$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: ejOcxCX6ERcSRdJRX39pQ7gdOUb1DkKqnp6U72fw6wg= Subject key identifier: 63:1F:66:6A:D4:D5:51:F8:25:41:73:8D:A9:87:B1:BD:C3:68:7E:4E Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 094D Signing time: Sat 18 Oct 2025 21:14:18 +0000 Manifest this update: Sat 18 Oct 2025 21:14:17 +0000 Manifest next update: Sat 25 Oct 2025 21:14:17 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: zYW6UQy487MKGKz9gi1y8+bJtLQ/NtQ1ft5I+ktx6aQ=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: 1XpEnw/JwEEBYh3nZmy2aqDGrwdu6fQDgmNMuCskbDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: Oct 18 21:14:17 2025 GMT Not After : Oct 25 21:14:17 2025 GMT Subject: CN=68f4032a-4913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:23:0e:e4:3b:76:ba:47:78:67:67:d8:09: bc:28:84:d4:f4:c1:d0:a9:52:8b:c5:eb:59:f6:24: 37:9f:3e:fd:03:02:03:21:72:f1:bd:d3:20:55:53: fc:38:17:fe:ea:e8:4e:c3:52:a6:e1:2e:53:10:12: 8e:11:17:45:c4:36:a5:9c:e2:64:13:d1:4f:fd:90: 3f:26:1f:e5:e4:33:d3:26:f2:eb:68:61:fb:fa:59: 5b:ef:90:34:49:3b:ae:0a:5d:0a:9e:1e:22:98:c3: 8f:48:df:5d:a8:dd:23:c0:2d:09:1f:8c:d7:0f:14: 1d:6d:16:ee:a6:46:f4:7a:22:dc:1e:9c:fb:82:79: 3a:97:1a:8b:83:85:f4:ed:fe:e9:ad:3b:ea:52:d4: d9:0c:f2:af:2d:4b:fc:c3:96:21:43:72:c0:e3:ec: 7b:af:63:e6:0b:d7:f7:d3:bb:81:eb:77:ac:0b:e6: 54:e9:22:7c:ce:13:ed:fb:40:d4:1b:9d:d2:e9:ca: d7:11:5d:ac:56:a7:c5:7a:ca:be:f5:17:04:b5:43: 07:d8:c6:b5:4e:34:89:53:2b:b7:5e:c1:dd:1b:66: a0:a5:2d:43:26:56:c6:8f:0c:ef:95:5f:fc:5b:df: 01:45:bc:08:d9:f0:7e:0a:87:ce:5f:41:b9:f7:a8: f8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1F:66:6A:D4:D5:51:F8:25:41:73:8D:A9:87:B1:BD:C3:68:7E:4E X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c3:e9:f4:cd:ad:c3:65:ef:e0:70:7a:68:0f:96:f6:a1:9c: 5a:b0:1a:3f:b7:02:f4:69:cd:63:07:78:f2:45:b2:07:f1:e1: 53:38:5d:62:dc:3f:e5:ce:cb:a9:03:31:e3:dd:35:d3:2c:51: b3:3d:72:55:ff:7f:37:4a:a2:ad:54:14:8b:5f:91:4a:76:cc: 8f:0c:1f:c8:07:c6:a9:d7:6c:ad:73:1e:27:88:d5:df:15:9d: 5c:04:87:04:24:8b:13:a8:8b:75:f8:d5:98:5e:e9:8b:4c:3c: d1:7e:4d:42:06:f3:aa:9b:d1:7b:34:79:59:69:1a:4b:e5:3b: 84:a0:4f:d7:68:b6:60:5d:60:b8:03:e9:7f:07:82:65:52:22: aa:ed:30:b1:3f:6c:8c:62:4a:20:c1:f4:0d:55:7b:7b:ea:a1: 90:5b:59:a4:f4:b9:b3:19:1b:d7:56:cc:2f:f4:d7:1a:ef:04: 2f:89:b5:a7:7c:a5:ce:1b:c5:46:f3:22:62:17:77:87:b8:f3: 59:2f:71:df:c1:a6:8b:45:77:ca:80:a2:c1:42:b1:75:3f:ae: 66:3e:cd:42:69:fd:7a:f3:47:c3:c9:55:9d:e7:27:26:60:83: 61:41:0a:c0:a5:22:25:6e:95:02:c9:a5:8d:3b:6a:98:20:0f: b8:1b:1c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjUxMDE4MjExNDE3WhcNMjUxMDI1MjExNDE3WjAYMRYwFAYD VQQDEw02OGY0MDMyYS00OTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGwjDuQ7drpHeGdn2Am8KITU9MHQqVKLxetZ9iQ3nz79AwIDIXLxvdMgVVP8 OBf+6uhOw1Km4S5TEBKOERdFxDalnOJkE9FP/ZA/Jh/l5DPTJvLraGH7+llb75A0 STuuCl0Knh4imMOPSN9dqN0jwC0JH4zXDxQdbRbupkb0eiLcHpz7gnk6lxqLg4X0 7f7prTvqUtTZDPKvLUv8w5YhQ3LA4+x7r2PmC9f307uB63esC+ZU6SJ8zhPt+0DU G53S6crXEV2sVqfFesq+9RcEtUMH2Ma1TjSJUyu3XsHdG2agpS1DJlbGjwzvlV/8 W98BRbwI2fB+CofOX0G596j4dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMfZmrU 1VH4JUFzjamHsb3DaH5OMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQw+n0za3DZe/gcHpoD5b2oZxasBo/twL0ac1jB3jyRbIH8eFTOF1i 3D/lzsupAzHj3TXTLFGzPXJV/383SqKtVBSLX5FKdsyPDB/IB8ap12ytcx4niNXf FZ1cBIcEJIsTqIt1+NWYXumLTDzRfk1CBvOqm9F7NHlZaRpL5TuEoE/XaLZgXWC4 A+l/B4JlUiKq7TCxP2yMYkogwfQNVXt76qGQW1mk9LmzGRvXVswv9Nca7wQvibWn fKXOG8VG8yJiF3eHuPNZL3HfwaaLRXfKgKLBQrF1P65mPs1Caf1680fDyVWd5ycm YINhQQrApSIlbpUCyaWNO2qYIA+4Gxy3 -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:56 2025 by rpki-client