$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: 8QMI1EhRxRYpNUcnujTZnkYu10aiFI7f1ngedU7ux2E= Subject key identifier: A1:10:44:C9:7C:DC:F3:99:45:71:F5:C4:54:E8:61:C0:E4:D1:41:A3 Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 0374 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 036C Signing time: Sun 19 Oct 2025 02:57:16 +0000 Manifest this update: Sun 19 Oct 2025 02:57:16 +0000 Manifest next update: Sun 26 Oct 2025 02:57:16 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: 09VinaJ8mnx/Ug5o567pk9hSvzuQIdcoyGhiiQhATRg=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: ZO4FyXUvWQjoBnjdYas53x9mwxjL1ZSYmacbdFPrIGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884 (0x374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Oct 19 02:57:16 2025 GMT Not After : Oct 26 02:57:16 2025 GMT Subject: CN=68f4538c-c981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:37:6e:d2:2b:81:a9:10:b9:99:68:30:81: 46:fe:fc:2f:f5:d5:98:51:31:c2:d1:51:c9:cf:28: da:96:ed:ff:a1:61:65:be:44:1c:41:02:12:6e:83: 0b:fb:9c:d1:4e:82:6e:6b:d4:66:df:c3:2e:3c:3d: 14:72:5f:1e:03:ae:10:57:61:4e:ca:ac:bb:cc:ee: c6:83:ee:b6:4e:2a:48:bb:ce:ed:6e:22:d7:f5:d3: 39:4f:65:d5:34:a3:b2:9a:e0:71:a1:23:2a:a4:65: 5f:f2:ff:4a:d2:0b:ff:c8:2d:b9:72:8c:01:0f:2c: e5:a3:1b:9d:b2:5d:d8:49:25:e0:95:da:6d:5c:38: 9c:62:97:24:38:ca:67:2f:5a:50:64:ca:54:99:72: 27:61:cf:c2:1c:47:9d:38:ff:24:df:cb:ec:c0:a9: 4f:66:a9:6c:0b:bc:77:2d:6b:70:74:4b:d2:93:3d: 3f:b1:60:64:b9:53:a2:17:c7:ce:3d:0d:f2:4e:93: 4e:eb:34:3f:1f:72:65:64:29:d1:31:76:cd:39:ca: 41:98:eb:1e:2a:95:b0:ef:e4:49:48:ba:d6:14:d8: e4:d4:e2:b2:c9:87:45:09:87:99:45:67:2e:4f:26: 65:f8:45:82:25:61:ab:ee:88:16:df:0a:cd:b9:17: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:44:C9:7C:DC:F3:99:45:71:F5:C4:54:E8:61:C0:E4:D1:41:A3 X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ec:c4:9d:23:84:db:a1:89:2f:f2:03:6c:09:9c:67:55:bc: a5:9c:7d:2f:23:0b:74:e2:62:dc:bc:de:4a:9b:14:8e:de:e8: c4:9b:33:07:73:77:04:e5:61:cb:c2:d4:43:8a:a1:c4:06:2b: 90:48:57:b4:4e:74:c9:f4:82:b9:d4:f1:cd:9b:00:d0:de:e5: 86:8a:a9:78:2d:1c:f5:34:cd:7d:b9:19:28:41:0e:1b:92:04: 79:19:3f:55:a5:5d:87:b6:79:70:c3:f8:d6:e4:fe:df:cf:a3: f1:47:f9:f5:9d:c8:40:d3:48:a7:5a:c8:c9:cd:07:62:4f:69: 27:78:aa:21:1a:bc:e1:3a:06:57:5a:39:32:e0:7b:77:d3:fd: 35:85:bb:09:a6:1f:b6:27:06:5b:3a:d9:0c:a4:5a:56:05:16: 69:9f:2d:31:cb:1c:d4:25:ac:b9:63:fe:92:97:97:e4:d3:ef: 83:f9:18:d3:06:06:c5:41:d5:f0:e7:cb:ea:d2:d3:ce:06:7f: 2d:6e:46:c0:71:fa:4b:cc:6b:24:ce:e2:0a:e1:fd:70:5a:0e: 6d:18:7b:75:05:c6:48:0a:70:4a:c0:8a:ed:aa:11:82:9d:46: d9:c7:af:1e:c3:1b:dc:48:f8:31:9a:a6:15:11:7d:44:d8:46: ce:55:49:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjUxMDE5MDI1NzE2WhcNMjUxMDI2MDI1NzE2WjAYMRYwFAYD VQQDEw02OGY0NTM4Yy1jOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux03btIrgakQuZloMIFG/vwv9dWYUTHC0VHJzyjalu3/oWFlvkQcQQISboML +5zRToJua9Rm38MuPD0Ucl8eA64QV2FOyqy7zO7Gg+62TipIu87tbiLX9dM5T2XV NKOymuBxoSMqpGVf8v9K0gv/yC25cowBDyzloxudsl3YSSXgldptXDicYpckOMpn L1pQZMpUmXInYc/CHEedOP8k38vswKlPZqlsC7x3LWtwdEvSkz0/sWBkuVOiF8fO PQ3yTpNO6zQ/H3JlZCnRMXbNOcpBmOseKpWw7+RJSLrWFNjk1OKyyYdFCYeZRWcu TyZl+EWCJWGr7ogW3wrNuRdO4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEQRMl8 3POZRXH1xFToYcDk0UGjMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA07MSdI4TboYkv8gNsCZxnVbylnH0vIwt04mLcvN5KmxSO3ujEmzMH c3cE5WHLwtRDiqHEBiuQSFe0TnTJ9IK51PHNmwDQ3uWGiql4LRz1NM19uRkoQQ4b kgR5GT9VpV2Htnlww/jW5P7fz6PxR/n1nchA00inWsjJzQdiT2kneKohGrzhOgZX Wjky4Ht30/01hbsJph+2JwZbOtkMpFpWBRZpny0xyxzUJay5Y/6Sl5fk0++D+RjT BgbFQdXw58vq0tPOBn8tbkbAcfpLzGskzuIK4f1wWg5tGHt1BcZICnBKwIrtqhGC nUbZx68ewxvcSPgxmqYVEX1E2EbOVUma -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:23 2025 by rpki-client