$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: FXlpFlTP2NNoiI33HObZcXR1BciZjrhGqESx4bkxkrs= Subject key identifier: 2F:31:3C:9D:C7:8A:D5:6F:01:96:21:35:FB:05:52:D8:08:3A:3A:90 Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 1066 Signing time: Sat 18 Oct 2025 18:15:51 +0000 Manifest this update: Sat 18 Oct 2025 18:15:51 +0000 Manifest next update: Sat 25 Oct 2025 18:15:50 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: NT5aMNrlyC37cxOr7QTOFISTPeZu0mD/LX4EoiDHDTA=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: MZyOtnzSYRn5H5siK78kl2QRZxsNV35INBP6UfbHk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Oct 18 18:15:51 2025 GMT Not After : Oct 25 18:15:50 2025 GMT Subject: CN=68f3d957-5ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:70:70:f5:87:eb:b9:d1:a1:ba:86:cf:8c: ff:86:3d:37:50:9e:e8:ea:c4:36:03:84:68:2b:a9: 48:2d:93:d8:7c:fa:24:59:cb:ed:67:08:9d:02:cc: 46:4d:24:74:a2:89:33:88:68:be:ca:21:d7:d9:00: 89:fd:fc:f3:ce:41:7b:cc:e9:38:a0:1f:73:cc:68: 61:b9:42:b7:f0:8f:64:5f:ba:49:e4:9e:95:a1:87: 66:6b:68:e3:da:03:bc:8b:c4:0f:f4:f9:c5:6c:b5: 54:7c:fe:21:bf:79:fc:82:3d:6c:e8:27:44:fa:b0: 83:35:4d:ca:16:9e:63:31:5d:a7:74:f9:59:26:9f: d0:41:ba:83:e1:dd:d2:69:12:36:45:2f:3e:09:30: 8c:37:5c:f7:1b:11:8f:a1:57:6f:92:42:c0:4a:26: 8e:56:30:f5:c6:b5:b0:b8:c8:c6:48:95:75:e9:2f: b3:eb:73:63:85:bd:69:da:1c:60:ac:ec:15:bd:9e: d3:cf:f7:fd:7d:9b:9e:a4:79:76:89:c2:e9:9c:5a: fd:11:22:0d:00:6e:55:ea:58:d2:08:6c:95:59:ea: e1:e1:16:a1:52:5e:43:97:84:5e:e3:32:d8:88:16: b6:92:61:27:c8:14:9a:2e:81:92:e4:f4:3a:a5:28: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:3C:9D:C7:8A:D5:6F:01:96:21:35:FB:05:52:D8:08:3A:3A:90 X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:48:85:27:c5:dd:02:00:a7:b5:9f:b1:f2:61:a1:4c:ee: d0:fa:f1:af:7a:f3:b8:a6:be:dd:a7:50:9f:c0:7a:3b:74:f9: 92:9a:cb:64:fd:7e:ca:7d:e4:7b:97:87:2d:87:de:87:10:ff: a4:5d:f6:d9:92:83:29:3d:b6:f9:dd:c2:84:d4:6a:4e:1c:28: 7f:29:ec:dc:99:b2:6b:ea:7a:64:3b:94:21:6e:0b:c9:e6:94: fe:c9:6d:76:8b:0b:06:95:fc:d6:df:28:7d:ea:13:ff:a5:61: e8:84:82:b7:54:19:77:f6:26:6f:50:ca:dc:ce:dd:fd:c4:94: 19:c6:3f:e8:b1:03:a2:11:14:d1:92:98:bc:47:8c:ce:b1:2f: c4:d7:2c:92:50:15:0a:f6:81:a6:fd:2b:de:b2:1e:41:e4:7b: fc:9d:5f:9d:86:c4:dc:e5:f7:73:df:bc:35:97:31:ea:cc:87: ea:b7:bd:da:bb:db:35:b2:4f:a1:7e:45:ae:5f:03:d8:0e:ec: f3:87:ae:67:4e:dc:14:19:93:6e:46:91:8a:6f:a3:f7:08:6f: 48:15:ad:1f:4a:4f:3a:0f:2e:13:5e:9a:53:00:cc:60:05:e2: 0d:c7:80:7c:92:e5:83:b1:68:56:0e:b2:0c:5b:e0:f1:f9:bf: 57:d6:e9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjUxMDE4MTgxNTUxWhcNMjUxMDI1MTgxNTUwWjAYMRYwFAYD VQQDEw02OGYzZDk1Ny01YWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx89wcPWH67nRobqGz4z/hj03UJ7o6sQ2A4RoK6lILZPYfPokWcvtZwidAsxG TSR0ookziGi+yiHX2QCJ/fzzzkF7zOk4oB9zzGhhuUK38I9kX7pJ5J6VoYdma2jj 2gO8i8QP9PnFbLVUfP4hv3n8gj1s6CdE+rCDNU3KFp5jMV2ndPlZJp/QQbqD4d3S aRI2RS8+CTCMN1z3GxGPoVdvkkLASiaOVjD1xrWwuMjGSJV16S+z63Njhb1p2hxg rOwVvZ7Tz/f9fZuepHl2icLpnFr9ESINAG5V6ljSCGyVWerh4RahUl5Dl4Re4zLY iBa2kmEnyBSaLoGS5PQ6pSgcZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8xPJ3H itVvAZYhNfsFUtgIOjqQMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEiEiFJ8XdAgCntZ+x8mGhTO7Q+vGvevO4pr7dp1CfwHo7dPmSmstk /X7KfeR7l4cth96HEP+kXfbZkoMpPbb53cKE1GpOHCh/KezcmbJr6npkO5QhbgvJ 5pT+yW12iwsGlfzW3yh96hP/pWHohIK3VBl39iZvUMrczt39xJQZxj/osQOiERTR kpi8R4zOsS/E1yySUBUK9oGm/Svesh5B5Hv8nV+dhsTc5fdz37w1lzHqzIfqt73a u9s1sk+hfkWuXwPYDuzzh65nTtwUGZNuRpGKb6P3CG9IFa0fSk86Dy4TXppTAMxg BeINx4B8kuWDsWhWDrIMW+Dx+b9X1um0 -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:30 2025 by rpki-client