$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json) Hash identifier: loTQOhOUuhfUb3h0BBnhX6pZxSWq6ec/5YS0VpxJWdw= Subject key identifier: A6:82:D1:48:C8:14:2C:85:F8:99:FF:46:A8:BD:BC:78:E4:36:7F:D6 Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Certificate serial: 0F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft Manifest number: 0EF5 Signing time: Sat 18 Oct 2025 18:13:50 +0000 Manifest this update: Sat 18 Oct 2025 18:13:49 +0000 Manifest next update: Sat 25 Oct 2025 18:13:49 +0000 Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: 12/OToVehL/0aw3CAKw+43IOjQdgDVk4odG4Bp67Efk=) 2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: oL0maWqOk1WBmFKK+iZrpTSZZSpD3rBTTNKLPVPOQyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3843 (0xf03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Validity Not Before: Oct 18 18:13:49 2025 GMT Not After : Oct 25 18:13:49 2025 GMT Subject: CN=68f3d8de-ddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:3b:13:0e:6f:85:42:36:e0:be:f9:56:d0: 3f:2e:45:a9:af:dc:89:ab:32:8b:ce:aa:e2:ac:f1: 0c:bd:e4:76:81:85:d8:b6:48:c2:30:7a:0c:f6:12: 34:69:97:82:80:7b:74:d8:1f:ff:40:af:8b:97:99: ed:bc:c1:be:49:a7:f2:b4:e6:d5:29:f6:18:b4:1a: ed:b4:67:71:49:91:8a:7e:36:51:fc:34:cb:fc:b0: b0:00:29:72:6b:dd:7f:a1:b0:cf:7b:f0:06:2d:91: 95:a9:cd:3c:fa:49:31:45:92:4a:5c:58:76:73:20: 0a:05:85:fa:90:9a:b5:f8:8d:7b:23:83:3a:15:68: 11:a2:bb:0b:c8:0e:a0:07:98:06:70:b6:c3:4c:db: 37:86:32:ca:66:0d:a1:14:28:29:f3:cd:bf:48:88: 6c:e0:25:30:a5:ae:79:04:e6:d5:b6:98:fa:fd:b4: b2:26:b5:38:bb:99:2c:bf:35:24:1e:70:da:0e:f3: 71:85:42:30:51:41:d4:14:4d:3e:c1:33:3d:55:77: 25:12:34:ba:c3:57:59:d3:14:e5:3a:35:10:6c:7e: 9c:4f:74:4d:b0:be:94:ef:66:5d:a1:f1:b6:14:30: ab:f8:d9:dc:89:4e:b5:72:51:44:17:9a:c2:35:2f: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:82:D1:48:C8:14:2C:85:F8:99:FF:46:A8:BD:BC:78:E4:36:7F:D6 X509v3 Authority Key Identifier: keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:eb:e1:2c:98:6a:d6:6f:dc:3b:65:fd:54:61:c6:73:91:a9: f5:6e:e4:bf:3f:ca:77:fb:22:0d:15:32:e6:b2:c6:76:87:d0: fe:60:70:fa:1b:c4:7a:2e:d2:9c:c9:55:f7:a5:85:2a:de:2d: 65:1d:d3:cd:d2:95:0b:d2:45:b2:c6:39:7d:5a:11:cd:af:aa: a8:b5:84:de:37:7e:d8:c9:db:43:81:4c:6d:0a:e4:0d:59:c6: 4a:d9:54:4f:f7:4a:a8:3b:32:54:ae:ac:3d:e2:e4:0b:d2:cb: 14:56:d7:63:14:85:b8:36:a2:21:4b:93:34:e9:b8:f6:07:3a: 6d:6e:5a:c4:16:97:9d:df:9f:61:ea:28:6e:b1:85:cb:5d:d3: 24:e3:e3:0b:fd:97:ba:3d:db:ec:ba:36:0d:bc:68:c6:e3:22: bc:81:08:21:99:e7:b5:39:12:c4:55:f6:a4:90:f7:d8:e4:2c: 7d:57:11:2c:aa:25:ba:ce:2e:2f:cd:48:3a:96:67:02:46:43: 45:3d:5e:70:50:87:1c:0f:ee:c6:ee:cc:f6:a8:2a:28:69:e6: 3f:a2:2f:e8:f9:a7:1c:4a:fb:71:1c:52:a9:3a:4c:95:88:00: 52:6c:79:d2:5c:3f:cc:69:1a:ea:77:57:79:84:02:20:94:6c: 1d:ac:be:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYzMUMxMTAvBgNVBAUTKEY3MkU3RDVFMUJCNDU0MkFCN0ZGNzc3MzY1ODgzQzE2 MDEwMzRERTkwHhcNMjUxMDE4MTgxMzQ5WhcNMjUxMDI1MTgxMzQ5WjAYMRYwFAYD VQQDEw02OGYzZDhkZS1kZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aw7Ew5vhUI24L75VtA/LkWpr9yJqzKLzqrirPEMveR2gYXYtkjCMHoM9hI0 aZeCgHt02B//QK+Ll5ntvMG+SafytObVKfYYtBrttGdxSZGKfjZR/DTL/LCwACly a91/obDPe/AGLZGVqc08+kkxRZJKXFh2cyAKBYX6kJq1+I17I4M6FWgRorsLyA6g B5gGcLbDTNs3hjLKZg2hFCgp882/SIhs4CUwpa55BObVtpj6/bSyJrU4u5ksvzUk HnDaDvNxhUIwUUHUFE0+wTM9VXclEjS6w1dZ0xTlOjUQbH6cT3RNsL6U72ZdofG2 FDCr+NnciU61clFEF5rCNS/auwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaC0UjI FCyF+Jn/Rqi9vHjkNn/WMB8GA1UdIwQYMBaAFPcufV4btFQqt/93c2WIPBYBA03p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjMxQy9BOUMzMTcwNDhD MjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZDcTNfM2R6WllnOEZnRURU ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5NTlYaHUwVkNxM18zZHpaWWc4RmdFRFRlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjMxQy9BOUMzMTcwNDhDMjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZD cTNfM2R6WllnOEZnRURUZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh6+EsmGrWb9w7Zf1UYcZzkan1buS/P8p3+yINFTLmssZ2h9D+YHD6 G8R6LtKcyVX3pYUq3i1lHdPN0pUL0kWyxjl9WhHNr6qotYTeN37YydtDgUxtCuQN WcZK2VRP90qoOzJUrqw94uQL0ssUVtdjFIW4NqIhS5M06bj2BzptblrEFped359h 6ihusYXLXdMk4+ML/Ze6PdvsujYNvGjG4yK8gQghmee1ORLEVfakkPfY5Cx9VxEs qiW6zi4vzUg6lmcCRkNFPV5wUIccD+7G7sz2qCooaeY/oi/o+accSvtxHFKpOkyV iABSbHnSXD/MaRrqd1d5hAIglGwdrL78 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:51 2025 by rpki-client