$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: j5Uh2qh6M+Lmkp8qgHgVOVbdxokJrxPVrFVdB4svPgw= Subject key identifier: 73:2A:F2:97:A5:5A:47:CE:E3:5A:37:52:BC:33:5D:09:AA:33:8A:C6 Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 019F Signing time: Sat 18 Oct 2025 20:51:26 +0000 Manifest this update: Sat 18 Oct 2025 20:51:26 +0000 Manifest next update: Sat 25 Oct 2025 20:51:26 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: +KzoKy5Mgi82/khSCh9L2dbwnaMIkT3oyCIo9nSizdY=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: iTrEAAlkJw9OclXVQcOsLhF2OGcA/o+GNahTLZ1PRQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Oct 18 20:51:26 2025 GMT Not After : Oct 25 20:51:26 2025 GMT Subject: CN=68f3fdce-cf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c6:04:71:a1:53:12:0c:1b:e9:2c:6b:8f:67: 26:bf:6c:cc:a5:96:75:ba:bd:0c:b2:6a:cd:df:7a: 2f:01:fd:e5:f7:1d:ac:e3:25:a3:cf:dd:dd:cd:4f: 48:ee:75:dd:2b:57:32:40:c0:95:dc:68:a4:9f:2f: 32:70:7b:b9:c5:70:8a:ac:7c:54:27:f3:61:9a:0d: 63:ce:39:47:66:e8:72:37:18:c4:7d:e3:81:27:b8: 96:a3:da:a0:55:dc:56:dd:a8:c2:3c:7c:6d:5e:d8: 34:77:84:50:b9:63:7c:19:bb:c3:87:cf:58:85:12: 61:f2:d6:28:73:72:16:d8:ff:d1:db:26:bb:32:41: 21:55:c0:fe:51:f9:44:11:9e:6b:a4:61:8c:90:68: ee:bc:ac:bd:87:58:16:7f:01:1b:97:a1:63:43:d5: 60:ea:f3:c1:19:64:bc:98:e2:db:5d:be:3b:c1:bd: 56:a4:13:51:fc:83:b2:be:38:8e:a5:ad:3a:b5:35: 24:d7:4e:5f:f3:7d:8c:2e:b6:21:48:8b:43:5d:df: c4:69:7a:19:82:61:d6:f4:65:f5:9d:d4:0c:cc:20: d1:c4:5c:c9:d9:2f:27:00:db:14:b2:6e:a9:35:ea: a5:a3:44:5b:0a:eb:8f:e3:39:fa:a0:29:de:86:48: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:F2:97:A5:5A:47:CE:E3:5A:37:52:BC:33:5D:09:AA:33:8A:C6 X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:13:e5:94:17:d9:bc:60:05:ee:c7:e9:4e:11:2e:25:00:48: fd:c5:d3:a9:b7:e8:57:5e:d5:31:48:85:d3:5f:b6:36:12:aa: 32:9c:7f:03:0c:da:40:ce:1f:df:83:9f:74:45:b7:78:36:a0: 4f:dd:0f:f2:17:67:b5:db:4c:fd:4c:bf:06:3d:c6:cb:3f:0e: ac:b8:80:fb:22:6f:f5:92:74:d2:10:db:d7:0c:b9:c7:28:0a: 67:77:57:ab:05:17:f7:c0:bf:25:af:86:a3:44:5c:0a:7b:c1: 5d:22:0a:d6:2d:08:7b:70:a3:cd:05:64:7a:1a:81:fd:f3:97: f6:b2:67:ba:49:40:e8:50:f7:5c:fd:37:81:fa:1e:ae:d5:67: 99:6f:28:cf:6e:da:c0:34:27:1a:e9:40:52:ac:d4:5d:f7:3b: 84:b3:74:1c:e5:dd:73:b6:44:04:ff:fd:ab:f0:03:8f:e2:9c: 81:c3:f5:60:bd:55:db:40:68:b7:e9:e6:2f:4d:02:3c:81:a3: e3:3f:19:ff:a4:74:61:27:9d:49:77:e1:75:c5:79:87:dc:24: c2:d3:78:40:3c:3e:47:29:8f:19:df:76:ed:8f:e3:82:61:0c: 5b:14:14:5f:e0:91:5e:a1:32:46:2b:88:89:f3:dd:3b:96:4c: 7d:a9:67:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjUxMDE4MjA1MTI2WhcNMjUxMDI1MjA1MTI2WjAYMRYwFAYD VQQDEw02OGYzZmRjZS1jZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MYEcaFTEgwb6Sxrj2cmv2zMpZZ1ur0MsmrN33ovAf3l9x2s4yWjz93dzU9I 7nXdK1cyQMCV3Gikny8ycHu5xXCKrHxUJ/Nhmg1jzjlHZuhyNxjEfeOBJ7iWo9qg VdxW3ajCPHxtXtg0d4RQuWN8GbvDh89YhRJh8tYoc3IW2P/R2ya7MkEhVcD+UflE EZ5rpGGMkGjuvKy9h1gWfwEbl6FjQ9Vg6vPBGWS8mOLbXb47wb1WpBNR/IOyvjiO pa06tTUk105f832MLrYhSItDXd/EaXoZgmHW9GX1ndQMzCDRxFzJ2S8nANsUsm6p Neqlo0RbCuuP4zn6oCnehkgt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMq8pel WkfO41o3UrwzXQmqM4rGMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNE+WUF9m8YAXux+lOES4lAEj9xdOpt+hXXtUxSIXTX7Y2EqoynH8D DNpAzh/fg590Rbd4NqBP3Q/yF2e120z9TL8GPcbLPw6suID7Im/1knTSENvXDLnH KApnd1erBRf3wL8lr4ajRFwKe8FdIgrWLQh7cKPNBWR6GoH985f2sme6SUDoUPdc /TeB+h6u1WeZbyjPbtrANCca6UBSrNRd9zuEs3Qc5d1ztkQE//2r8AOP4pyBw/Vg vVXbQGi36eYvTQI8gaPjPxn/pHRhJ51Jd+F1xXmH3CTC03hAPD5HKY8Z33btj+OC YQxbFBRf4JFeoTJGK4iJ8907lkx9qWeS -----END CERTIFICATE-----Generated at Mon Oct 20 22:55:43 2025 by rpki-client