$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json) Hash identifier: nXDlCsiO9WSoEn0Wk7qHwYgyIoiK06bUzJnO9/jHehU= Subject key identifier: 14:68:14:84:53:20:CC:00:EF:DA:CA:80:A9:FE:79:BD:A0:33:03:F9 Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft Manifest number: 74 Signing time: Sun 19 Oct 2025 10:16:34 +0000 Manifest this update: Sun 19 Oct 2025 10:16:33 +0000 Manifest next update: Sun 26 Oct 2025 10:16:33 +0000 Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: Ov0J1WaiUEXgokrUtVQm33BAeOJYriSbehjhm2UCAr8=) 2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg=) 3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: tN7XrcdoarGJoE1RdPj/CCm6dWvl1EGT3dxhZCMygsY=) 4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: ri7YInMAbSmSsjfWYal4W711k38R/upA65HcOLcK83k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA Validity Not Before: Oct 19 10:16:33 2025 GMT Not After : Oct 26 10:16:33 2025 GMT Subject: CN=68f4ba81-8c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:87:75:fc:b2:5f:8f:6a:a2:c3:00:23:44: c0:1c:ad:13:78:25:9d:28:e4:d9:b1:fb:a0:87:8a: b1:0b:87:b0:19:b0:a2:36:0d:7b:34:d8:93:51:a6: 1f:81:db:0f:30:f6:e4:2b:a7:76:84:3a:e5:8d:f1: 75:8b:7d:76:86:c5:0a:2f:57:f2:20:43:3d:11:ce: 48:23:3c:6b:e5:b3:07:c0:f1:e6:43:aa:7a:e2:95: 83:c6:e5:52:ea:5a:ae:a7:7f:8b:ac:54:7e:e4:6c: e3:5b:12:0d:08:29:c1:b3:c2:ea:cb:09:b6:3f:1d: d8:08:50:7d:15:2f:7f:bf:e2:7f:e7:2d:7d:fa:09: a3:73:48:16:f5:3c:5c:16:48:72:cd:4d:bb:bc:16: e2:fb:34:27:70:48:51:bc:14:27:fb:da:07:50:43: ee:e4:4b:75:80:ae:e0:7e:6c:54:fc:3b:7e:fb:7a: 2d:84:59:43:de:86:6e:1f:a6:22:52:07:19:ab:ee: 7a:f5:3a:3b:46:a5:75:89:89:8f:ca:49:5a:d9:1d: 80:1c:e1:e8:fc:18:4c:f1:3b:2d:9e:62:62:e9:3f: d7:c8:d5:ca:7e:92:d5:eb:ef:56:fb:98:2a:77:23: cc:ad:aa:24:5b:0b:cd:d4:74:0c:5c:4b:f9:0e:42: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:68:14:84:53:20:CC:00:EF:DA:CA:80:A9:FE:79:BD:A0:33:03:F9 X509v3 Authority Key Identifier: keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:aa:9d:15:9e:da:0e:7d:ca:fa:f0:f9:05:9b:4c:4e:17:8f: 31:af:1c:aa:3c:08:44:5b:f5:9c:0f:96:7b:05:16:93:18:f0: 44:d1:be:d4:83:6f:56:14:be:1a:2c:f5:26:d0:ad:b6:fc:47: 65:53:0e:0b:55:d0:cc:19:0c:79:f9:02:8e:69:73:b2:34:91: 8b:96:4a:b9:a3:3d:c4:75:c4:7b:0e:74:14:71:c1:31:4f:e4: 2c:87:a5:22:cd:6f:f2:3b:14:29:18:e4:d7:2d:38:31:23:87: ba:fa:b7:3c:17:e3:19:d7:82:67:79:75:d5:8d:59:4f:d8:36: 46:4f:d0:ba:eb:11:64:33:4b:62:19:ac:8f:6c:10:9f:98:cb: eb:1e:e4:bb:67:6b:b5:d5:ec:e7:9c:f9:68:0b:2a:6a:55:fc: 32:3c:38:d1:50:1f:23:36:24:22:5e:30:14:f8:3b:b0:5f:4d: eb:4d:ac:b7:8c:fd:71:34:62:a1:a4:29:29:cd:a1:e9:6c:a8: 9d:87:66:c9:51:b2:87:e5:bd:e6:1a:6d:d3:2f:e4:6a:2c:d3: 9c:89:b2:b4:ec:5c:6c:6e:f2:42:cb:99:6b:5e:2b:bc:36:42: 6b:61:c4:4e:78:78:ad:34:2e:bb:ae:fd:c0:a5:0e:df:92:18: e9:40:18:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkE4NDExMC8GA1UEBRMoRjQ5NDk2Rjk1REY5NTg4ODFCRjRCN0U5NzJFNTFCNkYz Q0E1OURGQTAeFw0yNTEwMTkxMDE2MzNaFw0yNTEwMjYxMDE2MzNaMBgxFjAUBgNV BAMTDTY4ZjRiYTgxLThjMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCyYd1/LJfj2qiwwAjRMAcrRN4JZ0o5Nmx+6CHirELh7AZsKI2DXs02JNRph+B 2w8w9uQrp3aEOuWN8XWLfXaGxQovV/IgQz0RzkgjPGvlswfA8eZDqnrilYPG5VLq Wq6nf4usVH7kbONbEg0IKcGzwurLCbY/HdgIUH0VL3+/4n/nLX36CaNzSBb1PFwW SHLNTbu8FuL7NCdwSFG8FCf72gdQQ+7kS3WAruB+bFT8O377ei2EWUPehm4fpiJS Bxmr7nr1OjtGpXWJiY/KSVrZHYAc4ej8GEzxOy2eYmLpP9fI1cp+ktXr71b7mCp3 I8ytqiRbC83UdAxcS/kOQlmdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFGgUhFMg zADv2sqAqf55vaAzA/kwHwYDVR0jBBgwFoAU9JSW+V35WIgb9LfpcuUbbzylnfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCQTg0LzcyQzEwNDVDMDUx RjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5m by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUpTVy1WMzVXSWdiOUxmcGN1VWJienlsbmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC QTg0LzcyQzEwNDVDMDUxRjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0ln YjlMZnBjdVViYnp5bG5mby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASqnRWe2g59yvrw+QWbTE4XjzGvHKo8CERb9ZwPlnsFFpMY8ETRvtSD b1YUvhos9SbQrbb8R2VTDgtV0MwZDHn5Ao5pc7I0kYuWSrmjPcR1xHsOdBRxwTFP 5CyHpSLNb/I7FCkY5NctODEjh7r6tzwX4xnXgmd5ddWNWU/YNkZP0LrrEWQzS2IZ rI9sEJ+Yy+se5Ltna7XV7Oec+WgLKmpV/DI8ONFQHyM2JCJeMBT4O7BfTetNrLeM /XE0YqGkKSnNoelsqJ2HZslRsoflveYabdMv5Gos05yJsrTsXGxu8kLLmWteK7w2 QmthxE54eK00Lruu/cClDt+SGOlAGMM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:30 2025 by rpki-client