$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: oFWS7WYyDqROoVfTqej/vp/M9tp/eQg90Vnfr5VbRK0= Subject key identifier: 16:04:C7:D8:09:EE:EE:0B:B5:4B:13:73:09:CD:62:32:8B:B6:13:3D Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C7E Signing time: Sat 18 Oct 2025 19:13:35 +0000 Manifest this update: Sat 18 Oct 2025 19:13:34 +0000 Manifest next update: Sat 25 Oct 2025 19:13:34 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: UA7M6OtyvqGRRprtqhFq5DeH0CZq1bnXnBSj0DSy/lA=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Oct 18 19:13:34 2025 GMT Not After : Oct 25 19:13:34 2025 GMT Subject: CN=68f3e6de-92fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:06:07:59:ff:12:4a:ff:93:28:07:d9:02: d3:8d:a5:f9:a4:7d:81:8a:6e:fe:78:71:11:09:2e: cb:34:b5:28:98:c8:11:88:97:f5:45:92:c7:44:9d: ca:ec:45:16:8c:c8:55:9a:cf:2e:72:21:14:33:f8: 4f:64:23:b4:22:12:a6:f5:64:52:ba:de:a9:8e:48: 88:61:81:b6:ff:1e:74:77:d2:2c:3e:82:7f:ff:65: e1:2b:9e:bb:a5:12:48:f4:f3:54:68:d3:d5:7d:33: 56:37:46:72:97:e8:78:c9:f5:0f:0b:f5:a8:32:71: 81:29:bf:f3:a7:31:7d:d7:9d:91:2e:aa:a0:c9:e3: 83:7f:fd:1e:80:23:ce:51:12:12:05:25:21:26:45: 03:23:8d:ea:d3:b4:37:b3:38:9e:25:5b:6a:e9:0d: 25:f3:df:88:94:fd:28:6a:c4:bc:b8:c4:8b:04:2d: db:9d:bc:71:a1:96:6c:f5:11:27:4e:bf:a0:74:4b: e9:dc:3f:a5:a5:d2:08:fc:d2:86:b3:aa:b8:2e:11: 5e:ba:e1:b6:2d:5c:e2:17:db:c6:4d:42:f3:a7:4b: e5:71:f9:ec:99:67:20:e4:1b:44:89:c9:b4:97:0f: 65:00:55:ea:da:82:16:d3:71:13:b1:b2:c1:2b:f4: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:04:C7:D8:09:EE:EE:0B:B5:4B:13:73:09:CD:62:32:8B:B6:13:3D X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:49:31:ec:98:9d:90:f7:5a:fe:9c:5e:fa:37:04:03:e5:78: bd:8c:1d:06:c0:b8:e4:93:32:b2:c6:21:07:07:f3:4d:e2:42: f3:6a:88:36:01:fb:76:d7:52:84:1d:91:5e:43:37:48:4b:23: 12:99:29:3a:b4:0e:04:72:47:72:74:90:1f:0b:b5:a0:1b:31: fa:da:5f:47:e3:6b:58:e3:c3:92:ab:a9:4e:40:a3:3e:ed:d4: 3b:a1:92:0c:49:26:3c:6f:43:06:35:34:a0:83:f2:52:33:67: 5b:9c:07:6b:ad:44:a4:4c:d1:86:9e:dd:3a:f0:cc:76:e2:fe: 92:d0:43:fd:39:91:5d:25:eb:bb:32:cb:07:03:e6:b8:a2:4d: de:6c:a2:cb:18:0b:10:fe:bb:2b:1f:e2:34:74:2b:ef:61:0b: a0:3e:03:9e:17:5b:7c:52:d9:ef:5e:b2:d6:8b:13:76:c9:08: 47:54:ad:3d:40:33:1e:d6:0b:79:9e:c0:a8:ca:3e:a1:39:d9: 58:35:09:c9:f6:eb:04:1b:3b:dd:01:33:3b:cd:3b:dd:7c:8a: 7c:3e:a3:75:3a:6e:7f:86:ed:fb:57:08:fc:08:eb:44:d5:28: ab:66:58:9d:3d:e8:c6:6e:94:51:b7:2b:c5:29:51:0f:c5:5a: b9:b4:51:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUxMDE4MTkxMzM0WhcNMjUxMDI1MTkxMzM0WjAYMRYwFAYD VQQDEw02OGYzZTZkZS05MmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ucGB1n/Ekr/kygH2QLTjaX5pH2Bim7+eHERCS7LNLUomMgRiJf1RZLHRJ3K 7EUWjMhVms8uciEUM/hPZCO0IhKm9WRSut6pjkiIYYG2/x50d9IsPoJ//2XhK567 pRJI9PNUaNPVfTNWN0Zyl+h4yfUPC/WoMnGBKb/zpzF9152RLqqgyeODf/0egCPO URISBSUhJkUDI43q07Q3szieJVtq6Q0l89+IlP0oasS8uMSLBC3bnbxxoZZs9REn Tr+gdEvp3D+lpdII/NKGs6q4LhFeuuG2LVziF9vGTULzp0vlcfnsmWcg5BtEicm0 lw9lAFXq2oIW03ETsbLBK/QinQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYEx9gJ 7u4LtUsTcwnNYjKLthM9MB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaSTHsmJ2Q91r+nF76NwQD5Xi9jB0GwLjkkzKyxiEHB/NN4kLzaog2 Aft211KEHZFeQzdISyMSmSk6tA4EckdydJAfC7WgGzH62l9H42tY48OSq6lOQKM+ 7dQ7oZIMSSY8b0MGNTSgg/JSM2dbnAdrrUSkTNGGnt068Mx24v6S0EP9OZFdJeu7 MssHA+a4ok3ebKLLGAsQ/rsrH+I0dCvvYQugPgOeF1t8UtnvXrLWixN2yQhHVK09 QDMe1gt5nsCoyj6hOdlYNQnJ9usEGzvdATM7zTvdfIp8PqN1Om5/hu37Vwj8COtE 1SirZlidPejGbpRRtyvFKVEPxVq5tFHv -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:57 2025 by rpki-client