$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: YGvo5c6EayAPNmFxAsJExqqIZiTWYY+t9sui/763lsg= Subject key identifier: E7:25:C4:B0:4A:75:9D:49:47:68:01:54:45:28:A5:69:5A:2B:FF:A3 Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 089C Signing time: Sat 18 Oct 2025 21:40:12 +0000 Manifest this update: Sat 18 Oct 2025 21:40:12 +0000 Manifest next update: Sat 25 Oct 2025 21:40:12 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: qyguFYERBtZdaAoYhfuc2t5UyREiyPZc9NoO2jkccK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: Oct 18 21:40:12 2025 GMT Not After : Oct 25 21:40:12 2025 GMT Subject: CN=68f4093c-e38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:12:d6:bb:7a:d1:9a:a1:d5:67:c8:55:33: e8:7e:31:f8:f1:36:13:76:a5:8a:0e:e9:1a:19:8f: 8e:74:2c:ca:ff:0c:f0:8d:93:db:2f:49:77:41:25: 2d:1a:00:9a:bc:7c:42:e4:74:fe:d3:ce:28:6d:1b: fc:da:77:fc:8b:77:41:3e:4c:3e:f1:aa:d4:aa:f1: b5:00:35:06:f3:5f:ca:14:fd:b1:b6:6a:d1:3d:62: f3:cd:af:7b:35:4a:4f:7d:63:74:41:03:70:54:f3: 96:05:9e:24:b7:bf:56:ee:ff:95:02:fe:5d:2b:7a: 12:6e:20:a7:e5:14:e8:c4:88:33:19:3d:4a:8a:bf: ba:d2:4f:5e:bf:79:2e:d2:cc:45:ca:5e:40:16:43: 17:58:fe:7d:90:63:8e:cc:be:bf:cc:80:0d:53:65: 31:52:3d:d8:a2:d4:0c:e9:f3:61:fa:0a:03:c6:76: 8a:47:99:3c:40:06:95:9f:5e:17:54:25:ea:4d:e1: 7f:17:2c:f3:47:3d:00:b1:ad:e0:ca:07:de:7d:d6: fd:32:6f:bd:fb:af:b6:d3:2b:14:a1:e6:8a:8e:94: 50:e1:e7:31:aa:53:f0:8a:0e:65:04:da:75:e6:c8: 0f:c2:3e:dc:44:3f:7f:f2:9d:82:c8:ef:0d:7b:10: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:C4:B0:4A:75:9D:49:47:68:01:54:45:28:A5:69:5A:2B:FF:A3 X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:06:24:38:f7:8e:9b:40:90:a9:5f:3a:54:c6:d5:6e:4e:6d: 05:a6:48:3d:42:00:60:e3:b8:54:76:8a:8b:6f:27:4e:23:5e: d6:62:bb:58:4d:ee:3d:b2:d7:77:ca:a6:8c:17:e9:43:c4:52: 9f:6b:2f:0b:3d:11:49:78:e0:43:fa:dd:15:8e:cb:1f:a5:c6: 50:a7:ee:38:a9:ce:05:2f:a8:c9:b1:16:76:06:57:6b:81:b8: 1a:44:5f:47:cc:5f:aa:65:c0:f6:ae:01:5c:ad:21:2e:b2:0d: ce:03:f6:9e:63:57:7e:07:b0:08:fa:32:7e:66:6e:3d:68:25: 77:79:df:0a:c0:72:ab:11:9a:b3:10:b7:4b:75:35:7b:af:0a: 4b:60:96:88:a9:c3:d3:44:a1:18:65:7f:e8:81:bb:da:54:65: 0e:14:96:8a:1e:76:18:20:b8:59:04:dd:90:b7:ef:ca:44:73: 0c:d5:05:4e:b5:5d:6b:79:35:dc:bb:28:16:28:58:05:6f:3b: 8a:15:e0:d4:45:af:b7:84:ee:a0:e4:65:c8:4d:0f:5d:4e:67: dc:f1:ae:8b:c4:f0:d7:4f:6c:fe:6f:9b:fb:c7:23:9b:58:80: da:0d:d7:d0:4d:0c:70:12:45:fc:2b:85:1d:b1:49:e2:04:76: e4:27:0d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjUxMDE4MjE0MDEyWhcNMjUxMDI1MjE0MDEyWjAYMRYwFAYD VQQDEw02OGY0MDkzYy1lMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmW0S1rt60Zqh1WfIVTPofjH48TYTdqWKDukaGY+OdCzK/wzwjZPbL0l3QSUt GgCavHxC5HT+084obRv82nf8i3dBPkw+8arUqvG1ADUG81/KFP2xtmrRPWLzza97 NUpPfWN0QQNwVPOWBZ4kt79W7v+VAv5dK3oSbiCn5RToxIgzGT1Kir+60k9ev3ku 0sxFyl5AFkMXWP59kGOOzL6/zIANU2UxUj3YotQM6fNh+goDxnaKR5k8QAaVn14X VCXqTeF/FyzzRz0Asa3gygfefdb9Mm+9+6+20ysUoeaKjpRQ4ecxqlPwig5lBNp1 5sgPwj7cRD9/8p2CyO8NexAH4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOclxLBK dZ1JR2gBVEUopWlaK/+jMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1BiQ4946bQJCpXzpUxtVuTm0Fpkg9QgBg47hUdoqLbydOI17WYrtY Te49std3yqaMF+lDxFKfay8LPRFJeOBD+t0VjssfpcZQp+44qc4FL6jJsRZ2Bldr gbgaRF9HzF+qZcD2rgFcrSEusg3OA/aeY1d+B7AI+jJ+Zm49aCV3ed8KwHKrEZqz ELdLdTV7rwpLYJaIqcPTRKEYZX/ogbvaVGUOFJaKHnYYILhZBN2Qt+/KRHMM1QVO tV1reTXcuygWKFgFbzuKFeDURa+3hO6g5GXITQ9dTmfc8a6LxPDXT2z+b5v7xyOb WIDaDdfQTQxwEkX8K4UdsUniBHbkJw1c -----END CERTIFICATE-----Generated at Mon Oct 20 04:50:02 2025 by rpki-client