$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json) Hash identifier: IM63aPCIbxLvLP3rDBM7Nb8Gq1Sd1YwOqCGU6sbaIF0= Subject key identifier: C8:6C:9E:D4:33:7B:DC:0C:33:1B:97:AA:6E:F3:59:C3:96:B9:78:F3 Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft Manifest number: 04E0 Signing time: Sun 19 Oct 2025 01:34:16 +0000 Manifest this update: Sun 19 Oct 2025 01:34:15 +0000 Manifest next update: Sun 26 Oct 2025 01:34:15 +0000 Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: 6CgnuqR/9kc4C+52hmZ2KHd4NTQ9yw7Xjh3tNOkSb28=) 2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Validity Not Before: Oct 19 01:34:15 2025 GMT Not After : Oct 26 01:34:15 2025 GMT Subject: CN=68f44018-aa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:70:e9:28:d9:82:11:7d:5a:7b:45:c9:5f: d7:78:cb:d6:ca:0c:29:d6:f2:67:a9:31:b5:a7:74: 88:32:3b:d5:8d:05:ec:c6:a0:ab:c1:d0:45:b3:78: 2b:8d:50:37:22:9d:d5:19:2d:8c:2e:be:c2:e7:77: 0b:f5:fd:d5:39:8c:33:f0:b1:91:4b:f2:56:9b:12: 59:90:d0:37:d0:54:1f:3b:1d:2b:8e:bb:e3:5b:17: 17:d6:ec:b5:8c:88:23:7d:a1:9c:66:89:61:16:53: 7b:07:31:4a:0b:8e:51:fd:9d:fc:7f:24:7d:05:4f: dd:ad:af:cb:8d:f0:d9:18:d4:82:57:64:e4:4b:c8: c5:09:4d:92:0a:2d:ed:f0:b5:95:4f:cc:7c:7d:e4: 7d:13:9d:41:28:a2:fd:95:ed:13:fa:8b:48:4e:50: 99:1c:f6:38:9f:58:5a:00:dd:2f:19:7a:b5:0d:04: 82:47:1c:c5:78:c4:5b:6d:9f:e2:bf:3a:b4:1f:d2: a1:35:48:99:5f:12:f6:b4:bc:05:18:0c:98:62:c7: 67:a8:3d:09:85:1c:fa:d5:30:65:72:81:05:a6:b5: 77:a7:65:7a:b2:30:4f:67:9c:6a:f8:ab:ba:94:51: 52:32:fa:7a:96:b4:d5:83:6e:32:6c:b5:63:c4:9a: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:9E:D4:33:7B:DC:0C:33:1B:97:AA:6E:F3:59:C3:96:B9:78:F3 X509v3 Authority Key Identifier: keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:d9:42:13:01:77:03:e3:42:da:85:91:c0:6e:35:07:77:7f: 13:c2:07:65:f8:92:7d:91:60:98:27:a5:35:3c:1e:74:81:3f: a9:1f:f1:47:6c:11:e1:28:e5:08:69:ff:a2:f5:04:c6:df:7e: 27:e2:e7:2e:14:54:be:8d:1d:8c:ed:ce:e6:42:cb:fa:13:38: ad:c9:41:68:4b:48:fa:d1:82:55:d7:8b:a8:c1:3b:3f:5d:bd: 1a:0e:98:e6:74:98:3d:08:7e:5b:d9:43:0b:0c:1e:5f:4c:0c: 87:3d:7d:c0:7e:bc:91:d0:4f:41:ba:2f:c2:34:5a:ad:32:12: 26:a8:2c:1f:5e:c0:35:28:40:a3:14:d3:7e:09:5b:34:02:16: 4c:25:62:d4:09:47:e4:d1:2f:c7:00:30:93:e9:dc:59:5c:b7: 25:24:1a:41:6d:06:05:af:fb:4b:b9:f3:f0:4c:8c:46:d9:a9: 7b:ed:64:54:1c:52:15:d7:82:44:8c:fd:36:24:81:48:90:7b: 14:32:19:91:6f:d5:93:63:67:09:41:16:b2:31:33:eb:81:cb: db:50:76:3f:ca:0c:aa:0e:2f:6b:63:3f:1f:81:3a:0b:88:2c: 5f:84:51:fb:49:fd:71:78:7b:db:94:6d:cc:83:ee:8b:e6:2c: 70:4e:b5:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1 QjgzQ0MzNEQwHhcNMjUxMDE5MDEzNDE1WhcNMjUxMDI2MDEzNDE1WjAYMRYwFAYD VQQDEw02OGY0NDAxOC1hYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHlw6SjZghF9WntFyV/XeMvWygwp1vJnqTG1p3SIMjvVjQXsxqCrwdBFs3gr jVA3Ip3VGS2MLr7C53cL9f3VOYwz8LGRS/JWmxJZkNA30FQfOx0rjrvjWxcX1uy1 jIgjfaGcZolhFlN7BzFKC45R/Z38fyR9BU/dra/LjfDZGNSCV2TkS8jFCU2SCi3t 8LWVT8x8feR9E51BKKL9le0T+otITlCZHPY4n1haAN0vGXq1DQSCRxzFeMRbbZ/i vzq0H9KhNUiZXxL2tLwFGAyYYsdnqD0JhRz61TBlcoEFprV3p2V6sjBPZ5xq+Ku6 lFFSMvp6lrTVg24ybLVjxJok0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhsntQz e9wMMxuXqm7zWcOWuXjzMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4 QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC52UITAXcD40LahZHAbjUHd38Twgdl+JJ9kWCYJ6U1PB50gT+pH/FH bBHhKOUIaf+i9QTG334n4ucuFFS+jR2M7c7mQsv6EzityUFoS0j60YJV14uowTs/ Xb0aDpjmdJg9CH5b2UMLDB5fTAyHPX3AfryR0E9Bui/CNFqtMhImqCwfXsA1KECj FNN+CVs0AhZMJWLUCUfk0S/HADCT6dxZXLclJBpBbQYFr/tLufPwTIxG2al77WRU HFIV14JEjP02JIFIkHsUMhmRb9WTY2cJQRayMTPrgcvbUHY/ygyqDi9rYz8fgToL iCxfhFH7Sf1xeHvblG3Mg+6L5ixwTrWu -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:45 2025 by rpki-client