$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: c4vgcMflsA+FL0XGPdJVCtKOIshN5Oh+o0jHO+mf/bg= Subject key identifier: 96:32:5F:3E:E8:23:F4:18:77:42:A3:13:06:B6:FC:08:0E:2E:FA:40 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A2C Signing time: Mon 20 Oct 2025 20:34:41 +0000 Manifest this update: Mon 20 Oct 2025 20:34:40 +0000 Manifest next update: Mon 27 Oct 2025 20:34:40 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: gvuKTAxpOcdgEZQYIlhnCoI9FweJ+r4fWNiOoLh0HNM=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: r8n2MjMUHYmVdEJ+7Xp+vud9daXi0fU7s6dyyzC3DT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Oct 20 20:34:40 2025 GMT Not After : Oct 27 20:34:40 2025 GMT Subject: CN=68f69ce0-5e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:7e:d2:0b:98:05:f5:f8:91:23:92:d3:84: 56:22:43:0b:aa:a9:7e:c8:6f:8b:5e:79:f3:73:0f: 2d:4b:dc:7e:0a:8d:1d:78:79:fb:df:5e:df:b6:c3: 4f:0e:52:c2:ca:51:6d:a0:08:34:52:b0:50:3c:b8: 2d:04:5e:27:4f:14:ad:04:60:9c:c9:88:35:cb:ad: 96:17:df:de:77:db:c2:b4:5c:08:0a:9b:c4:c5:24: 60:86:31:ce:b6:5e:0e:1c:f4:bd:00:fd:c9:df:1b: ab:b4:a5:ee:ef:41:01:49:bc:a2:ef:6d:bc:1d:b2: 08:0a:56:c9:50:13:c7:b7:7d:ee:ac:b4:3a:9d:e5: cb:5b:33:5b:a2:38:2f:3d:c0:e1:49:25:d5:10:68: 28:be:57:23:5c:92:c5:3e:c0:94:f9:24:bc:b9:9e: 97:7d:eb:76:0a:c1:5a:10:0d:7d:23:14:f5:1b:9b: 19:6e:0c:9c:7d:43:3f:a4:47:6e:e7:6d:63:29:ec: b2:65:74:c2:99:7e:be:2c:1c:35:6a:e5:0e:1f:c0: a2:25:e6:83:81:15:04:ce:e4:56:85:43:d1:9f:ab: b5:4d:61:08:50:9a:7d:9e:72:b5:bb:9a:e1:f9:1d: 2b:14:61:bc:d6:a8:c1:cd:ef:8e:ef:db:e2:13:65: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:5F:3E:E8:23:F4:18:77:42:A3:13:06:B6:FC:08:0E:2E:FA:40 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7f:e1:63:3f:70:19:fa:6f:9b:34:d1:0f:e8:5f:a3:2a:ee: 48:88:7a:cd:fb:95:e0:63:0b:7b:08:ed:b6:a0:10:a0:0d:db: 07:08:6a:09:b9:28:b6:93:05:5e:b7:c8:10:29:58:ff:1c:52: 65:1d:65:05:00:9c:96:25:a8:e6:79:ad:85:a6:5b:8d:5d:0e: ba:1d:10:73:ed:89:03:4b:1a:d0:4c:e4:47:af:f9:92:b6:dd: 4c:af:e8:70:76:b4:99:d6:57:14:48:99:ed:e8:5b:e9:db:08: e3:11:93:77:02:a9:e8:0b:a5:2d:e8:05:7a:f6:7a:a7:2f:e7: 48:43:c6:d0:f6:3c:5d:42:f5:ce:47:24:f5:c9:8e:57:e5:99: 37:d9:74:e1:74:c0:0b:5a:48:5d:a1:83:62:a8:67:35:b3:48: b9:0a:ca:a0:fa:87:35:1a:8b:a2:12:19:ff:fc:b4:f8:5d:a0: 43:e0:50:39:60:68:b1:03:b4:01:14:90:86:54:33:df:c2:99: b7:5f:1e:f1:dd:5b:5a:35:57:35:53:6e:03:c8:fc:58:45:6e: 84:c1:d2:ff:3b:bb:23:58:2c:93:7d:f3:1e:ba:af:b8:e7:49: a7:a6:73:4b:4d:75:99:71:e5:b0:90:76:4a:c5:bb:84:a3:65: d2:dd:2d:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUxMDIwMjAzNDQwWhcNMjUxMDI3MjAzNDQwWjAYMRYwFAYD VQQDEw02OGY2OWNlMC01ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGN+0guYBfX4kSOS04RWIkMLqql+yG+LXnnzcw8tS9x+Co0deHn7317ftsNP DlLCylFtoAg0UrBQPLgtBF4nTxStBGCcyYg1y62WF9/ed9vCtFwICpvExSRghjHO tl4OHPS9AP3J3xurtKXu70EBSbyi7228HbIIClbJUBPHt33urLQ6neXLWzNbojgv PcDhSSXVEGgovlcjXJLFPsCU+SS8uZ6Xfet2CsFaEA19IxT1G5sZbgycfUM/pEdu 521jKeyyZXTCmX6+LBw1auUOH8CiJeaDgRUEzuRWhUPRn6u1TWEIUJp9nnK1u5rh +R0rFGG81qjBze+O79viE2XUCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYyXz7o I/QYd0KjEwa2/AgOLvpAMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtf+FjP3AZ+m+bNNEP6F+jKu5IiHrN+5XgYwt7CO22oBCgDdsHCGoJ uSi2kwVet8gQKVj/HFJlHWUFAJyWJajmea2FpluNXQ66HRBz7YkDSxrQTORHr/mS tt1Mr+hwdrSZ1lcUSJnt6Fvp2wjjEZN3AqnoC6Ut6AV69nqnL+dIQ8bQ9jxdQvXO RyT1yY5X5Zk32XThdMALWkhdoYNiqGc1s0i5Csqg+oc1GouiEhn//LT4XaBD4FA5 YGixA7QBFJCGVDPfwpm3Xx7x3VtaNVc1U24DyPxYRW6EwdL/O7sjWCyTffMeuq+4 50mnpnNLTXWZceWwkHZKxbuEo2XS3S1/ -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:04 2025 by rpki-client