$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: EHsRzD/rgwhIChPEtd69CgapKqz8OZDtK8PKvfJ0ZnA= Subject key identifier: CF:E1:CF:69:AF:4F:E7:B2:73:71:C4:02:AC:F3:9E:84:A0:A0:CA:84 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0222 Signing time: Sun 19 Oct 2025 04:16:18 +0000 Manifest this update: Sun 19 Oct 2025 04:16:17 +0000 Manifest next update: Sun 26 Oct 2025 04:16:17 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: CRQVWf7myqb6ExI0LZ47RDPe741WP/niVEFSwUj62ls=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: U2IhKx29cFb2HRrMdKByFOSugmOt/xf7Hgnc2t5fDH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Oct 19 04:16:17 2025 GMT Not After : Oct 26 04:16:17 2025 GMT Subject: CN=68f46611-1269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1e:ee:4c:f0:a9:d9:ea:6e:25:e1:0b:e2:e2: 8c:a9:f5:55:a7:fc:ca:75:a9:b5:05:73:14:c3:ff: 0b:2c:73:19:a0:d3:c0:06:f0:58:33:0b:7c:75:83: d6:c2:22:28:f4:a1:7f:7a:d9:0f:ad:85:03:68:84: 80:f7:f6:3e:c1:8c:e0:aa:71:29:50:cf:85:55:83: 8c:5c:c7:6d:1e:a5:bc:06:f7:75:1e:2a:68:02:80: a2:9d:b0:ca:6e:ef:98:b4:a3:c6:9d:09:a7:b8:98: ec:4b:62:e3:31:f1:3d:1b:65:0c:b2:a3:8b:24:15: 29:06:f7:e8:01:4a:45:db:05:37:1b:71:71:56:fc: 34:c5:ba:77:22:25:e8:2c:76:41:e3:fe:12:2f:c3: a9:17:cd:db:5b:70:e2:8c:44:e6:cf:08:bc:f8:52: 5a:73:f3:01:74:30:f7:34:49:a1:04:af:27:7c:5d: f4:56:13:6a:c2:42:d4:e5:25:6a:02:60:31:09:fa: 71:32:1e:8f:69:f2:f8:13:08:cc:1d:09:c1:70:95: b6:50:f6:64:40:c9:a1:bc:ac:88:74:94:be:b7:84: d9:10:73:25:7e:b2:25:1a:ae:b5:16:e8:0a:6b:71: a1:2c:49:0a:78:f1:3f:e4:e8:40:94:94:1f:51:04: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E1:CF:69:AF:4F:E7:B2:73:71:C4:02:AC:F3:9E:84:A0:A0:CA:84 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5d:a7:32:6c:79:42:e9:a0:ff:cf:51:84:c8:85:85:47:34: 93:6a:f0:3d:24:d9:59:a5:d0:bd:df:3b:11:29:39:0a:76:a4: 73:2d:42:b1:8c:a5:62:03:44:a6:bc:b5:e7:6e:04:ff:7c:ce: df:15:f0:01:9b:fa:3e:6a:57:d7:4b:0e:86:6e:b2:a4:65:0a: 23:91:ed:ed:95:2f:3e:4a:94:6d:e3:6c:35:b1:ee:90:88:54: 39:60:2c:c9:ad:d9:31:92:8d:92:be:74:7e:d8:a2:c1:f0:18: 02:62:60:59:7b:7b:36:aa:b6:fc:ca:d6:61:c5:58:8c:ef:f9: 05:3d:65:88:e9:3b:41:d6:8d:89:24:5f:6e:c2:58:8c:c0:23: 30:b0:64:e3:b7:4a:a6:6f:54:a4:ba:ee:6c:fc:02:b8:9a:3f: 69:d0:74:39:28:86:9d:f6:94:45:47:57:f4:8b:2a:57:85:05: e8:cd:77:d4:a6:c5:91:2a:b8:93:ef:89:dd:9c:52:48:87:de: 51:dd:44:4d:5d:a5:89:6f:71:cd:d4:be:58:87:72:39:8e:1e: 78:8f:bc:75:d5:e1:a9:d2:58:bf:ad:4c:b0:6d:34:55:d0:64: 0b:38:53:14:9e:59:02:93:81:9b:a0:e7:c7:96:8e:a1:f0:f7: da:1d:b7:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjUxMDE5MDQxNjE3WhcNMjUxMDI2MDQxNjE3WjAYMRYwFAYD VQQDEw02OGY0NjYxMS0xMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8x7uTPCp2epuJeEL4uKMqfVVp/zKdam1BXMUw/8LLHMZoNPABvBYMwt8dYPW wiIo9KF/etkPrYUDaISA9/Y+wYzgqnEpUM+FVYOMXMdtHqW8Bvd1HipoAoCinbDK bu+YtKPGnQmnuJjsS2LjMfE9G2UMsqOLJBUpBvfoAUpF2wU3G3FxVvw0xbp3IiXo LHZB4/4SL8OpF83bW3DijETmzwi8+FJac/MBdDD3NEmhBK8nfF30VhNqwkLU5SVq AmAxCfpxMh6PafL4EwjMHQnBcJW2UPZkQMmhvKyIdJS+t4TZEHMlfrIlGq61FugK a3GhLEkKePE/5OhAlJQfUQRRhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/hz2mv T+eyc3HEAqzznoSgoMqEMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCXacybHlC6aD/z1GEyIWFRzSTavA9JNlZpdC93zsRKTkKdqRzLUKx jKViA0SmvLXnbgT/fM7fFfABm/o+alfXSw6GbrKkZQojke3tlS8+SpRt42w1se6Q iFQ5YCzJrdkxko2SvnR+2KLB8BgCYmBZe3s2qrb8ytZhxViM7/kFPWWI6TtB1o2J JF9uwliMwCMwsGTjt0qmb1Skuu5s/AK4mj9p0HQ5KIad9pRFR1f0iypXhQXozXfU psWRKriT74ndnFJIh95R3URNXaWJb3HN1L5Yh3I5jh54j7x11eGp0li/rUywbTRV 0GQLOFMUnlkCk4GboOfHlo6h8PfaHbd7 -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:39 2025 by rpki-client