9LA1La4CJ8ZRXKXQhjfsMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Ds8tzO0Mp8zJGVJSpxuI2FReRjuhiAMPJeiJPL2L/PQ/fT3dWCx1 XP5RxtmgSfxx9bOst7KAw856oq9QYx0a6M8TN8MOThITPxTGlsU8WRRmqjCDyJw5 9PNNdTznMvZNeXX+kzAPbwR78qgGWfgqev1qmMpDAoB4Ir0gaA1iX5tRfeTYlQD6 qPwCP61ubv1Hodyj6JFeI6+/3UdXu99BkijtMgSgE6kvcnUSw68fpnfyPJwPZesg EjxrlFe7wMkuCOGknS1Fq5AKgbUC6lAsFxAj+xjhaoGuEFbYNKDRbcx6xoRkjdDV dnOaEBIaesnEJuXgq+76foP5z65SP/86 -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:40 2025 by rpki-client