$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: 79bgEOGz8kEE2IyD3LZ9/KHC62XGM2H+jMLFs6WRAg0= Subject key identifier: 9E:EA:F8:50:3D:FD:6E:53:E4:8E:4E:52:73:1D:98:7B:DB:2A:A6:56 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0B29 Signing time: Sat 18 Oct 2025 20:11:33 +0000 Manifest this update: Sat 18 Oct 2025 20:11:33 +0000 Manifest next update: Sat 25 Oct 2025 20:11:33 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: Qc+EAVx0Ur+5vUENPOUiFeVUROysT1EOz9dzxJAC6OY=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: ndMYLuFm1npGXhTqyafB2ux+qylKnhbABDCIs0+SmbQ=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: DJ5UPh4W8eU78pV9FNPBPxM5RGyD7+r3WrHHI7kvMUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: Oct 18 20:11:33 2025 GMT Not After : Oct 25 20:11:33 2025 GMT Subject: CN=68f3f475-c51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:d1:19:69:b3:ef:b2:db:6e:f7:75:b7:c7: 30:0b:d1:69:48:b1:67:07:8e:2c:0d:fa:5f:5a:fa: 34:0d:d9:14:a1:64:d0:d0:4a:34:3d:c1:af:41:64: e0:d0:86:83:1e:a4:5b:87:32:23:7f:21:37:63:02: 5e:f9:1c:8f:53:4e:ec:48:e0:77:5a:20:4b:b2:0a: 42:39:5e:de:2e:3b:d8:c7:c1:2f:bf:2c:63:72:3b: d7:98:02:7c:7b:7c:87:32:28:eb:c6:39:3b:ee:39: 5d:62:3d:76:88:59:9c:42:1c:4e:00:f1:7c:b3:f2: 5f:2e:b3:fe:0e:5d:14:81:db:eb:c8:ad:d4:77:a0: 0e:fb:4f:53:42:34:43:45:69:43:39:ee:fc:84:56: f9:1d:ca:84:10:7d:5c:29:58:a3:14:44:8f:7a:0c: 22:32:d4:8a:7e:64:5c:45:8d:1d:f6:63:1d:71:fe: d3:46:73:c4:10:47:cf:16:c3:54:c2:83:8b:24:a0: d5:b9:f7:72:74:fb:2c:42:d8:95:ef:a6:cb:10:37: 0a:ff:94:7e:d9:dd:89:86:e8:ab:50:fc:5e:f4:b6: af:20:b2:45:f5:b4:92:10:d6:b2:6e:c8:1a:90:1e: 0d:1f:ea:01:31:11:c1:09:9a:7c:ae:60:ce:fb:97: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:F8:50:3D:FD:6E:53:E4:8E:4E:52:73:1D:98:7B:DB:2A:A6:56 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:b8:ea:c8:3c:9f:5f:ff:9f:f6:b0:7d:cb:65:04:65:35: fc:63:2e:30:2c:3a:a9:c4:25:54:08:ab:b6:6c:6a:98:9a:6d: 32:14:fa:d9:0b:b9:f8:03:5a:ae:da:d6:97:13:a0:02:4f:fc: a9:99:be:2e:18:19:0a:0b:dc:a3:f0:84:a4:50:c3:a0:30:58: e8:7b:be:20:81:18:eb:dd:68:df:2e:01:24:27:bb:da:0f:74: 3a:9a:f1:0d:27:11:1d:94:73:18:af:2c:c4:00:5b:d8:ce:c3: a9:0b:d4:fe:16:ad:bb:e4:f9:d5:79:57:b6:80:7f:9d:8e:d7: 6d:bf:13:41:e9:72:04:26:62:b8:c5:82:24:90:d7:21:3b:0e: 65:f7:92:48:2d:48:85:57:64:6c:3e:fe:f0:33:f3:2e:67:ff: d4:9b:d2:e4:24:2f:97:9e:af:fb:bb:ee:3f:35:d4:cf:ae:d7: e5:1c:bf:1a:a5:9b:f0:4a:40:67:d2:58:4b:be:38:d2:ce:c5: d0:1a:0d:85:a7:cc:21:80:d2:35:ec:43:82:56:a3:63:df:87: ff:40:b5:55:2e:7b:e8:17:aa:11:b9:a4:9a:68:d2:ba:42:55: 0f:31:53:73:06:2a:22:a0:52:40:18:e4:fe:15:7d:c5:1c:aa: 6e:f3:31:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjUxMDE4MjAxMTMzWhcNMjUxMDI1MjAxMTMzWjAYMRYwFAYD VQQDEw02OGYzZjQ3NS1jNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWLRGWmz77Lbbvd1t8cwC9FpSLFnB44sDfpfWvo0DdkUoWTQ0Eo0PcGvQWTg 0IaDHqRbhzIjfyE3YwJe+RyPU07sSOB3WiBLsgpCOV7eLjvYx8EvvyxjcjvXmAJ8 e3yHMijrxjk77jldYj12iFmcQhxOAPF8s/JfLrP+Dl0UgdvryK3Ud6AO+09TQjRD RWlDOe78hFb5HcqEEH1cKVijFESPegwiMtSKfmRcRY0d9mMdcf7TRnPEEEfPFsNU woOLJKDVufdydPssQtiV76bLEDcK/5R+2d2JhuirUPxe9LavILJF9bSSENaybsga kB4NH+oBMRHBCZp8rmDO+5ft0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7q+FA9 /W5T5I5OUnMdmHvbKqZWMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUmLjqyDyfX/+f9rB9y2UEZTX8Yy4wLDqpxCVUCKu2bGqYmm0yFPrZ C7n4A1qu2taXE6ACT/ypmb4uGBkKC9yj8ISkUMOgMFjoe74ggRjr3WjfLgEkJ7va D3Q6mvENJxEdlHMYryzEAFvYzsOpC9T+Fq275PnVeVe2gH+djtdtvxNB6XIEJmK4 xYIkkNchOw5l95JILUiFV2RsPv7wM/MuZ//Um9LkJC+Xnq/7u+4/NdTPrtflHL8a pZvwSkBn0lhLvjjSzsXQGg2Fp8whgNI17EOCVqNj34f/QLVVLnvoF6oRuaSaaNK6 QlUPMVNzBioioFJAGOT+FX3FHKpu8zG7 -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:56 2025 by rpki-client