$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: AowKgEYmB3ykyo76fbXyhRI5DXsDJvmZrSt+C1mYQzk= Subject key identifier: BC:61:73:31:CB:05:61:FB:6E:4C:96:28:EB:C2:B7:D9:72:4D:6D:67 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 04C9 Signing time: Sun 19 Oct 2025 01:38:27 +0000 Manifest this update: Sun 19 Oct 2025 01:38:26 +0000 Manifest next update: Sun 26 Oct 2025 01:38:26 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: iU1B5kcfIf3+8YCS5k2Pzrcp6zLInFaeFBOYBguakOU=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Oct 19 01:38:26 2025 GMT Not After : Oct 26 01:38:26 2025 GMT Subject: CN=68f44113-88e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:3a:e0:ce:f1:0a:83:e7:65:1c:c6:71:3d: fa:50:b5:ab:b2:94:a8:a0:3d:fa:c7:bd:26:61:01: f2:e6:27:3d:cc:92:bb:55:c2:cd:b5:91:9e:8f:29: ac:e0:e2:07:b5:03:9b:3d:2f:8d:9c:ad:aa:46:ac: d3:a5:5f:4e:f3:0f:ba:db:f8:34:ed:e8:a5:b2:35: 6e:64:56:99:e5:e8:cf:7d:ce:e2:14:be:4b:af:5d: 85:7a:78:35:72:3f:46:59:2c:dc:51:11:38:21:e7: f8:35:f9:52:13:0f:dd:17:f8:c4:eb:f9:15:02:cb: 72:a5:bc:2d:2a:d2:a9:1b:ba:5e:ab:a5:97:56:77: ca:95:41:d5:4e:53:c4:02:c0:d4:3c:ac:ee:2d:e9: d1:2f:dc:c0:79:4e:31:54:18:96:06:88:95:d4:0e: 5f:4c:dc:a3:5a:d4:24:97:4a:63:fb:78:8e:a7:83: b3:a7:d9:51:34:b1:46:81:d7:58:6e:7b:7f:f3:41: 80:1a:2a:3a:4c:f7:16:ae:e6:3d:fb:2e:da:40:63: 41:23:39:7f:5a:84:a3:ca:d5:fa:cd:93:a0:ec:51: 7c:01:24:a3:8a:97:42:b1:cd:57:f7:7f:bd:0f:e4: 99:61:7c:33:93:3d:34:05:bc:55:b1:86:dd:a7:13: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:73:31:CB:05:61:FB:6E:4C:96:28:EB:C2:B7:D9:72:4D:6D:67 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:77:97:3a:eb:b4:a5:7d:92:45:c9:c4:b6:7c:f8:30:0c:14: a2:5c:50:01:5b:b3:55:9c:38:4a:7f:79:da:8f:d9:ef:2d:ef: d6:3a:7c:16:de:9f:e0:30:71:80:c2:71:17:e3:58:10:35:95: db:e9:12:ff:06:21:89:50:9d:97:92:ca:1e:d5:b6:6e:80:75: fc:7b:6b:93:51:6b:bb:ab:b5:8b:94:30:73:6b:39:64:bc:1b: 76:48:6d:97:72:fb:fa:8c:ba:60:4c:72:9a:e9:5b:ff:ff:ba: ec:ea:26:84:49:2b:c8:23:9f:db:a2:0b:aa:e5:7f:fd:58:4c: a5:2d:1c:c3:fb:8a:4b:15:a3:33:92:ce:92:c4:71:77:89:7f: 16:86:6a:af:f1:f3:b1:f6:ac:24:0b:16:48:78:c0:ea:2d:b2: 6f:c3:7e:f3:33:99:25:c4:88:8a:37:8c:31:95:2e:6a:45:e6: a0:a1:5f:b7:25:9e:9c:cd:84:37:11:e3:6e:8c:9a:7d:37:07: 66:00:23:46:9f:60:a3:b1:c6:de:65:44:8a:c5:56:4e:c5:e7: 85:b7:70:44:fe:a9:2f:b0:61:df:7c:a4:50:da:ce:cd:d4:34: 3a:c8:7f:e8:9d:b4:ba:36:bb:1d:f8:8e:e2:75:8f:f3:b4:d6: af:18:68:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUxMDE5MDEzODI2WhcNMjUxMDI2MDEzODI2WjAYMRYwFAYD VQQDEw02OGY0NDExMy04OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EM64M7xCoPnZRzGcT36ULWrspSooD36x70mYQHy5ic9zJK7VcLNtZGejyms 4OIHtQObPS+NnK2qRqzTpV9O8w+62/g07eilsjVuZFaZ5ejPfc7iFL5Lr12Feng1 cj9GWSzcURE4Ief4NflSEw/dF/jE6/kVAstypbwtKtKpG7peq6WXVnfKlUHVTlPE AsDUPKzuLenRL9zAeU4xVBiWBoiV1A5fTNyjWtQkl0pj+3iOp4Ozp9lRNLFGgddY bnt/80GAGio6TPcWruY9+y7aQGNBIzl/WoSjytX6zZOg7FF8ASSjipdCsc1X93+9 D+SZYXwzkz00BbxVsYbdpxMthwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxhczHL BWH7bkyWKOvCt9lyTW1nMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOd5c667SlfZJFycS2fPgwDBSiXFABW7NVnDhKf3naj9nvLe/WOnwW 3p/gMHGAwnEX41gQNZXb6RL/BiGJUJ2Xksoe1bZugHX8e2uTUWu7q7WLlDBzazlk vBt2SG2Xcvv6jLpgTHKa6Vv//7rs6iaESSvII5/boguq5X/9WEylLRzD+4pLFaMz ks6SxHF3iX8Whmqv8fOx9qwkCxZIeMDqLbJvw37zM5klxIiKN4wxlS5qReagoV+3 JZ6czYQ3EeNujJp9NwdmACNGn2CjscbeZUSKxVZOxeeFt3BE/qkvsGHffKRQ2s7N 1DQ6yH/onbS6Nrsd+I7idY/ztNavGGiA -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:52 2025 by rpki-client