$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: xaeK0Tah8vfLd1Bc0VDL6hX0FlCeid7NWl3L+aQqbuc= Subject key identifier: 70:75:8E:AA:17:60:AA:67:EB:D1:89:05:A8:A9:E2:E4:14:D2:0A:E5 Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 07D1 Signing time: Sat 18 Oct 2025 22:28:34 +0000 Manifest this update: Sat 18 Oct 2025 22:28:34 +0000 Manifest next update: Sat 25 Oct 2025 22:28:34 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: 9/u5gOhuiR8L5ocW3KlOddCXxFK9AKcpxn4vPKSo/Nk=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: tku8g/IBMXsDJnLZ5j41i0Ddo6BJiQ1UMhvs9gK1Tr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Oct 18 22:28:34 2025 GMT Not After : Oct 25 22:28:34 2025 GMT Subject: CN=68f41492-2a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:56:09:b8:98:4f:76:19:39:8a:5b:59:3c: 95:d4:9f:65:a6:4b:8e:d5:08:b6:df:95:f9:57:78: dd:c8:87:0c:2d:31:fe:38:6a:f4:33:b6:a8:c5:4c: 87:88:b4:72:31:1a:a3:d9:11:99:01:6d:79:c8:93: d5:88:ad:0c:a6:c2:b2:5d:55:28:d9:2a:ab:2f:b7: 95:ec:85:93:6e:59:91:68:a3:2f:79:fc:0a:b3:b6: 76:fa:b4:a2:59:18:be:2b:2a:4b:55:ce:77:9e:cc: 95:92:10:05:1e:62:d8:3d:4d:f1:94:28:a9:fd:d2: 16:db:44:b7:14:0f:4e:37:e9:e5:f2:35:04:7b:9a: 9d:0d:ed:9d:25:81:35:4f:89:71:d6:8f:02:77:ba: d8:ee:4c:4b:23:5c:44:eb:8c:ae:c7:25:92:fe:5a: 7a:a2:36:83:90:7d:29:9c:5a:b0:76:13:8d:54:26: 80:22:b1:61:d2:62:87:75:88:6e:8b:b3:e2:72:53: 3d:2b:f0:65:d5:d9:9d:8e:46:50:27:62:0f:64:ff: de:7e:4a:47:fe:dd:18:45:82:df:cd:a7:7c:9d:dd: 54:f6:8c:4e:46:ec:e6:a0:47:87:d2:ab:3c:c0:39: 81:2a:e8:96:69:cf:05:b8:90:56:8e:ed:99:85:61: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:75:8E:AA:17:60:AA:67:EB:D1:89:05:A8:A9:E2:E4:14:D2:0A:E5 X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c9:7e:c3:d8:fe:e8:aa:19:52:b1:d8:f5:e0:44:22:6d:99: f1:d9:55:c4:fc:39:b0:eb:04:69:c8:e9:22:c7:c2:c7:f4:15: 3f:1b:cb:15:60:2c:d4:31:29:37:f4:62:a9:4d:e9:03:08:28: f5:01:ae:90:cd:59:12:5d:fd:be:ed:d0:86:7f:20:0b:22:de: 21:98:66:70:1f:bd:10:3d:08:1d:27:49:66:4e:b8:1a:f1:5f: b6:07:bb:f2:10:7b:70:2e:07:6a:73:65:ee:e1:34:45:2a:3a: 1a:c8:a9:ca:01:8f:26:93:5a:2f:e2:4c:f4:c1:e7:af:d3:ee: 93:2c:4d:e2:60:18:c1:e9:cf:52:e3:f2:27:24:58:8e:6f:cc: 7a:34:58:fe:e1:7c:ac:54:b2:c1:78:4a:cb:cb:f2:48:fa:3d: a1:51:6e:e4:83:d3:cb:87:b4:99:47:3a:f2:ff:ef:84:85:c9: 38:c3:ee:eb:ba:63:39:b9:a2:3f:25:70:e4:24:03:d3:11:cb: 72:eb:88:1f:d4:01:4f:06:09:c8:4d:49:61:71:9e:20:9a:43: f2:f0:1b:20:af:8d:f2:58:95:13:52:7f:ef:4c:25:2c:3b:bd: ba:3a:4f:c8:7c:35:d0:02:01:05:f6:e4:e4:69:ff:bb:42:57: a4:a9:3a:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjUxMDE4MjIyODM0WhcNMjUxMDI1MjIyODM0WjAYMRYwFAYD VQQDEw02OGY0MTQ5Mi0yYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR1WCbiYT3YZOYpbWTyV1J9lpkuO1Qi235X5V3jdyIcMLTH+OGr0M7aoxUyH iLRyMRqj2RGZAW15yJPViK0MpsKyXVUo2SqrL7eV7IWTblmRaKMvefwKs7Z2+rSi WRi+KypLVc53nsyVkhAFHmLYPU3xlCip/dIW20S3FA9ON+nl8jUEe5qdDe2dJYE1 T4lx1o8Cd7rY7kxLI1xE64yuxyWS/lp6ojaDkH0pnFqwdhONVCaAIrFh0mKHdYhu i7PiclM9K/Bl1dmdjkZQJ2IPZP/efkpH/t0YRYLfzad8nd1U9oxORuzmoEeH0qs8 wDmBKuiWac8FuJBWju2ZhWEk6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB1jqoX YKpn69GJBaip4uQU0grlMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJyX7D2P7oqhlSsdj14EQibZnx2VXE/Dmw6wRpyOkix8LH9BU/G8sV YCzUMSk39GKpTekDCCj1Aa6QzVkSXf2+7dCGfyALIt4hmGZwH70QPQgdJ0lmTrga 8V+2B7vyEHtwLgdqc2Xu4TRFKjoayKnKAY8mk1ov4kz0weev0+6TLE3iYBjB6c9S 4/InJFiOb8x6NFj+4XysVLLBeErLy/JI+j2hUW7kg9PLh7SZRzry/++Ehck4w+7r umM5uaI/JXDkJAPTEcty64gf1AFPBgnITUlhcZ4gmkPy8Bsgr43yWJUTUn/vTCUs O726Ok/IfDXQAgEF9uTkaf+7QlekqTpc -----END CERTIFICATE-----Generated at Mon Oct 20 19:41:08 2025 by rpki-client