$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json) Hash identifier: HBnhOjZUPevahP21H/6yuHsVypHD6KhEyZdWx8VbHEQ= Subject key identifier: 14:08:B1:25:EE:B4:0B:69:16:C9:A7:43:F2:6B:44:8A:DF:20:F2:EF Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Certificate serial: 1A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft Manifest number: 19FA Signing time: Sat 18 Oct 2025 16:44:35 +0000 Manifest this update: Sat 18 Oct 2025 16:44:34 +0000 Manifest next update: Sat 25 Oct 2025 16:44:34 +0000 Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: drKoBN1CgdDw3wIXnDK6U+735UXwqdu+6Qhkp+IbR7k=) 2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: c2CgFARH3NGyjJVcgLSdMDavs6AC8B7rRi2PB+rzCh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6713 (0x1a39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Validity Not Before: Oct 18 16:44:34 2025 GMT Not After : Oct 25 16:44:34 2025 GMT Subject: CN=68f3c3f3-858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:d5:81:eb:cd:a4:09:80:87:03:92:08:5d: 57:64:c7:c0:3b:5e:a0:00:53:3b:64:14:09:f9:1f: 9a:29:9e:bf:54:9d:11:1f:4b:e5:08:a4:b7:82:ba: ea:52:db:62:40:c4:19:75:1b:fb:b5:53:83:3f:c6: d6:60:14:b2:02:0c:49:ef:12:3d:14:b2:c0:6d:1b: 36:12:24:90:24:e7:21:03:91:6f:6b:6f:ea:6a:43: 87:9b:57:82:11:b2:9a:15:92:76:33:cf:7d:99:d1: 57:de:0c:2c:6c:73:0c:9c:6b:cd:cd:8b:99:3b:26: c8:a5:c6:d0:c4:f0:73:87:61:2c:dd:cd:52:f3:9f: 1f:c9:28:d2:62:4c:1d:92:a5:a0:a6:db:65:b9:f3: 98:61:a2:a0:1c:f8:7d:ff:27:fc:b8:39:f2:62:08: 91:58:2e:01:c7:45:03:8b:2a:ff:49:85:06:a2:29: b3:5a:9a:31:6f:d5:11:b4:4a:7a:f2:27:23:71:9c: 4e:b2:f4:c4:7b:48:51:a1:1f:c7:d2:cb:18:ef:70: f5:62:0d:6f:a6:93:32:d4:13:2c:a7:58:a0:1c:f3: fa:bd:9c:56:de:6c:1c:9c:7c:b4:25:ab:8d:63:a1: ed:e8:41:9d:13:b2:d2:67:b2:61:bb:21:5d:88:21: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:08:B1:25:EE:B4:0B:69:16:C9:A7:43:F2:6B:44:8A:DF:20:F2:EF X509v3 Authority Key Identifier: keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ee:d3:92:d3:fc:42:23:02:bd:b8:66:bb:1b:e1:07:df:de: 96:e3:50:ef:33:08:aa:08:1d:3d:dc:d2:88:ff:6b:5d:07:95: 8d:36:c2:90:e2:61:f8:e5:e3:50:cf:82:f4:4b:a0:45:f8:ad: 2a:eb:eb:ff:b1:ab:fb:3a:77:83:40:6e:d6:1b:6f:0e:b3:93: 5d:a2:44:74:cc:ff:c1:c2:a7:fa:06:89:21:d3:71:ac:4c:04: 36:11:af:9e:65:68:7a:3a:16:d4:de:42:ae:0a:b3:92:14:54: 7e:a5:09:d1:a4:cc:38:9f:fb:35:15:5f:e3:4f:43:0c:0a:2b: 55:fb:c4:62:be:c8:fc:ba:0e:c8:7a:f9:31:22:a9:62:63:ec: b7:49:55:08:35:44:61:38:5c:d8:d0:e3:98:1b:13:ef:87:83: 8b:93:14:34:68:be:b6:42:11:bc:e9:b1:39:22:a6:f7:cf:20: 83:28:c8:51:51:a7:04:47:d9:a5:65:b8:23:c0:76:ff:73:68: d1:5e:d8:92:33:62:36:12:47:8c:88:ee:51:8e:df:93:4c:43: cb:1b:9d:e3:e8:42:8e:76:9a:d6:ce:40:b3:e4:2c:b9:1a:19: 4b:30:70:ca:49:d9:3f:c2:ca:10:d4:36:85:99:8a:0e:f9:b4: f9:3e:41:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw OTQ2RUFCQzQwHhcNMjUxMDE4MTY0NDM0WhcNMjUxMDI1MTY0NDM0WjAYMRYwFAYD VQQDEw02OGYzYzNmMy04NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnrVgevNpAmAhwOSCF1XZMfAO16gAFM7ZBQJ+R+aKZ6/VJ0RH0vlCKS3grrq UttiQMQZdRv7tVODP8bWYBSyAgxJ7xI9FLLAbRs2EiSQJOchA5Fva2/qakOHm1eC EbKaFZJ2M899mdFX3gwsbHMMnGvNzYuZOybIpcbQxPBzh2Es3c1S858fySjSYkwd kqWgpttlufOYYaKgHPh9/yf8uDnyYgiRWC4Bx0UDiyr/SYUGoimzWpoxb9URtEp6 8icjcZxOsvTEe0hRoR/H0ssY73D1Yg1vppMy1BMsp1igHPP6vZxW3mwcnHy0JauN Y6Ht6EGdE7LSZ7JhuyFdiCEHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQIsSXu tAtpFsmnQ/JrRIrfIPLvMB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5 UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL7tOS0/xCIwK9uGa7G+EH396W41DvMwiqCB093NKI/2tdB5WNNsKQ 4mH45eNQz4L0S6BF+K0q6+v/sav7OneDQG7WG28Os5NdokR0zP/Bwqf6Bokh03Gs TAQ2Ea+eZWh6OhbU3kKuCrOSFFR+pQnRpMw4n/s1FV/jT0MMCitV+8Rivsj8ug7I evkxIqliY+y3SVUINURhOFzY0OOYGxPvh4OLkxQ0aL62QhG86bE5Iqb3zyCDKMhR UacER9mlZbgjwHb/c2jRXtiSM2I2EkeMiO5Rjt+TTEPLG53j6EKOdprWzkCz5Cy5 GhlLMHDKSdk/wsoQ1DaFmYoO+bT5PkGn -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:13 2025 by rpki-client