$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: 8SpmP2Gkdn2ZfN5pngTYNoMvlNdgkpHNOSzjLaEYkjk= Subject key identifier: 40:F9:A8:A5:8C:F6:8D:1B:43:D3:B3:35:73:F6:CB:05:47:4D:A2:3B Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 157C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 156F Signing time: Sat 18 Oct 2025 17:13:36 +0000 Manifest this update: Sat 18 Oct 2025 17:13:35 +0000 Manifest next update: Sat 25 Oct 2025 17:13:35 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: nRwdg1rohOfcOE7uVBTkGb78GNyZroaCLBtuszJMXhY=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5500 (0x157c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Oct 18 17:13:35 2025 GMT Not After : Oct 25 17:13:35 2025 GMT Subject: CN=68f3cac0-bedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:af:17:58:6e:68:c0:75:7c:3c:28:74:31: 3a:23:27:66:48:4d:9a:7a:8d:41:7a:0a:28:1e:c6: d7:6b:f4:93:ef:07:14:dd:72:a8:f9:d0:66:3e:52: 9b:b7:59:3a:46:f6:c4:14:c0:57:71:a0:74:5d:37: 42:fa:76:70:cc:60:c2:dc:51:0d:7b:b5:76:40:4f: d9:00:35:75:f5:0d:42:b8:e5:fb:bb:e1:3e:24:4e: d1:42:86:d9:90:14:36:6d:4a:74:b3:27:32:a3:90: 8a:bb:ca:5e:55:c0:9c:71:86:83:fc:f4:5b:bb:dd: 24:48:eb:e8:f4:a9:01:d7:76:3b:2c:e3:af:fc:d4: a5:9d:fa:4d:38:d5:b2:c8:22:64:0a:98:9a:61:80: a9:ff:78:ac:18:bb:eb:df:2f:6e:c6:cc:c8:92:d7: 49:d7:f8:fe:dc:ae:ee:76:0f:2a:dc:bc:b9:7c:80: 88:2a:74:39:44:63:05:ae:26:41:d5:af:32:08:0c: 8a:26:50:96:f3:d6:a1:04:13:4e:0f:93:d2:2e:2f: b1:dc:47:0e:20:08:36:19:76:ba:55:83:a8:b0:51: 84:2d:68:0f:78:a5:fb:54:c1:1f:5a:00:94:4a:25: 43:18:91:d1:d3:98:64:ca:19:ce:11:d6:8c:76:6a: 3e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F9:A8:A5:8C:F6:8D:1B:43:D3:B3:35:73:F6:CB:05:47:4D:A2:3B X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2e:8e:6e:b5:d6:e4:8d:72:0f:9b:9c:b3:4a:13:71:ca:e8: 21:42:23:90:e8:df:cc:a9:cd:51:71:d9:89:8c:99:3d:e8:7d: 92:dc:fe:be:c5:11:9e:62:10:88:e8:40:4c:f8:0f:78:1e:ff: 9a:0b:64:6c:17:03:a5:d3:38:c7:e0:8e:71:87:49:5f:8e:4d: 19:40:39:f0:e1:c5:fe:a3:aa:df:3c:b1:28:ca:4d:61:8d:c3: a3:bb:5a:72:54:83:0d:33:aa:26:f8:d7:18:8f:87:05:77:5d: 81:b9:23:7a:fc:21:ad:ac:5b:77:2d:d8:2d:5a:76:1b:15:92: 12:94:b7:a5:02:3a:0b:8e:20:95:d1:bf:15:e6:3a:c4:75:0e: 07:d6:64:5a:d0:f9:35:d4:7a:2d:46:2b:45:26:a1:db:1f:5c: ab:eb:e1:36:8b:b3:9c:a1:64:45:f8:f0:2f:72:51:1a:b0:fd: 31:59:f2:d3:85:b2:c4:78:83:ef:3e:94:e4:f4:19:8d:93:97: c2:4b:2a:b2:cd:d1:a4:a6:7a:ae:a4:a3:a8:69:fb:46:1e:2e: 81:b0:c5:96:dc:b2:5f:1b:78:80:81:bc:e1:b1:7d:61:e0:58: 4f:75:73:d0:e2:87:a3:43:b8:ab:49:2b:68:03:b5:db:58:45: b3:ae:d2:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUxMDE4MTcxMzM1WhcNMjUxMDI1MTcxMzM1WjAYMRYwFAYD VQQDEw02OGYzY2FjMC1iZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eSvF1huaMB1fDwodDE6IydmSE2aeo1BegooHsbXa/ST7wcU3XKo+dBmPlKb t1k6RvbEFMBXcaB0XTdC+nZwzGDC3FENe7V2QE/ZADV19Q1CuOX7u+E+JE7RQobZ kBQ2bUp0sycyo5CKu8peVcCccYaD/PRbu90kSOvo9KkB13Y7LOOv/NSlnfpNONWy yCJkCpiaYYCp/3isGLvr3y9uxszIktdJ1/j+3K7udg8q3Ly5fICIKnQ5RGMFriZB 1a8yCAyKJlCW89ahBBNOD5PSLi+x3EcOIAg2GXa6VYOosFGELWgPeKX7VMEfWgCU SiVDGJHR05hkyhnOEdaMdmo+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED5qKWM 9o0bQ9OzNXP2ywVHTaI7MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNLo5utdbkjXIPm5yzShNxyughQiOQ6N/Mqc1RcdmJjJk96H2S3P6+ xRGeYhCI6EBM+A94Hv+aC2RsFwOl0zjH4I5xh0lfjk0ZQDnw4cX+o6rfPLEoyk1h jcOju1pyVIMNM6om+NcYj4cFd12BuSN6/CGtrFt3LdgtWnYbFZISlLelAjoLjiCV 0b8V5jrEdQ4H1mRa0Pk11HotRitFJqHbH1yr6+E2i7OcoWRF+PAvclEasP0xWfLT hbLEeIPvPpTk9BmNk5fCSyqyzdGkpnqupKOoaftGHi6BsMWW3LJfG3iAgbzhsX1h 4FhPdXPQ4oejQ7irSStoA7XbWEWzrtIr -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:10 2025 by rpki-client