$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft File: X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json) Hash identifier: j8Yb4abZKf8zpMNs0jkA5oBivwGCCmMnfSy2ZkNy0dk= Subject key identifier: 23:A1:83:31:4B:71:32:3C:99:20:46:78:25:A8:E3:5A:42:59:AE:76 Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft Manifest number: 014E Signing time: Sun 19 Oct 2025 06:57:35 +0000 Manifest this update: Sun 19 Oct 2025 06:57:35 +0000 Manifest next update: Sun 26 Oct 2025 06:57:34 +0000 Files and hashes: 1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: iYUIBHPJ8mp0uii21ZuITTqqQbwP8umaL9QEmv3Gblw=) 2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: wDTtZzZ893Qnlcl8FBMxtSNu4K9Csx8VnqL0SdZB7wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Validity Not Before: Oct 19 06:57:35 2025 GMT Not After : Oct 26 06:57:34 2025 GMT Subject: CN=68f48bdf-c366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:78:0d:38:34:a8:75:e5:ae:7a:e3:02:b1:ec: ab:ee:25:96:fe:5f:c8:da:9c:ef:f8:e8:d9:37:2a: 8f:c6:da:6d:b7:79:ea:2a:93:c5:77:47:e0:08:8b: 69:c0:1e:a7:f6:65:dc:66:60:e8:29:d1:a2:f5:d8: 1d:b4:cd:0c:fd:1a:20:69:80:77:c1:f1:35:51:63: 5a:93:04:51:f2:ac:87:b6:95:0a:64:e5:8e:a1:07: 76:a6:42:36:07:77:db:51:cf:ba:66:0e:06:eb:97: fd:5c:1d:4a:76:21:2c:6a:4d:4e:00:6f:8d:85:78: 10:90:db:a3:9e:17:78:c2:2c:b3:d5:85:f7:a6:1f: a4:b6:3c:5c:4a:8a:39:c6:9e:57:72:87:f4:c9:cf: e4:0d:82:17:cc:79:36:11:1c:78:b4:0f:b6:2d:09: ce:89:cb:57:38:45:7a:d3:fd:11:d5:bf:39:c6:bb: bc:bd:a5:02:1c:93:b1:78:a0:a5:68:35:10:fc:d4: a5:75:bb:57:ff:a7:11:c0:e7:ea:5b:47:d6:8d:61: bc:f5:23:f3:ea:7e:78:d6:a9:d3:2f:9a:f7:4a:f4: 1e:43:ca:de:7a:78:be:95:12:a4:c7:23:9c:5b:8b: 91:29:ab:f6:d3:92:f8:68:3a:97:07:a7:62:ff:43: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A1:83:31:4B:71:32:3C:99:20:46:78:25:A8:E3:5A:42:59:AE:76 X509v3 Authority Key Identifier: keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ec:3c:c3:8a:82:17:29:90:26:97:06:9a:5a:d0:fe:be:72: a5:ad:27:7b:b5:ab:28:da:31:e1:6e:27:78:ec:ef:76:5a:e4: 0c:d8:e1:a9:75:28:f1:24:6c:2f:bb:a9:46:f3:76:1b:30:cc: 57:cb:cf:8e:1d:66:69:56:88:9c:59:09:80:b6:a4:93:1e:81: 41:73:68:8f:71:95:e9:f2:ef:5a:1e:c4:b9:00:0f:d7:82:f4: cb:a5:45:93:e7:9f:67:ac:f8:3d:0d:91:f8:f7:53:05:e0:a4: f3:3d:22:17:1d:5a:ae:09:eb:e3:fe:87:51:6b:d9:99:1e:88: e9:e3:bf:d0:ec:fa:df:48:43:b8:7e:bf:7f:bb:e4:15:e5:09: 9e:c9:ca:06:17:67:57:ef:55:5c:33:ce:a5:65:ae:7e:c4:77: f1:c2:73:25:35:68:08:78:c1:b4:1e:08:18:ba:35:27:13:9e: 0b:9c:2b:f6:ce:b6:fa:e8:1d:d8:b0:e9:4b:c4:41:26:1d:30: 73:48:5c:00:49:31:b1:44:ca:9f:7a:23:ec:ad:f5:fe:a4:0a: be:a6:e2:a5:24:78:11:2b:90:63:01:a5:23:e2:ab:4b:1d:03: 50:14:d7:a7:64:cf:4f:c4:03:4a:c3:fb:2b:c6:90:51:f8:9f: cd:21:c8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYyOTYxMTAvBgNVBAUTKDVGREJENURGNTMyRDJDNTYyMDZGN0IxMTJFN0JCQjMw NTdBMzk5OTAwHhcNMjUxMDE5MDY1NzM1WhcNMjUxMDI2MDY1NzM0WjAYMRYwFAYD VQQDEw02OGY0OGJkZi1jMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ngNODSodeWueuMCseyr7iWW/l/I2pzv+OjZNyqPxtptt3nqKpPFd0fgCItp wB6n9mXcZmDoKdGi9dgdtM0M/RogaYB3wfE1UWNakwRR8qyHtpUKZOWOoQd2pkI2 B3fbUc+6Zg4G65f9XB1KdiEsak1OAG+NhXgQkNujnhd4wiyz1YX3ph+ktjxcSoo5 xp5Xcof0yc/kDYIXzHk2ERx4tA+2LQnOictXOEV60/0R1b85xru8vaUCHJOxeKCl aDUQ/NSldbtX/6cRwOfqW0fWjWG89SPz6n541qnTL5r3SvQeQ8reeni+lRKkxyOc W4uRKav205L4aDqXB6di/0NAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOhgzFL cTI8mSBGeCWo41pCWa52MB8GA1UdIwQYMBaAFF/b1d9TLSxWIG97ES57uzBXo5mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI5Ni80MkEwQjcxQUFG NUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExGWWdiM3NSTG51N01GZWpt WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g5dlYzMU10TEZZZ2Izc1JMbnU3TUZlam1aQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjI5Ni80MkEwQjcxQUFGNUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExG WWdiM3NSTG51N01GZWptWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa7DzDioIXKZAmlwaaWtD+vnKlrSd7taso2jHhbid47O92WuQM2OGp dSjxJGwvu6lG83YbMMxXy8+OHWZpVoicWQmAtqSTHoFBc2iPcZXp8u9aHsS5AA/X gvTLpUWT559nrPg9DZH491MF4KTzPSIXHVquCevj/odRa9mZHojp47/Q7PrfSEO4 fr9/u+QV5QmeycoGF2dX71VcM86lZa5+xHfxwnMlNWgIeMG0HggYujUnE54LnCv2 zrb66B3YsOlLxEEmHTBzSFwASTGxRMqfeiPsrfX+pAq+puKlJHgRK5BjAaUj4qtL HQNQFNenZM9PxANKw/srxpBR+J/NIcgQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:09 2025 by rpki-client