$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: 7fANAW4t/8K/vXonXYqqm5Oosdx7cpr0ItGnrOAhdck= Subject key identifier: F7:3A:0E:2D:7B:A8:D6:86:8B:1A:43:BC:7E:A6:E4:3F:62:0A:AC:B2 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0CE4 Signing time: Sat 18 Oct 2025 18:51:19 +0000 Manifest this update: Sat 18 Oct 2025 18:51:18 +0000 Manifest next update: Sat 25 Oct 2025 18:51:18 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: lyXCURHjv3m3Ug+x6D4Nr+GtX2mK6MPbzh90Tj4uvbI=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Oct 18 18:51:18 2025 GMT Not After : Oct 25 18:51:18 2025 GMT Subject: CN=68f3e1a6-dcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:1a:28:e1:16:c4:b0:93:2a:9f:a8:ad:b0: f2:31:3c:fa:08:95:24:04:39:09:59:84:94:02:af: d4:08:50:df:7e:24:7f:d0:1c:70:13:22:b1:7c:d8: d5:89:5d:6a:14:f8:94:bf:51:c1:2c:e7:2d:6c:32: 23:34:f3:9d:a2:fb:22:69:a0:a6:26:be:c8:85:57: 06:d0:25:ff:3e:ad:ab:83:a9:04:3d:e0:ef:2d:ef: ba:ed:a1:0e:56:5c:c0:60:6c:97:96:bf:5c:5a:9f: 78:33:15:c9:2c:39:52:b4:ec:aa:8e:46:f8:63:9d: 6a:fe:63:92:92:ea:61:1c:40:4d:8c:a8:a7:ec:07: 80:53:fa:60:ed:dc:9c:9e:eb:8c:7b:da:41:c6:80: 8c:d1:4b:c1:fd:88:64:cd:1e:6c:e8:db:9e:62:0d: 08:76:d8:7a:4b:32:6f:00:43:85:d7:30:ef:c5:25: 65:f1:e3:7a:f4:de:f6:3e:93:db:21:3b:3a:01:12: bb:35:d0:88:8d:ce:b7:58:66:74:90:9c:3c:10:ba: be:37:35:6c:e7:39:1e:97:34:ad:e7:1a:20:53:e6: 80:9b:de:83:fc:22:ff:a8:ec:97:76:f9:1d:bb:51: 08:bf:16:f3:2f:fd:43:2e:be:a3:ef:aa:b5:ea:66: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3A:0E:2D:7B:A8:D6:86:8B:1A:43:BC:7E:A6:E4:3F:62:0A:AC:B2 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:14:53:f5:34:67:81:b3:7e:23:f5:2c:29:89:a0:6d:90:bc: 67:40:53:b3:5f:20:c5:27:e5:1c:a8:24:b3:df:11:dd:74:7d: e5:db:52:a1:e0:7e:dd:b1:36:e2:6a:c8:53:18:5c:dd:48:ce: c9:f9:44:85:33:ea:ea:7e:ff:51:b9:c2:98:02:7e:2d:fd:94: 4e:72:58:16:e9:4e:84:0c:0d:71:65:b8:9c:93:68:e3:c5:f9: 5c:a4:a0:65:c9:60:94:94:ad:ab:d0:4a:61:12:c0:cd:11:bf: 93:9b:fc:55:7e:c3:7f:a5:02:4a:82:d9:44:a9:64:0e:bb:d9: af:7b:2a:f5:0b:2a:83:f8:24:cf:a6:7d:8d:f0:2f:33:69:ba: 2f:7e:8c:a5:a4:ee:70:dd:c1:01:a7:13:18:cb:aa:9c:23:60: c6:4f:ab:d9:b9:2e:2e:8d:c6:92:11:50:7b:d2:f5:7a:c0:2d: 15:de:c1:b9:70:72:00:eb:85:4f:7d:ce:8f:52:52:ad:29:37: 11:c9:2f:52:70:a9:f7:b6:eb:d0:12:a6:0b:97:9a:80:ee:b5: 29:a0:59:85:57:48:0b:19:41:bf:1c:0c:74:54:16:bd:33:f5: 03:3e:63:1c:36:25:99:e4:af:3d:27:7e:64:5c:63:c1:a4:9d: a7:1d:f1:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUxMDE4MTg1MTE4WhcNMjUxMDI1MTg1MTE4WjAYMRYwFAYD VQQDEw02OGYzZTFhNi1kY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q0aKOEWxLCTKp+orbDyMTz6CJUkBDkJWYSUAq/UCFDffiR/0BxwEyKxfNjV iV1qFPiUv1HBLOctbDIjNPOdovsiaaCmJr7IhVcG0CX/Pq2rg6kEPeDvLe+67aEO VlzAYGyXlr9cWp94MxXJLDlStOyqjkb4Y51q/mOSkuphHEBNjKin7AeAU/pg7dyc nuuMe9pBxoCM0UvB/YhkzR5s6NueYg0Idth6SzJvAEOF1zDvxSVl8eN69N72PpPb ITs6ARK7NdCIjc63WGZ0kJw8ELq+NzVs5zkelzSt5xogU+aAm96D/CL/qOyXdvkd u1EIvxbzL/1DLr6j76q16maJuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc6Di17 qNaGixpDvH6m5D9iCqyyMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVFFP1NGeBs34j9SwpiaBtkLxnQFOzXyDFJ+UcqCSz3xHddH3l21Kh 4H7dsTbiashTGFzdSM7J+USFM+rqfv9RucKYAn4t/ZROclgW6U6EDA1xZbick2jj xflcpKBlyWCUlK2r0EphEsDNEb+Tm/xVfsN/pQJKgtlEqWQOu9mveyr1CyqD+CTP pn2N8C8zabovfoylpO5w3cEBpxMYy6qcI2DGT6vZuS4ujcaSEVB70vV6wC0V3sG5 cHIA64VPfc6PUlKtKTcRyS9ScKn3tuvQEqYLl5qA7rUpoFmFV0gLGUG/HAx0VBa9 M/UDPmMcNiWZ5K89J35kXGPBpJ2nHfGF -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:44 2025 by rpki-client