$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json) Hash identifier: dFz47eNN4y4/pNCRN+NfrLEXBogFVTkTYo6EBwOYGDI= Subject key identifier: E6:E4:07:22:03:70:A2:E1:DD:1C:86:74:2D:5D:B9:2B:76:36:3E:10 Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7 Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft Manifest number: 088F Signing time: Sat 18 Oct 2025 22:05:22 +0000 Manifest this update: Sat 18 Oct 2025 22:05:21 +0000 Manifest next update: Sat 25 Oct 2025 22:05:21 +0000 Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: cfu9ePe3AbB1CrL3pgln9e8WNw7Eum4t4bpBgo0dHBo=) 2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=) 3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=) 4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7 Validity Not Before: Oct 18 22:05:21 2025 GMT Not After : Oct 25 22:05:21 2025 GMT Subject: CN=68f40f22-38a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:a0:da:49:14:6f:45:a6:f4:b0:80:5b:3e: 79:18:ed:d6:19:8e:3e:7a:a4:ed:84:96:08:14:0a: 93:2c:fb:71:d8:12:4a:65:b2:ef:75:a4:3b:9b:48: 29:4e:f0:9b:f0:a7:01:d9:a4:ec:b9:1a:11:9d:ed: b0:bc:e7:e0:5f:fe:49:a7:25:63:b7:bc:23:d6:5f: 25:f0:0c:96:e7:fa:b9:f1:58:b2:4d:e7:08:1d:3e: 84:91:61:0c:b9:6d:17:96:a7:9c:07:95:64:d3:07: e3:4d:4c:a1:4c:92:61:89:53:38:83:4e:db:c3:13: 68:67:1c:05:0b:d7:bd:ad:ec:38:9c:ea:df:da:71: af:70:e3:5c:e1:60:b6:d4:6d:de:53:47:f0:ab:74: 96:64:51:5d:49:47:fc:a9:94:09:3b:98:95:64:a1: 8d:07:c5:cc:b2:f1:ef:64:96:0e:9b:dc:15:44:44: 07:5f:75:74:5c:f2:29:30:f3:da:c8:b4:28:2b:73: 8a:d6:df:cd:0a:47:39:19:4a:8d:91:8a:24:c9:8f: 6a:e1:ff:70:43:fa:91:bb:f4:4e:bd:76:e6:e5:2d: ae:f6:49:b8:fc:bc:4c:49:bf:ce:cc:9d:17:03:b3: 79:61:33:7b:76:fe:01:9b:eb:c0:70:b4:a5:13:9d: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E4:07:22:03:70:A2:E1:DD:1C:86:74:2D:5D:B9:2B:76:36:3E:10 X509v3 Authority Key Identifier: keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:24:b2:d4:f3:4b:03:6a:8a:21:b2:c9:21:41:a8:3f:79:c8: 2f:fb:16:e3:2c:af:5b:69:eb:2b:00:9d:04:eb:7e:64:85:81: 38:90:2e:71:9d:bf:e7:b3:55:ce:d9:ec:f8:55:b3:33:7c:f0: a4:d0:01:3b:36:17:5e:8f:4b:1c:15:00:38:2a:6f:ce:13:4a: 10:63:cb:38:88:2c:3a:5a:d4:a3:05:a6:79:be:02:29:71:d7: 21:eb:d5:73:97:63:ce:a9:9c:c7:ea:ae:bd:80:18:48:5f:ae: 1b:e9:c1:b5:c9:b5:54:d6:7d:7c:0a:84:b1:d9:fb:1f:d0:4b: 15:54:7b:36:31:41:a4:d8:22:33:df:c8:29:3b:91:4c:db:c8: 14:73:5c:af:72:85:63:f6:90:2a:5c:f9:e0:2e:44:a0:81:47: 04:71:c5:2d:f4:62:74:fc:14:b8:2f:d9:dd:68:1d:0a:dd:b0: 2c:90:35:f3:86:bb:ec:2b:0a:12:71:b0:c9:c8:7c:d3:dc:1a: 37:97:4e:06:1e:6c:16:bb:d1:a6:d8:2c:1e:72:d9:aa:83:a8: 19:2f:95:f3:f6:c7:94:88:59:ee:de:06:d2:df:72:6b:49:b3: 10:4f:a4:be:51:dd:16:0d:f9:1e:ff:62:23:dc:21:7f:df:a8: eb:32:a8:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx MDY2MDkwQTcwHhcNMjUxMDE4MjIwNTIxWhcNMjUxMDI1MjIwNTIxWjAYMRYwFAYD VQQDEw02OGY0MGYyMi0zOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFCg2kkUb0Wm9LCAWz55GO3WGY4+eqTthJYIFAqTLPtx2BJKZbLvdaQ7m0gp TvCb8KcB2aTsuRoRne2wvOfgX/5JpyVjt7wj1l8l8AyW5/q58ViyTecIHT6EkWEM uW0XlqecB5Vk0wfjTUyhTJJhiVM4g07bwxNoZxwFC9e9rew4nOrf2nGvcONc4WC2 1G3eU0fwq3SWZFFdSUf8qZQJO5iVZKGNB8XMsvHvZJYOm9wVREQHX3V0XPIpMPPa yLQoK3OK1t/NCkc5GUqNkYokyY9q4f9wQ/qRu/ROvXbm5S2u9km4/LxMSb/OzJ0X A7N5YTN7dv4Bm+vAcLSlE52qZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObkByID cKLh3RyGdC1duSt2Nj4QMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTE5Ny84NEIyRUM5OEYyN0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBr dTJ4WmVURnVWSWtRWmdrS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJLLU80sDaoohsskhQag/ecgv+xbjLK9baesrAJ0E635khYE4kC5x nb/ns1XO2ez4VbMzfPCk0AE7Nhdej0scFQA4Km/OE0oQY8s4iCw6WtSjBaZ5vgIp cdch69Vzl2POqZzH6q69gBhIX64b6cG1ybVU1n18CoSx2fsf0EsVVHs2MUGk2CIz 38gpO5FM28gUc1yvcoVj9pAqXPngLkSggUcEccUt9GJ0/BS4L9ndaB0K3bAskDXz hrvsKwoScbDJyHzT3Bo3l04GHmwWu9Gm2Cwectmqg6gZL5Xz9seUiFnu3gbS33Jr SbMQT6S+Ud0WDfke/2Ij3CF/36jrMqjH -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:12 2025 by rpki-client