$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: XkHcDgZYM2DeH/ZvNwF/61RO5IaUnEw+qssvpKDOZOs= Subject key identifier: D5:48:48:4B:9A:8D:12:8B:E1:C9:BA:52:B7:98:9F:95:CB:89:CC:28 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0F9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0F8C Signing time: Sat 18 Oct 2025 18:09:20 +0000 Manifest this update: Sat 18 Oct 2025 18:09:19 +0000 Manifest next update: Sat 25 Oct 2025 18:09:19 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: bd/DzRhtZUim8Ko/oY5fGTYNveQWHjsPgOjFCLKMmZQ=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: cGhnDxeygmjtWG8DkCbsMlX+1o7K6dnzIlHaIw6aiaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3995 (0xf9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Oct 18 18:09:19 2025 GMT Not After : Oct 25 18:09:19 2025 GMT Subject: CN=68f3d7cf-d8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:64:3a:38:ac:2c:99:e0:b9:a4:76:fb:c0: 5f:9c:4f:53:e2:e7:0b:c0:b3:7c:86:d9:40:9b:88: e9:ed:11:f1:12:e4:50:0d:99:05:f1:ab:a2:15:71: 6f:86:79:ee:d0:c7:c2:bd:fa:73:fb:b0:09:bd:32: 07:b1:b4:93:47:9f:ca:64:e9:d0:a2:26:a2:4a:66: 18:ba:13:3d:65:c4:b1:d9:7e:30:5e:2a:33:28:ec: cd:75:56:a5:2b:09:ea:61:f5:2f:d7:c5:0f:2a:5b: 19:d1:c6:c3:f0:be:60:55:48:3e:41:13:79:3e:39: ed:4f:53:0b:0a:43:54:5e:0e:00:68:1c:9a:40:f5: a4:01:fb:7b:9e:9e:03:b8:26:79:ca:2a:e5:97:2f: 7c:e7:15:62:17:a8:ff:24:6e:df:9b:9f:e0:54:5e: 50:7c:cb:44:18:e9:e0:66:e6:18:9f:ec:50:d8:cb: 47:2d:9e:d1:d6:dd:78:29:0a:72:85:2a:ac:07:e2: 0d:41:42:65:4f:83:c8:78:11:34:a0:52:08:c4:38: 5b:e1:0c:ce:d3:cb:5f:72:32:5d:95:89:5d:6c:9b: 6a:a0:bd:f0:13:7a:22:cd:8b:28:8f:68:5b:20:03: 59:0c:f7:d4:d9:28:b7:d1:c3:24:63:50:f9:64:d4: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:48:48:4B:9A:8D:12:8B:E1:C9:BA:52:B7:98:9F:95:CB:89:CC:28 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:60:de:2c:d0:23:e4:ba:df:f8:9c:3b:24:8e:ca:8d:db:0b: 2e:26:04:6e:70:d8:cd:dc:10:8f:01:bf:7e:98:c2:ae:3b:3f: 0f:bc:a4:43:95:8e:e5:79:06:7e:7d:61:47:91:7f:a4:f1:34: 2f:28:84:c7:da:d8:76:41:f7:44:9a:67:f3:43:99:6d:8d:17: 49:63:7d:7c:f7:96:cb:cd:64:e4:dc:8c:ec:35:41:9f:6c:b1: b4:cc:17:d9:87:f4:48:5f:eb:d1:fb:b4:a0:e9:ea:66:1a:60: 81:43:00:7f:01:79:77:bd:ee:0b:88:8e:58:e1:d4:54:2d:d4: c1:0a:93:0b:cb:c3:88:b3:17:b5:a7:22:26:b8:13:01:d8:bc: 4a:87:67:f2:6d:72:c9:b5:5a:de:5e:85:24:e6:6a:ec:17:0a: 5d:f0:2b:c6:9d:31:48:27:92:14:91:4a:fe:23:16:30:09:d7: 8f:c8:76:28:f3:84:28:81:a6:5f:40:e9:22:e2:6e:f2:c4:b0: ed:4a:5c:d5:39:b0:e8:bd:34:9c:64:fd:cd:31:5e:75:95:7c: 55:51:f2:0f:8e:15:a4:2e:9e:9c:cd:b7:10:50:55:b1:c2:77: f1:d2:40:8b:62:4d:70:03:5b:2b:be:5e:27:c8:ee:10:b6:14: d7:50:e5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUxMDE4MTgwOTE5WhcNMjUxMDI1MTgwOTE5WjAYMRYwFAYD VQQDEw02OGYzZDdjZi1kOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOtkOjisLJnguaR2+8BfnE9T4ucLwLN8htlAm4jp7RHxEuRQDZkF8auiFXFv hnnu0MfCvfpz+7AJvTIHsbSTR5/KZOnQoiaiSmYYuhM9ZcSx2X4wXiozKOzNdVal KwnqYfUv18UPKlsZ0cbD8L5gVUg+QRN5PjntT1MLCkNUXg4AaByaQPWkAft7np4D uCZ5yirlly985xViF6j/JG7fm5/gVF5QfMtEGOngZuYYn+xQ2MtHLZ7R1t14KQpy hSqsB+INQUJlT4PIeBE0oFIIxDhb4QzO08tfcjJdlYldbJtqoL3wE3oizYsoj2hb IANZDPfU2Si30cMkY1D5ZNSCZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVISEua jRKL4cm6UreYn5XLicwoMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9YN4s0CPkut/4nDskjsqN2wsuJgRucNjN3BCPAb9+mMKuOz8PvKRD lY7leQZ+fWFHkX+k8TQvKITH2th2QfdEmmfzQ5ltjRdJY31895bLzWTk3IzsNUGf bLG0zBfZh/RIX+vR+7Sg6epmGmCBQwB/AXl3ve4LiI5Y4dRULdTBCpMLy8OIsxe1 pyImuBMB2LxKh2fybXLJtVreXoUk5mrsFwpd8CvGnTFIJ5IUkUr+IxYwCdePyHYo 84QogaZfQOki4m7yxLDtSlzVObDovTScZP3NMV51lXxVUfIPjhWkLp6czbcQUFWx wnfx0kCLYk1wA1srvl4nyO4QthTXUOV0 -----END CERTIFICATE-----Generated at Mon Oct 20 05:50:19 2025 by rpki-client