$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: 6WeW5oaWXjxfSvS/H7i+P1vQYQbmWmIyXem1zePzrbo= Subject key identifier: 56:2D:61:D1:C6:B9:9E:55:EF:E0:2D:3D:79:07:7D:C9:E4:D1:03:99 Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 0550 Signing time: Sun 19 Oct 2025 01:09:14 +0000 Manifest this update: Sun 19 Oct 2025 01:09:13 +0000 Manifest next update: Sun 26 Oct 2025 01:09:13 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: nW+RR400nyUIEqa44JE5pEEeC7PvR1gvn7X6s+WCC2Y=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Oct 19 01:09:13 2025 GMT Not After : Oct 26 01:09:13 2025 GMT Subject: CN=68f43a3a-15c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:c8:1f:12:ea:b7:88:7e:76:28:77:c5:b3: 34:b9:26:73:6b:30:19:74:65:4e:35:4e:9f:57:3a: 7b:57:42:15:38:10:52:38:ce:33:04:7b:ba:d2:f9: 19:f7:a9:91:f3:94:db:09:f2:61:e1:f7:7a:89:d2: 1b:73:19:9e:54:f4:62:b0:c0:81:f7:4f:95:15:9f: d8:60:40:10:e5:eb:7f:93:67:b4:00:82:d0:4c:05: 54:65:e3:a8:3b:be:4f:c2:ce:05:79:ff:11:32:c6: 67:69:c9:30:97:19:2e:c2:8f:80:d3:2a:72:d8:68: 0b:0e:4a:78:f2:b5:9e:de:3e:34:8b:33:52:e5:4e: d3:18:25:10:c9:5e:67:31:bf:9c:08:1c:40:90:33: bf:1f:0a:98:0e:26:12:59:60:e7:d8:e5:a8:63:26: 56:2b:63:15:5a:1d:3a:1b:0e:95:07:c7:9d:b8:ac: 91:07:10:90:06:10:f6:ae:79:e3:46:74:e6:52:33: 7f:e3:cd:87:2a:47:5b:e0:e8:0c:62:6d:f1:4a:6d: b7:ef:0f:89:27:f4:4f:77:b7:38:96:11:6c:68:44: c1:29:ef:1e:66:3f:b6:e7:f1:c1:0d:2f:03:81:12: 2b:34:c1:72:d3:85:db:db:03:e6:80:c8:2a:bb:9d: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:61:D1:C6:B9:9E:55:EF:E0:2D:3D:79:07:7D:C9:E4:D1:03:99 X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:30:5d:5e:dc:bf:99:75:cb:17:9b:cc:d5:4c:f6:9c:a3: 10:9b:6c:c0:e9:6e:c0:a5:c2:7d:98:f2:bb:bf:5e:a2:de:3a: 5a:97:0f:78:e6:f7:f6:11:40:ac:ce:45:4b:32:a6:ca:2c:e7: 74:17:86:33:3b:8e:ae:d6:d3:f7:87:6a:d0:58:ec:6d:f1:9e: 52:1d:c0:23:3c:9f:b7:17:c4:3e:6b:90:44:7a:0a:72:e1:f2: 97:12:16:77:5e:c8:87:1b:4c:d9:43:8b:1f:43:df:43:89:28: d3:d0:a5:c7:e7:33:83:09:ea:3d:4a:28:66:9f:f2:12:f2:bf: fb:4e:9f:9c:a7:35:56:50:92:96:09:45:7f:42:cf:7d:b0:39: 0b:16:1c:e1:12:47:06:eb:54:a9:0c:18:f6:e2:c4:12:d4:9f: 71:96:d3:a1:5b:96:ec:fa:1f:79:02:42:b2:b3:0b:e2:f0:28: 19:07:24:21:8b:23:bb:bb:72:66:0a:19:45:c0:a6:e8:25:0d: 43:57:84:03:6a:79:c3:e6:7b:7b:ef:50:aa:34:54:1f:d1:d7: 04:ab:02:59:09:80:bb:23:5f:f9:ca:12:e3:b1:37:69:bd:00: 72:51:4f:dd:0c:ff:d0:d4:24:39:66:ab:dc:de:76:f9:21:4e: 17:61:e3:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjUxMDE5MDEwOTEzWhcNMjUxMDI2MDEwOTEzWjAYMRYwFAYD VQQDEw02OGY0M2EzYS0xNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubDIHxLqt4h+dih3xbM0uSZzazAZdGVONU6fVzp7V0IVOBBSOM4zBHu60vkZ 96mR85TbCfJh4fd6idIbcxmeVPRisMCB90+VFZ/YYEAQ5et/k2e0AILQTAVUZeOo O75Pws4Fef8RMsZnackwlxkuwo+A0ypy2GgLDkp48rWe3j40izNS5U7TGCUQyV5n Mb+cCBxAkDO/HwqYDiYSWWDn2OWoYyZWK2MVWh06Gw6VB8eduKyRBxCQBhD2rnnj RnTmUjN/482HKkdb4OgMYm3xSm237w+JJ/RPd7c4lhFsaETBKe8eZj+25/HBDS8D gRIrNMFy04Xb2wPmgMgqu5368wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYtYdHG uZ5V7+AtPXkHfcnk0QOZMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvDDBdXty/mXXLF5vM1Uz2nKMQm2zA6W7ApcJ9mPK7v16i3jpalw94 5vf2EUCszkVLMqbKLOd0F4YzO46u1tP3h2rQWOxt8Z5SHcAjPJ+3F8Q+a5BEegpy 4fKXEhZ3XsiHG0zZQ4sfQ99DiSjT0KXH5zODCeo9Sihmn/IS8r/7Tp+cpzVWUJKW CUV/Qs99sDkLFhzhEkcG61SpDBj24sQS1J9xltOhW5bs+h95AkKyswvi8CgZByQh iyO7u3JmChlFwKboJQ1DV4QDannD5nt771CqNFQf0dcEqwJZCYC7I1/5yhLjsTdp vQByUU/dDP/Q1CQ5Zqvc3nb5IU4XYeNC -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:42 2025 by rpki-client