$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: CkMnbSDNo4bYcI6MWtUalbbS1AD6jvR5H2NgqLOWwmU= Subject key identifier: 44:23:BC:A7:C4:2E:B1:83:89:37:A6:73:97:F7:84:FE:E4:18:4D:E8 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0C93 Signing time: Sat 18 Oct 2025 19:04:23 +0000 Manifest this update: Sat 18 Oct 2025 19:04:22 +0000 Manifest next update: Sat 25 Oct 2025 19:04:22 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: HSCWs2yh4IJ7K6D5IlsKO4fnMrMZjnWCBdmf7q3gRVI=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: lPRimtAIP991qjg2zYQ9MB+u2MSznOVIg7X2f5y/SnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Oct 18 19:04:22 2025 GMT Not After : Oct 25 19:04:22 2025 GMT Subject: CN=68f3e4b7-de0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:b3:b3:2b:8b:bf:c7:5e:4f:17:20:af:66: 6c:41:2e:a2:36:c4:e0:d0:a8:d9:43:8e:9f:bd:7e: 5f:d8:92:df:ea:e4:fc:fc:a3:b5:55:07:a6:10:9a: 2f:c2:27:6e:6d:45:c9:0e:65:f6:f8:26:53:55:82: 02:e5:3f:ba:b5:12:f9:e4:81:ae:f9:ae:86:d8:db: 7f:98:af:e4:6e:fe:dd:a5:60:5c:52:91:92:1b:57: 6a:95:c8:1c:12:ca:fe:24:a2:2d:3b:87:ad:2a:9c: 10:5e:55:33:31:5e:f7:2b:b1:90:9a:67:cc:06:bf: ae:16:0f:89:7c:f3:b1:1a:fc:29:0a:2e:ed:7b:74: 12:9a:6a:56:e2:6c:ae:39:64:5f:ed:03:b6:da:c4: 2b:f0:94:e4:66:e6:94:51:02:b4:d4:1f:3d:8f:70: 19:99:fb:69:7b:b0:bc:8d:47:80:82:cf:46:67:19: 03:2c:23:2c:f3:0f:40:2a:14:d1:3b:0c:be:93:6e: 1e:65:81:2f:76:9d:05:58:25:c0:34:29:0a:98:ed: bb:48:a9:ee:2a:9f:73:7c:0e:57:50:09:ef:ef:e0: b4:4d:ed:55:9f:9b:21:2d:8e:92:36:ce:71:fc:e2: 29:b2:4c:0e:d6:6e:d1:1a:a4:89:9a:86:92:f3:85: 92:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:23:BC:A7:C4:2E:B1:83:89:37:A6:73:97:F7:84:FE:E4:18:4D:E8 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cb:0c:8a:1b:a6:d5:73:54:ee:00:2b:74:52:f0:77:76:ab: 3d:b9:10:14:55:e1:00:46:39:b0:01:de:5c:bc:99:f5:7a:da: 2c:ce:4e:54:2f:ad:59:a4:10:b2:3e:11:65:5c:24:a7:d4:a3: 7d:58:a9:8c:45:5a:9f:9b:c6:2e:7d:d0:a2:1b:dd:44:04:23: 09:6f:36:e1:2b:85:03:47:a5:69:32:9f:03:fe:20:80:b4:37: d3:3a:5b:fe:01:41:12:b0:ad:e5:36:77:fd:d8:86:8b:6f:a5: 86:d7:91:53:c9:74:9a:88:09:9c:4a:a5:8b:e0:f3:0a:c1:bb: 52:8c:fe:37:9b:51:d8:5a:b2:ee:89:70:17:12:4d:96:43:d1: 69:8a:e4:1e:52:0d:5f:ec:bf:c3:4d:31:3a:04:b5:ac:21:01: 78:1a:5d:07:e3:6d:36:b6:ba:c8:29:bc:44:ce:53:0c:bc:8b: f3:f0:45:e7:1c:25:e8:cb:ee:62:b3:b8:06:c7:ed:33:a6:ae: 9d:86:06:49:e6:c6:5e:00:82:80:90:91:76:15:fb:ec:08:45: c0:c2:0b:12:ed:a4:4b:70:37:2b:28:10:69:52:50:4c:a7:4e: 32:9f:fe:43:1a:d9:44:54:a8:06:15:02:8e:e4:d1:08:a4:14: 11:61:d9:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjUxMDE4MTkwNDIyWhcNMjUxMDI1MTkwNDIyWjAYMRYwFAYD VQQDEw02OGYzZTRiNy1kZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1KzsyuLv8deTxcgr2ZsQS6iNsTg0KjZQ46fvX5f2JLf6uT8/KO1VQemEJov widubUXJDmX2+CZTVYIC5T+6tRL55IGu+a6G2Nt/mK/kbv7dpWBcUpGSG1dqlcgc Esr+JKItO4etKpwQXlUzMV73K7GQmmfMBr+uFg+JfPOxGvwpCi7te3QSmmpW4myu OWRf7QO22sQr8JTkZuaUUQK01B89j3AZmftpe7C8jUeAgs9GZxkDLCMs8w9AKhTR Owy+k24eZYEvdp0FWCXANCkKmO27SKnuKp9zfA5XUAnv7+C0Te1Vn5shLY6SNs5x /OIpskwO1m7RGqSJmoaS84WSQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQjvKfE LrGDiTemc5f3hP7kGE3oMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnywyKG6bVc1TuACt0UvB3dqs9uRAUVeEARjmwAd5cvJn1etoszk5U L61ZpBCyPhFlXCSn1KN9WKmMRVqfm8YufdCiG91EBCMJbzbhK4UDR6VpMp8D/iCA tDfTOlv+AUESsK3lNnf92IaLb6WG15FTyXSaiAmcSqWL4PMKwbtSjP43m1HYWrLu iXAXEk2WQ9FpiuQeUg1f7L/DTTE6BLWsIQF4Gl0H4202trrIKbxEzlMMvIvz8EXn HCXoy+5is7gGx+0zpq6dhgZJ5sZeAIKAkJF2FfvsCEXAwgsS7aRLcDcrKBBpUlBM p04yn/5DGtlEVKgGFQKO5NEIpBQRYdlM -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:37 2025 by rpki-client