$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: fKIURYti36Xq78vICEAjGXzPIhgxp52wc80v+G7j9es= Subject key identifier: BF:E2:83:48:42:E3:D3:D6:DD:16:48:DA:47:57:E5:C0:A3:B6:2E:26 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0181 Signing time: Sun 19 Oct 2025 06:14:36 +0000 Manifest this update: Sun 19 Oct 2025 06:14:36 +0000 Manifest next update: Sun 26 Oct 2025 06:14:36 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: i8KleInRnlGd1kipNxP+REKqL1PJxhVtaaCQu/6rA70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Oct 19 06:14:36 2025 GMT Not After : Oct 26 06:14:36 2025 GMT Subject: CN=68f481cc-361a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dd:e9:71:fa:37:3a:61:d9:21:2d:e1:6b:1f: 36:f1:bc:9f:6b:2d:33:50:ce:12:85:f5:8e:95:ee: e3:f0:33:f3:d7:57:a4:d4:7f:0f:9d:42:b3:1b:f1: b9:90:a6:19:7c:d9:f7:96:6e:c1:cc:c5:1a:50:96: 52:94:0e:8f:51:df:4f:7e:71:4d:31:55:53:f6:4e: 92:22:21:8b:04:73:44:44:4a:ae:25:66:a6:d3:61: 11:93:25:2a:bb:d3:36:5d:6e:1b:8e:75:fb:22:d2: 53:a2:c4:f6:5b:74:da:b2:6a:bc:3b:eb:9c:e1:e2: 53:03:3a:a1:de:c5:d1:2b:8f:0a:f3:cb:be:1f:8b: e2:3e:ba:1c:f9:9c:23:ed:88:e3:9e:bd:4c:95:28: 13:9f:62:bf:4d:bd:73:17:9c:ee:6c:6a:30:34:e6: a0:1a:9b:0e:d1:a4:8e:2f:f8:1d:bb:94:c0:17:40: 14:b5:da:f4:59:eb:8f:9f:c1:10:d6:d2:40:fe:76: bf:c8:58:e9:d8:56:74:fb:2e:dd:5f:70:f4:bc:20: 46:5a:de:5d:12:eb:20:53:c9:a9:f2:ad:c5:13:e9: 31:e4:2c:f1:9c:37:d6:92:52:2e:4e:0c:95:75:04: 0a:fb:90:3b:bf:44:a6:6f:72:df:f8:72:57:6b:4b: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E2:83:48:42:E3:D3:D6:DD:16:48:DA:47:57:E5:C0:A3:B6:2E:26 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:79:ec:59:37:39:12:49:c9:9d:1f:3f:24:90:0f:77:99:b6: e7:7e:f2:36:c4:1a:d9:dd:e1:ac:f6:0c:4f:e9:8d:38:cf:58: cc:48:7e:ab:0d:1b:1d:a0:5f:cb:5a:24:5e:ef:ae:f9:d6:fa: cc:a4:07:0f:15:12:9f:48:11:96:a6:b0:31:29:c1:5a:b8:99: ca:35:c5:b1:79:a2:6b:e9:86:c9:18:42:7e:22:73:7b:15:37: 4a:35:2d:41:4b:57:3d:38:a4:c1:e0:51:1f:ed:64:27:69:a8: 34:3f:8f:3e:f4:29:fe:99:c6:ca:c5:c0:1b:6d:d0:f5:b3:c3: 77:a4:02:29:ae:87:d0:70:9f:80:45:b1:b8:89:b8:df:6d:c7: c9:b9:7e:a7:06:4e:61:70:9a:9a:ac:51:f4:fe:14:18:9b:19: 4d:70:79:ff:59:c8:35:5a:7a:2e:61:71:91:92:81:c7:be:3f: 28:1c:9f:e6:5c:85:75:1d:88:3b:70:2b:54:88:3d:ed:3c:9e: 81:a0:72:8f:29:41:63:0d:47:a0:a9:dd:a3:c4:55:b1:87:f4: 94:a3:59:a7:43:36:07:a9:5a:c2:f4:7b:cd:e1:b6:4c:cf:e2: 87:d3:36:3f:24:fe:fb:f6:69:d7:89:95:b5:04:e9:c2:a5:07: d6:f9:82:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUxMDE5MDYxNDM2WhcNMjUxMDI2MDYxNDM2WjAYMRYwFAYD VQQDEw02OGY0ODFjYy0zNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl93pcfo3OmHZIS3hax828byfay0zUM4ShfWOle7j8DPz11ek1H8PnUKzG/G5 kKYZfNn3lm7BzMUaUJZSlA6PUd9PfnFNMVVT9k6SIiGLBHNEREquJWam02ERkyUq u9M2XW4bjnX7ItJTosT2W3Tasmq8O+uc4eJTAzqh3sXRK48K88u+H4viProc+Zwj 7Yjjnr1MlSgTn2K/Tb1zF5zubGowNOagGpsO0aSOL/gdu5TAF0AUtdr0WeuPn8EQ 1tJA/na/yFjp2FZ0+y7dX3D0vCBGWt5dEusgU8mp8q3FE+kx5CzxnDfWklIuTgyV dQQK+5A7v0Smb3Lf+HJXa0tCtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/ig0hC 49PW3RZI2kdX5cCjti4mMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzeexZNzkSScmdHz8kkA93mbbnfvI2xBrZ3eGs9gxP6Y04z1jMSH6r DRsdoF/LWiRe76751vrMpAcPFRKfSBGWprAxKcFauJnKNcWxeaJr6YbJGEJ+InN7 FTdKNS1BS1c9OKTB4FEf7WQnaag0P48+9Cn+mcbKxcAbbdD1s8N3pAIprofQcJ+A RbG4ibjfbcfJuX6nBk5hcJqarFH0/hQYmxlNcHn/Wcg1WnouYXGRkoHHvj8oHJ/m XIV1HYg7cCtUiD3tPJ6BoHKPKUFjDUegqd2jxFWxh/SUo1mnQzYHqVrC9HvN4bZM z+KH0zY/JP779mnXiZW1BOnCpQfW+YKE -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:57 2025 by rpki-client