$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: 9b5lPCS58OgQVFMRlrA0wV5eNk0YpfoYgWDjs02q/8M= Subject key identifier: 06:A6:5A:73:EA:E1:9F:51:21:B6:2F:2B:CE:99:4C:7B:4D:39:1D:4E Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: 96 Signing time: Sun 19 Oct 2025 09:39:18 +0000 Manifest this update: Sun 19 Oct 2025 09:39:17 +0000 Manifest next update: Sun 26 Oct 2025 09:39:17 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: W2PBXVOCcAZoChXvgkNLyZA8Gpn8WijHaOfsv6CgwJk=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Oct 19 09:39:17 2025 GMT Not After : Oct 26 09:39:17 2025 GMT Subject: CN=68f4b1c5-4b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:37:53:f5:b7:68:cb:81:64:3a:52:8d:49: 89:36:1c:fc:1f:fe:fd:60:d7:b1:19:fd:b6:f2:45: d2:cb:b2:8b:a0:3f:c8:c2:23:ba:30:df:54:39:39: 80:d8:12:7a:e5:18:e9:6e:7b:88:29:2e:67:f0:4d: 22:b9:79:06:ea:ab:b7:5e:e4:18:52:51:bc:94:b8: a6:05:99:b1:9b:35:ec:90:87:a2:9f:35:6b:67:12: b5:44:42:26:12:06:ec:82:ed:2e:ac:5c:33:5b:b9: 73:55:3b:2d:9e:27:6c:65:e8:4c:66:ca:55:c1:c8: 03:24:f5:66:d0:cd:1c:31:53:a7:a9:a4:21:7a:04: 07:4b:4d:52:31:89:a0:12:2f:c1:ea:07:db:2b:8c: ad:99:d0:34:24:6c:55:96:5b:1a:71:74:a6:da:17: 25:53:6b:98:38:ab:c3:29:85:41:75:e8:67:d4:70: 06:3b:19:e8:0a:9d:4c:05:d3:0d:ba:56:02:4a:2a: 3e:57:8d:0c:46:09:80:0f:aa:8e:1d:cc:a1:55:0c: 11:10:df:22:ea:bc:0a:f0:15:18:a4:62:48:0c:4c: 4a:9d:51:77:ad:da:cb:35:aa:9d:ef:2a:42:38:34: c5:6f:0f:78:e0:a1:1c:f5:be:ff:36:25:a7:8b:68: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A6:5A:73:EA:E1:9F:51:21:B6:2F:2B:CE:99:4C:7B:4D:39:1D:4E X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0a:54:1d:27:16:b2:64:72:e8:73:d1:53:dc:0e:03:6b:79: 07:d8:e5:da:e7:ba:71:8a:e5:63:08:5e:c4:ad:ce:e4:60:79: ce:8b:c1:e2:39:5e:17:fd:86:44:30:51:62:ac:5a:c9:1b:7f: 56:02:9a:03:1d:39:46:b0:b8:6d:64:65:6b:17:d0:02:e1:45: 20:7c:08:e4:87:ef:79:1e:27:b5:b5:2e:72:eb:46:d6:c4:58: c0:d5:99:83:50:05:93:48:db:30:28:fd:b7:db:14:24:6e:9e: 02:38:c1:d9:76:e0:db:ea:2c:b8:1c:3a:75:8c:17:6e:dd:ac: f4:43:47:da:f0:7b:a2:1b:f0:78:06:41:17:80:c9:86:16:13: 59:75:51:ca:fe:12:13:a5:f2:49:b6:06:92:2e:8e:b0:3c:23: 6c:29:39:de:e5:5b:20:32:b0:46:86:67:14:a3:28:1a:8c:3d: 7c:b7:12:f7:97:02:6a:1b:d0:6b:55:a7:da:b0:c4:b6:a8:c7: a0:98:3d:dc:a6:9b:ec:f8:35:95:ec:1f:c0:e7:99:5d:57:be: 92:21:3f:dc:4c:ea:fc:8d:b8:d0:14:1d:13:ae:03:bb:bc:25: 26:9a:ec:e6:93:85:ab:6e:fb:55:76:5c:0e:70:5e:23:c8:a9: e8:a8:14:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKEFFNzNCNzA1NDhGRjQyMkVEMDJENTlEMUNBMjU3OTNB MDVFOUU0MkEwHhcNMjUxMDE5MDkzOTE3WhcNMjUxMDI2MDkzOTE3WjAYMRYwFAYD VQQDEw02OGY0YjFjNS00YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vs3U/W3aMuBZDpSjUmJNhz8H/79YNexGf228kXSy7KLoD/IwiO6MN9UOTmA 2BJ65RjpbnuIKS5n8E0iuXkG6qu3XuQYUlG8lLimBZmxmzXskIeinzVrZxK1REIm Egbsgu0urFwzW7lzVTstnidsZehMZspVwcgDJPVm0M0cMVOnqaQhegQHS01SMYmg Ei/B6gfbK4ytmdA0JGxVllsacXSm2hclU2uYOKvDKYVBdehn1HAGOxnoCp1MBdMN ulYCSio+V40MRgmAD6qOHcyhVQwREN8i6rwK8BUYpGJIDExKnVF3rdrLNaqd7ypC ODTFbw944KEc9b7/NiWni2iUZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAamWnPq 4Z9RIbYvK86ZTHtNOR1OMB8GA1UdIwQYMBaAFK5ztwVI/0Iu0C1Z0coleToF6eQq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81MDEwOTg3NkNC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1FpN1FMVm5SeWlWNU9nWHA1 Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81MDEwOTg3NkNCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1Fp N1FMVm5SeWlWNU9nWHA1Q28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwClQdJxayZHLoc9FT3A4Da3kH2OXa57pxiuVjCF7Erc7kYHnOi8Hi OV4X/YZEMFFirFrJG39WApoDHTlGsLhtZGVrF9AC4UUgfAjkh+95Hie1tS5y60bW xFjA1ZmDUAWTSNswKP232xQkbp4COMHZduDb6iy4HDp1jBdu3az0Q0fa8HuiG/B4 BkEXgMmGFhNZdVHK/hITpfJJtgaSLo6wPCNsKTne5VsgMrBGhmcUoygajD18txL3 lwJqG9BrVafasMS2qMegmD3cppvs+DWV7B/A55ldV76SIT/cTOr8jbjQFB0TrgO7 vCUmmuzmk4WrbvtVdlwOcF4jyKnoqBSf -----END CERTIFICATE-----Generated at Tue Oct 21 11:38:39 2025 by rpki-client