$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: CWDnKWX+ibL2zL2uNtKy6Ad+A88odJdAcpkCrhQbnzs= Subject key identifier: 89:05:2E:0D:7A:AC:73:08:04:D4:E8:51:F7:CD:3A:BC:0F:B6:E6:8B Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: 0122 Signing time: Sun 19 Oct 2025 07:33:14 +0000 Manifest this update: Sun 19 Oct 2025 07:33:14 +0000 Manifest next update: Sun 26 Oct 2025 07:33:14 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: Pbo+g+oVcVcIuw/etRQTdInPXxSNVQ9bHI71xgUT4R4=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: zOrZe+jWeFBIsL39iLL8vvCILEMIHLBZ3vsTVrAh2HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: Oct 19 07:33:14 2025 GMT Not After : Oct 26 07:33:14 2025 GMT Subject: CN=68f4943a-e828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:d3:3e:a7:51:c3:d2:57:c0:7e:8a:c0:62: bb:36:26:d1:25:d5:6d:f5:ad:de:c3:ac:30:d3:ea: 97:8d:65:e0:c6:3f:bf:4d:e5:e8:94:fe:0b:4b:32: 89:1c:e7:ae:ce:a6:d0:7a:58:c0:3c:a5:75:d7:e4: 12:89:d1:dc:09:d3:22:aa:1f:d6:ca:ce:e5:6d:46: 4a:8c:ab:53:0c:15:2a:b1:02:29:9f:05:95:64:7a: 40:a1:d0:6a:a3:6b:80:f2:c9:85:10:61:f2:81:3e: 57:19:c0:30:e9:2c:0d:65:28:47:ee:57:f2:09:6f: 82:ad:69:eb:06:db:ee:73:ef:c8:80:05:52:04:3d: d8:ba:6e:58:05:9d:46:12:ee:d1:85:2a:67:e5:b4: 5e:80:5c:bb:c6:e4:29:fb:8d:ef:36:79:54:19:a8: 59:7a:60:6f:c8:12:3c:87:d0:2f:98:90:09:24:20: 02:18:cf:a5:84:9d:75:ea:bd:95:d9:4d:36:8d:f6: f4:dc:6d:82:c8:92:c8:46:16:b2:11:b3:3b:51:47: 81:7c:31:81:fa:86:a4:05:56:3c:53:ce:98:3e:a2: 7e:65:c0:57:7a:f0:dc:a5:86:f2:2b:91:49:5c:95: 83:b6:db:67:f8:f4:88:2f:40:d6:8a:40:3a:d9:fe: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:05:2E:0D:7A:AC:73:08:04:D4:E8:51:F7:CD:3A:BC:0F:B6:E6:8B X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:54:b5:65:f5:59:36:ac:26:f0:40:26:b5:95:e8:57:b6:37: 14:c0:48:ee:42:b1:8c:8f:a2:28:d0:cf:fd:ad:17:c5:64:8b: 29:88:6b:43:e7:33:83:f8:91:f3:4d:21:4d:13:dc:7d:56:39: d4:a8:4b:aa:ba:68:55:a0:ee:23:1d:53:c5:34:cd:10:08:50: 19:e9:54:36:2e:1a:d8:2f:2e:95:42:38:68:6b:ba:f9:00:b7: bf:cd:bc:74:5d:19:88:d7:01:a8:0b:52:14:a0:05:0f:2c:49: 3e:6f:78:9c:57:07:3a:8c:c3:bd:04:24:71:9c:17:87:93:c2: 05:b6:54:98:2c:67:cb:71:3b:1d:35:18:12:42:5b:4e:c7:24: 34:bf:a8:44:f7:87:56:ed:76:dd:1c:8c:d4:af:a2:c5:ed:3b: 54:25:b6:b7:a5:4b:d3:cb:6c:2b:8b:71:e0:27:51:b0:da:ab: b0:6e:f6:06:f7:ea:bc:52:69:00:b0:72:3c:4b:16:df:0e:a4: d1:18:52:d3:7d:7d:e5:40:e6:54:22:1a:eb:37:4a:f5:48:ea: f2:9a:11:8f:28:08:68:6a:6d:f5:78:46:f7:d5:03:76:c4:c2: 31:9a:7c:17:97:3f:79:52:1c:0a:26:64:f0:bc:f0:35:82:6d: 80:5f:1b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjUxMDE5MDczMzE0WhcNMjUxMDI2MDczMzE0WjAYMRYwFAYD VQQDEw02OGY0OTQzYS1lODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ObTPqdRw9JXwH6KwGK7NibRJdVt9a3ew6ww0+qXjWXgxj+/TeXolP4LSzKJ HOeuzqbQeljAPKV11+QSidHcCdMiqh/Wys7lbUZKjKtTDBUqsQIpnwWVZHpAodBq o2uA8smFEGHygT5XGcAw6SwNZShH7lfyCW+CrWnrBtvuc+/IgAVSBD3Yum5YBZ1G Eu7RhSpn5bRegFy7xuQp+43vNnlUGahZemBvyBI8h9AvmJAJJCACGM+lhJ116r2V 2U02jfb03G2CyJLIRhayEbM7UUeBfDGB+oakBVY8U86YPqJ+ZcBXevDcpYbyK5FJ XJWDtttn+PSIL0DWikA62f791wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkFLg16 rHMIBNToUffNOrwPtuaLMB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeVLVl9Vk2rCbwQCa1lehXtjcUwEjuQrGMj6Io0M/9rRfFZIspiGtD 5zOD+JHzTSFNE9x9VjnUqEuqumhVoO4jHVPFNM0QCFAZ6VQ2LhrYLy6VQjhoa7r5 ALe/zbx0XRmI1wGoC1IUoAUPLEk+b3icVwc6jMO9BCRxnBeHk8IFtlSYLGfLcTsd NRgSQltOxyQ0v6hE94dW7XbdHIzUr6LF7TtUJba3pUvTy2wri3HgJ1Gw2quwbvYG 9+q8UmkAsHI8SxbfDqTRGFLTfX3lQOZUIhrrN0r1SOrymhGPKAhoam31eEb31QN2 xMIxmnwXlz95UhwKJmTwvPA1gm2AXxud -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:56 2025 by rpki-client