$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: ndekZN6PK/RAoLSwi5RukxKgVWQH1bWCDJmpchq4NgM= Subject key identifier: 63:79:F5:5D:56:13:49:FA:5D:65:B3:14:92:FC:CC:9C:EF:46:F5:C8 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0E15 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0E01 Signing time: Mon 20 Oct 2025 14:44:48 +0000 Manifest this update: Mon 20 Oct 2025 14:44:47 +0000 Manifest next update: Mon 27 Oct 2025 14:44:47 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: Zu4h+6WO1NPer53z/hyNcuiRXByi6H77hFrB8pWSBpM=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3605 (0xe15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Oct 20 14:44:47 2025 GMT Not After : Oct 27 14:44:47 2025 GMT Subject: CN=68f64adf-81c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:bf:06:2f:fb:84:eb:62:5d:d2:16:e2:11: 02:bc:e9:54:99:72:16:1d:9a:50:cd:53:15:69:38: 89:9b:6e:d0:71:78:9d:d4:59:1f:74:5c:fd:a9:e0: de:17:08:88:ea:54:20:28:3c:62:39:e2:2d:cb:23: 4c:0b:9f:a4:f2:e2:7a:aa:b4:a7:7b:e6:3d:f5:7b: 24:58:cf:a8:cd:fd:c1:3e:1d:75:b1:5e:66:c3:b1: 26:9f:14:8c:c0:c1:ee:46:0d:ad:cd:f2:d9:9b:62: da:58:7f:85:32:a4:09:9f:cc:bb:47:99:30:92:90: 7f:56:f9:37:ed:8e:59:48:a6:22:10:c7:ff:cd:80: 2d:f5:45:0f:c7:07:1f:75:f4:80:1d:18:4f:ed:3a: b9:93:7c:3c:62:18:4e:76:da:f1:82:5f:b3:ee:d3: 5c:00:31:b0:ab:cc:4a:f1:db:f4:f1:09:c0:f9:3b: bc:36:23:05:c1:d0:6c:ca:6c:f9:35:05:c7:94:10: 5c:e0:78:e5:8a:b2:8a:b6:8d:9f:26:0b:22:aa:b3: 2d:36:f8:a9:54:11:7d:c3:9f:f8:77:12:8b:ee:4e: e1:47:74:01:6d:c2:11:50:1a:82:7d:94:99:8c:15: 01:5c:0f:e4:ac:e6:8c:7c:61:9d:74:60:a8:bb:4e: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:F5:5D:56:13:49:FA:5D:65:B3:14:92:FC:CC:9C:EF:46:F5:C8 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:80:e2:20:d3:d1:12:39:1b:41:6a:07:86:17:7e:9c:9c:c2: 90:fb:5b:71:f4:79:6d:4e:ef:48:73:00:4d:12:4d:6f:ac:3f: bd:54:1c:d2:84:26:cc:ba:40:e6:5b:fc:b6:f4:98:a5:fc:6e: 43:ea:ed:3b:fc:67:b9:ae:8a:a0:41:26:32:3f:b3:d0:fc:ed: b6:91:2f:b6:7d:25:b3:b4:16:e8:06:4d:ca:0d:c2:34:64:19: 40:81:fe:24:6c:a1:64:e2:76:82:e1:9b:96:cf:d3:12:c8:ec: 3a:a7:b9:54:56:68:c5:c8:1c:e0:46:46:04:6d:93:d0:74:1f: 96:5b:93:0d:3b:de:b9:b0:f8:c1:33:82:dc:fd:5a:e2:2e:ec: d8:1c:ff:d6:6b:d9:58:9a:98:6a:a7:5e:84:4c:66:7a:55:ac: e5:c7:3c:5e:f0:26:d8:f6:5c:22:68:c9:a8:8b:b9:0a:34:95: 2c:f2:56:8e:ce:b8:ec:b6:62:a3:e5:71:63:c5:aa:83:f1:d9: 6b:71:00:55:28:e7:18:2e:2d:3d:2d:35:a0:4f:60:bf:4d:64: be:ef:3d:22:fb:fa:2b:ee:ab:89:be:50:11:17:15:d2:81:16: 61:c2:f9:1d:7f:bf:c5:3d:37:45:a2:43:23:a3:41:7f:0a:4f: ef:0a:f4:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUxMDIwMTQ0NDQ3WhcNMjUxMDI3MTQ0NDQ3WjAYMRYwFAYD VQQDEw02OGY2NGFkZi04MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ+/Bi/7hOtiXdIW4hECvOlUmXIWHZpQzVMVaTiJm27QcXid1FkfdFz9qeDe FwiI6lQgKDxiOeItyyNMC5+k8uJ6qrSne+Y99XskWM+ozf3BPh11sV5mw7EmnxSM wMHuRg2tzfLZm2LaWH+FMqQJn8y7R5kwkpB/Vvk37Y5ZSKYiEMf/zYAt9UUPxwcf dfSAHRhP7Tq5k3w8YhhOdtrxgl+z7tNcADGwq8xK8dv08QnA+Tu8NiMFwdBsymz5 NQXHlBBc4HjlirKKto2fJgsiqrMtNvipVBF9w5/4dxKL7k7hR3QBbcIRUBqCfZSZ jBUBXA/krOaMfGGddGCou06CtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN59V1W E0n6XWWzFJL8zJzvRvXIMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAggOIg09ESORtBageGF36cnMKQ+1tx9HltTu9IcwBNEk1vrD+9VBzS hCbMukDmW/y29Jil/G5D6u07/Ge5roqgQSYyP7PQ/O22kS+2fSWztBboBk3KDcI0 ZBlAgf4kbKFk4naC4ZuWz9MSyOw6p7lUVmjFyBzgRkYEbZPQdB+WW5MNO965sPjB M4Lc/VriLuzYHP/Wa9lYmphqp16ETGZ6Vazlxzxe8CbY9lwiaMmoi7kKNJUs8laO zrjstmKj5XFjxaqD8dlrcQBVKOcYLi09LTWgT2C/TWS+7z0i+/or7quJvlARFxXS gRZhwvkdf7/FPTdFokMjo0F/Ck/vCvQV -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:02 2025 by rpki-client