$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft File: c9kAkk5wFUjm4yA4gPbAlypMKRo.mft (raw, json) Hash identifier: 1AG0Ckr2KMBWltRdkvi7XyATREm/lpwUZ1NUnXK4VLw= Subject key identifier: B8:7A:98:6C:9B:06:AF:98:D2:83:9D:30:F2:CF:A9:A1:BB:BC:A2:21 Authority key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A Certificate issuer: /CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft Manifest number: C3 Signing time: Sun 19 Oct 2025 08:56:47 +0000 Manifest this update: Sun 19 Oct 2025 08:56:46 +0000 Manifest next update: Sun 26 Oct 2025 08:56:46 +0000 Files and hashes: 1: c9kAkk5wFUjm4yA4gPbAlypMKRo.crl (hash: dcDsstrcuQqY+urjWD2L4CMJCKejONuiwquwEeEaPPk=) 2: 5440C4C8848111EF9F3ECE34C4F9AE02.roa (hash: 3hnmn/EG7rhYM2a7/Cnm16lA4qC355sf3kWBw8CmIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E72, serialNumber=73D900924E701548E6E3203880F6C0972A4C291A Validity Not Before: Oct 19 08:56:46 2025 GMT Not After : Oct 26 08:56:46 2025 GMT Subject: CN=68f4a7ce-6490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:46:6d:1a:e4:81:45:2a:6a:d5:e5:1d:6d: b4:39:28:19:e7:dc:c5:f0:c2:e9:eb:16:ee:07:da: 4e:e5:d5:7c:73:79:ab:1b:bb:b8:c8:51:d6:5e:56: 35:3d:79:0e:f2:4b:7f:3a:b4:ad:30:a6:94:81:31: 6c:6d:4d:28:9e:be:a5:51:03:c9:bd:24:ec:c4:1f: 8b:a7:1d:35:06:e5:9a:d2:59:9c:3d:c7:1c:6e:ea: d9:26:69:30:f8:47:97:c2:4d:57:13:75:fd:49:30: aa:e3:c2:88:3c:fa:89:76:d6:ad:6b:11:f3:00:0b: 1f:59:3b:a2:ee:7f:77:d7:54:ba:cd:af:a6:fe:a4: bb:ee:fa:25:98:96:d4:5a:c8:9a:03:76:04:e0:52: 83:01:da:07:17:23:f1:30:74:b4:22:61:0a:4f:23: cc:4e:52:66:31:22:8f:f7:10:11:0d:06:a2:c6:10: 7e:48:30:f9:dd:24:0f:c8:4c:5b:ae:32:7c:75:8d: b0:4f:6f:11:f5:bb:13:3d:eb:ce:cb:fc:f1:11:4d: 7f:12:f9:8a:11:1f:4c:8a:ff:2f:a8:bd:43:ad:d1: 32:ec:66:09:8b:dd:c8:fe:80:27:d1:b5:de:3e:53: 74:bf:60:6d:c2:73:12:16:a6:37:3f:3d:ba:28:46: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7A:98:6C:9B:06:AF:98:D2:83:9D:30:F2:CF:A9:A1:BB:BC:A2:21 X509v3 Authority Key Identifier: keyid:73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:08:68:ee:6d:0e:92:68:71:24:f4:b9:b6:4f:12:59:7b:7a: 98:99:42:cf:56:1a:e3:d3:ef:24:e8:3a:53:46:0f:5f:05:61: b0:31:17:c4:5d:63:23:6c:f0:1a:75:3f:53:37:1a:f2:ae:2b: 47:43:16:4f:29:8d:03:73:18:41:fa:79:ad:5c:a8:ce:f8:8b: 33:b6:b7:e6:a6:da:ba:a0:1e:30:eb:66:2b:af:b6:a9:28:45: fb:0f:08:19:ee:c4:a0:f5:15:09:02:df:f5:00:06:a9:0a:6b: 3c:0c:94:24:df:88:c8:54:d4:a9:19:bd:3d:15:8e:71:e2:d8: aa:bd:b3:8d:24:0c:a2:69:92:97:39:cd:e7:90:a2:31:6b:f6: f2:5a:04:bd:b4:27:85:cd:8e:be:42:2e:10:26:35:e9:c5:a6: 3b:ba:4c:a1:a4:05:0a:8e:67:c0:fd:c8:73:54:b5:58:55:ef: 29:55:bb:5b:5c:33:ff:56:ff:a4:c0:16:dc:ad:d9:07:cf:9a: ed:cb:33:88:a2:69:79:66:b7:de:2b:dd:c5:6d:1c:0c:4a:c9: 41:c9:97:ca:05:50:9f:95:ec:f9:f5:be:1c:ff:74:5b:98:b4: dc:e7:cf:c9:52:d6:e0:59:03:5f:02:43:1f:04:47:54:e4:bd: 37:f2:21:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFNzIxMTAvBgNVBAUTKDczRDkwMDkyNEU3MDE1NDhFNkUzMjAzODgwRjZDMDk3 MkE0QzI5MUEwHhcNMjUxMDE5MDg1NjQ2WhcNMjUxMDI2MDg1NjQ2WjAYMRYwFAYD VQQDEw02OGY0YTdjZS02NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhhGbRrkgUUqatXlHW20OSgZ59zF8MLp6xbuB9pO5dV8c3mrG7u4yFHWXlY1 PXkO8kt/OrStMKaUgTFsbU0onr6lUQPJvSTsxB+Lpx01BuWa0lmcPcccburZJmkw +EeXwk1XE3X9STCq48KIPPqJdtataxHzAAsfWTui7n9311S6za+m/qS77volmJbU WsiaA3YE4FKDAdoHFyPxMHS0ImEKTyPMTlJmMSKP9xARDQaixhB+SDD53SQPyExb rjJ8dY2wT28R9bsTPevOy/zxEU1/EvmKER9Miv8vqL1DrdEy7GYJi93I/oAn0bXe PlN0v2BtwnMSFqY3Pz26KEbL5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh6mGyb Bq+Y0oOdMPLPqaG7vKIhMB8GA1UdIwQYMBaAFHPZAJJOcBVI5uMgOID2wJcqTCka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU3Mi9FNkI0NDkwMjg0 ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZVam00eUE0Z1BiQWx5cE1L Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M5a0FrazV3RlVqbTR5QTRnUGJBbHlwTUtSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU3Mi9FNkI0NDkwMjg0ODAxMUVGQUFEOEUyMzNDNEY5QUUwMi9jOWtBa2s1d0ZV am00eUE0Z1BiQWx5cE1LUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeCGjubQ6SaHEk9Lm2TxJZe3qYmULPVhrj0+8k6DpTRg9fBWGwMRfE XWMjbPAadT9TNxryritHQxZPKY0DcxhB+nmtXKjO+Isztrfmptq6oB4w62Yrr7ap KEX7DwgZ7sSg9RUJAt/1AAapCms8DJQk34jIVNSpGb09FY5x4tiqvbONJAyiaZKX Oc3nkKIxa/byWgS9tCeFzY6+Qi4QJjXpxaY7ukyhpAUKjmfA/chzVLVYVe8pVbtb XDP/Vv+kwBbcrdkHz5rtyzOIoml5ZrfeK93FbRwMSslByZfKBVCflez59b4c/3Rb mLTc58/JUtbgWQNfAkMfBEdU5L038iFW -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:24 2025 by rpki-client