$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft File: jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json) Hash identifier: MU04VazCzaSYMpcgtWQuoEgyx/m6a71iOCBVN+h4WBo= Subject key identifier: B1:FD:B1:5A:A9:7D:14:AA:E5:1F:D2:A9:5A:47:D2:C6:93:EB:FD:E6 Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft Manifest number: 0423 Signing time: Sun 19 Oct 2025 00:46:27 +0000 Manifest this update: Sun 19 Oct 2025 00:46:27 +0000 Manifest next update: Sun 26 Oct 2025 00:46:27 +0000 Files and hashes: 1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: y+ztrFd+blbDwFsD+vFac1+I4SQDyo5x0JvlryXjsjE=) 2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: 6vANpzfgkdA95BOGghUjzousLRYpV7ZyXI+Ad3LxlZE=) 3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: ucXZf4eu0/AY5wwnvuYXaUOhU2IDoNXJmo5ZEBv0MfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Validity Not Before: Oct 19 00:46:27 2025 GMT Not After : Oct 26 00:46:27 2025 GMT Subject: CN=68f434e3-f02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:60:5e:fb:b8:b0:f6:33:d3:d0:01:81:2d: 59:d0:90:92:4b:74:3f:98:a4:b8:b6:21:f5:b5:03: b7:f4:16:1a:99:63:ab:66:b5:48:b9:e4:03:64:25: 11:97:c9:1a:5c:89:58:06:83:d1:96:14:d7:b7:3a: da:46:6f:3f:6d:ff:27:aa:5c:bb:0a:f3:8a:a3:1c: 5d:82:fd:7e:5b:14:b5:52:20:4a:9f:ab:e6:db:51: f5:7f:c3:28:b6:88:90:83:fc:a5:4c:de:13:c8:87: ac:46:34:d3:ea:7a:de:91:34:13:3c:45:32:d5:8d: 4c:34:ea:56:2e:c3:8f:f4:76:33:72:6e:89:4f:f5: c0:0f:b6:f8:d2:2e:a6:a8:2e:aa:22:2c:cb:bb:03: 63:b0:07:17:0d:f9:12:bb:d2:fb:7c:19:c3:d8:bc: 61:f2:d0:cf:b5:c4:70:3b:44:41:12:b8:67:9a:c3: da:eb:40:d7:be:40:82:e5:6d:03:f1:52:48:83:1a: 78:ce:20:61:37:f6:1f:96:f7:fe:57:01:a1:d2:48: 0b:d6:6c:2c:40:ff:f1:af:30:bb:ec:f1:19:93:66: dc:63:34:d6:5b:18:f4:e8:ea:37:5e:73:2a:02:fe: d4:76:4d:8d:09:57:b0:46:de:a3:8d:4a:2a:93:00: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:B1:5A:A9:7D:14:AA:E5:1F:D2:A9:5A:47:D2:C6:93:EB:FD:E6 X509v3 Authority Key Identifier: keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:42:c7:8d:86:1f:fe:59:d8:20:fd:d0:85:68:21:6f:e8:a1: 6b:bd:22:10:a0:2c:0d:8e:f8:e8:6a:ba:f2:e8:26:09:3c:10: 24:24:1b:63:20:17:96:b8:3f:51:84:23:46:9c:0f:5d:e3:90: dd:f5:11:e4:24:1b:ae:36:5d:df:cc:85:cc:bd:b7:36:69:a5: 11:95:71:27:5f:1c:c4:05:f1:73:02:67:60:c3:40:da:27:7b: 8c:46:10:aa:7f:9a:f7:de:2e:73:bb:c6:3e:61:92:77:9a:46: 2b:57:7b:2c:17:5a:00:c1:b9:be:e0:7a:77:34:61:7d:a7:eb: 88:5e:a1:0d:38:68:b8:c8:fe:55:7a:51:93:dd:33:43:b6:40: 3c:f6:08:6f:77:58:f7:e5:b0:d7:05:e1:ee:ee:ff:d5:f5:3b: 80:e9:e1:cf:fe:60:a2:ac:be:3f:b6:fc:af:3c:c5:f1:7b:55: 42:d9:d5:16:0b:fc:6f:1a:66:3c:c9:59:5f:f0:a7:12:75:ed: a6:9b:8b:96:df:1e:99:c2:e7:bf:f4:91:13:64:67:c5:0c:3c: c7:16:3e:91:e2:db:86:7e:fb:e0:23:05:3d:8f:76:bd:99:4f: f2:21:7a:c7:1a:f0:00:88:fc:5c:65:30:56:2d:81:4e:fc:02: 66:3f:21:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0 MEJBRDNBREUwHhcNMjUxMDE5MDA0NjI3WhcNMjUxMDI2MDA0NjI3WjAYMRYwFAYD VQQDEw02OGY0MzRlMy1mMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QhgXvu4sPYz09ABgS1Z0JCSS3Q/mKS4tiH1tQO39BYamWOrZrVIueQDZCUR l8kaXIlYBoPRlhTXtzraRm8/bf8nqly7CvOKoxxdgv1+WxS1UiBKn6vm21H1f8Mo toiQg/ylTN4TyIesRjTT6nrekTQTPEUy1Y1MNOpWLsOP9HYzcm6JT/XAD7b40i6m qC6qIizLuwNjsAcXDfkSu9L7fBnD2Lxh8tDPtcRwO0RBErhnmsPa60DXvkCC5W0D 8VJIgxp4ziBhN/Yflvf+VwGh0kgL1mwsQP/xrzC77PEZk2bcYzTWWxj06Oo3XnMq Av7Udk2NCVewRt6jjUoqkwCm9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH9sVqp fRSq5R/SqVpH0saT6/3mMB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4 ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS9BNDZCRTU4ODg4ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgx d3RaanNLYWhDODFBdXRPdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLQseNhh/+Wdgg/dCFaCFv6KFrvSIQoCwNjvjoarry6CYJPBAkJBtj IBeWuD9RhCNGnA9d45Dd9RHkJBuuNl3fzIXMvbc2aaURlXEnXxzEBfFzAmdgw0Da J3uMRhCqf5r33i5zu8Y+YZJ3mkYrV3ssF1oAwbm+4Hp3NGF9p+uIXqENOGi4yP5V elGT3TNDtkA89ghvd1j35bDXBeHu7v/V9TuA6eHP/mCirL4/tvyvPMXxe1VC2dUW C/xvGmY8yVlf8KcSde2mm4uW3x6Zwue/9JETZGfFDDzHFj6R4tuGfvvgIwU9j3a9 mU/yIXrHGvAAiPxcZTBWLYFO/AJmPyEt -----END CERTIFICATE-----Generated at Mon Oct 20 05:47:21 2025 by rpki-client