$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: V/lgxGoHlkQAERxAZlrW433S9keCEUx5RV3N4cgxCYs= Subject key identifier: 22:B8:52:73:B9:D8:82:F5:BA:73:AD:9C:B6:B4:96:21:A9:75:C0:5A Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 0805 Signing time: Sat 18 Oct 2025 22:12:45 +0000 Manifest this update: Sat 18 Oct 2025 22:12:44 +0000 Manifest next update: Sat 25 Oct 2025 22:12:44 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: xo/cif6RArL5xU0Y9FH35CcLCoBJQVbnt1hUbpv/2z8=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: qFL74VsWk0alCoqYasNXx5dBtFR40fQNiPpQ09RmOwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Oct 18 22:12:44 2025 GMT Not After : Oct 25 22:12:44 2025 GMT Subject: CN=68f410dd-8a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:bf:08:e4:ed:10:a7:1a:7f:63:31:f6:5b: ad:9d:96:64:38:af:88:bd:26:09:0a:da:07:55:a8: 2f:45:52:d2:1c:ae:5a:ab:15:f1:4b:92:1e:24:8f: 2f:49:1d:95:fe:cf:8c:d0:12:a2:0b:6f:05:0e:2f: ef:f9:f7:b7:d8:f5:28:2e:9f:e5:de:52:27:2c:a7: dc:5f:9f:67:34:bf:25:e2:33:d4:bd:52:2a:21:fe: 3f:95:1b:75:77:4c:53:f9:fe:51:08:4c:d6:7f:0e: 0f:5c:f0:5c:f8:95:c2:04:b6:95:38:98:fd:e0:9f: cb:8b:74:e9:e7:1d:74:b6:54:28:cf:23:4f:4f:87: 35:8b:14:df:87:65:03:b1:64:61:07:01:62:8c:29: 3b:c7:a3:32:b8:f2:5d:f2:8f:99:77:e6:e1:f1:c4: 35:3e:99:e7:0d:1d:dc:60:4c:59:eb:3a:fb:e7:b2: ed:ef:32:04:bf:56:3e:87:68:3b:82:43:f4:cb:8c: 89:f3:f5:88:a1:98:45:4a:03:3b:d4:ea:cd:c2:4a: d2:03:54:a3:22:dd:3f:74:19:7a:44:93:a3:67:02: 04:07:62:8e:ef:6a:c5:f4:ad:44:e3:f6:16:5f:d7: 44:58:e7:3c:ae:2f:ca:a0:c3:77:bb:86:67:ee:1a: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B8:52:73:B9:D8:82:F5:BA:73:AD:9C:B6:B4:96:21:A9:75:C0:5A X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9b:d3:30:97:cf:e5:32:ba:07:8e:0a:ae:4c:3d:98:3c:a2: 75:74:ca:ff:99:ac:47:4c:35:c0:bd:4b:d1:ac:12:9c:5a:67: 5e:a0:ba:89:c8:ad:bb:82:f1:63:4b:59:3b:af:c9:7a:31:b2: d8:24:ab:11:3e:50:90:b3:19:2e:0d:e9:04:bc:c8:b4:e5:ba: d4:5c:a6:c0:cd:f0:5f:4a:01:88:c2:5e:33:a9:83:90:50:a0: 65:08:5d:76:71:94:12:e2:95:d4:44:88:25:47:e3:06:98:c6: a0:c0:4d:81:1e:27:27:6b:1b:b6:f5:86:75:36:3d:5c:2d:ee: 11:f6:ba:3f:26:ff:b0:6c:cd:55:e8:db:d1:70:66:49:8c:b6: c2:7d:a8:2e:86:84:58:0e:35:df:89:fd:8e:d3:bc:a1:73:c9: ce:82:f4:69:7a:fd:f5:2f:bc:6e:ba:4c:4f:21:53:ae:b5:1d: f2:3f:0e:ed:ce:f8:19:e9:6c:17:e0:49:d4:2b:73:65:ab:c0: c5:8a:f5:df:93:f7:6d:dd:52:59:9c:97:9b:3f:d6:e9:cb:47: 60:53:90:ca:dd:06:dd:37:2a:26:98:48:0f:76:a2:61:d9:54: c4:3f:bf:e9:ce:f8:6c:73:75:27:34:a2:1c:8d:9d:07:bf:dd: 84:09:fb:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUxMDE4MjIxMjQ0WhcNMjUxMDI1MjIxMjQ0WjAYMRYwFAYD VQQDEw02OGY0MTBkZC04YTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8O/COTtEKcaf2Mx9lutnZZkOK+IvSYJCtoHVagvRVLSHK5aqxXxS5IeJI8v SR2V/s+M0BKiC28FDi/v+fe32PUoLp/l3lInLKfcX59nNL8l4jPUvVIqIf4/lRt1 d0xT+f5RCEzWfw4PXPBc+JXCBLaVOJj94J/Li3Tp5x10tlQozyNPT4c1ixTfh2UD sWRhBwFijCk7x6MyuPJd8o+Zd+bh8cQ1PpnnDR3cYExZ6zr757Lt7zIEv1Y+h2g7 gkP0y4yJ8/WIoZhFSgM71OrNwkrSA1SjIt0/dBl6RJOjZwIEB2KO72rF9K1E4/YW X9dEWOc8ri/KoMN3u4Zn7hrh7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCK4UnO5 2IL1unOtnLa0liGpdcBaMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSm9Mwl8/lMroHjgquTD2YPKJ1dMr/maxHTDXAvUvRrBKcWmdeoLqJ yK27gvFjS1k7r8l6MbLYJKsRPlCQsxkuDekEvMi05brUXKbAzfBfSgGIwl4zqYOQ UKBlCF12cZQS4pXURIglR+MGmMagwE2BHicnaxu29YZ1Nj1cLe4R9ro/Jv+wbM1V 6NvRcGZJjLbCfaguhoRYDjXfif2O07yhc8nOgvRpev31L7xuukxPIVOutR3yPw7t zvgZ6WwX4EnUK3Nlq8DFivXfk/dt3VJZnJebP9bpy0dgU5DK3QbdNyommEgPdqJh 2VTEP7/pzvhsc3UnNKIcjZ0Hv92ECft0 -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:23 2025 by rpki-client