$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json) Hash identifier: LIXM+ydER+I0dNr6SPfwv48sZWHlMqh44weBzcP0B9E= Subject key identifier: BE:37:16:84:C8:5B:1C:E6:D3:E2:5E:F8:EE:F0:79:BE:3D:CC:5E:95 Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 Certificate issuer: /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft Manifest number: 0125 Signing time: Sun 19 Oct 2025 07:44:06 +0000 Manifest this update: Sun 19 Oct 2025 07:44:05 +0000 Manifest next update: Sun 26 Oct 2025 07:44:05 +0000 Files and hashes: 1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: c9sGkGMTYc+Rtlr3/OCxWgf/F2ozyf370U9Ib89Ofy4=) 2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: cLX/WlgP7K24ucXGUUtpNzmDrPk9vKJrsn64OyHEFQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891 Validity Not Before: Oct 19 07:44:05 2025 GMT Not After : Oct 26 07:44:05 2025 GMT Subject: CN=68f496c6-c706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:2e:c4:2e:8f:d1:b0:5b:3e:e4:1e:d4:06: 03:8d:ee:a4:64:ff:ae:2f:ed:69:d6:80:6d:af:b6: 80:1b:8a:b3:b1:e5:0e:22:2f:7e:99:c5:87:67:7c: 8b:aa:e5:50:3a:d3:89:70:a3:2b:17:2d:b3:30:25: 13:ce:cf:cd:a5:a7:31:3f:0c:b1:14:50:64:86:c6: 91:1a:81:c9:b2:52:b2:b3:0f:fc:7f:3f:f2:4f:52: ac:2d:9a:54:a1:8f:5b:45:b2:7b:46:35:ae:e2:1c: df:4e:99:00:39:21:9d:bf:da:d3:12:9d:18:76:6a: 94:18:0d:8e:0a:91:24:24:fd:73:9e:6e:08:be:2a: 5b:1a:0d:36:7f:1e:88:93:7c:20:47:24:3f:68:c8: 45:65:21:b5:1f:74:38:78:83:00:5a:c0:8a:d7:3a: 77:0a:34:27:52:9f:ee:26:f9:fd:02:54:32:ba:76: 6a:70:72:f0:22:06:30:ee:17:f7:c1:1e:bb:20:35: 88:52:fe:9a:0c:a8:91:35:d3:da:2b:4f:18:9a:c7: 9c:23:8b:7c:ae:d5:3f:5b:f5:75:9d:2b:c6:8f:c1: 08:87:ab:26:17:f2:30:fb:c6:2e:30:35:5c:67:2b: d6:9e:89:9d:d0:24:1b:27:1b:f7:76:01:c0:cd:68: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:16:84:C8:5B:1C:E6:D3:E2:5E:F8:EE:F0:79:BE:3D:CC:5E:95 X509v3 Authority Key Identifier: keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e1:a5:49:a8:c3:2d:a2:84:81:7c:3d:7e:b2:03:42:59:21: 21:20:1c:53:72:34:6b:59:63:48:db:b2:fa:40:78:4c:52:c9: ac:4a:75:ea:53:f5:82:ef:ac:e4:2b:68:4c:cf:d1:67:0b:0b: 22:11:be:5f:43:64:c2:56:17:ba:20:a3:bc:d1:b1:1b:c9:f1: ff:5e:22:b7:6f:ff:2d:6b:10:6d:ba:88:1d:21:d2:cd:41:36: 37:f9:c6:d5:02:4e:64:81:c0:f6:87:2d:cb:a0:40:35:3d:15: 4c:b5:95:fa:a6:88:51:a4:38:17:3a:9e:ca:29:2e:8d:96:f4: 4e:44:2c:17:61:ad:8e:e7:35:1b:97:c3:ae:ea:e2:bb:5d:69: 67:ec:0b:6f:b7:f2:f3:4c:97:3d:bc:d2:c0:87:1a:0c:46:e2: 8d:ff:4c:72:d6:b2:1b:7f:80:03:82:40:1f:48:2f:10:8f:db: 6b:39:42:d7:d9:3b:43:c1:e3:47:25:b0:98:25:82:c9:4f:38: 80:3b:2a:8e:31:c7:16:e8:a6:bf:d5:1b:c9:03:80:6a:46:85: 01:30:13:67:c8:d9:11:f2:03:52:a3:41:32:5f:0b:42:71:7b: b1:bd:bf:70:d1:ad:63:5c:a8:99:bd:ed:36:b9:ac:f6:93:68: 06:f8:1c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4 ODk3OTg4OTEwHhcNMjUxMDE5MDc0NDA1WhcNMjUxMDI2MDc0NDA1WjAYMRYwFAYD VQQDEw02OGY0OTZjNi1jNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBouxC6P0bBbPuQe1AYDje6kZP+uL+1p1oBtr7aAG4qzseUOIi9+mcWHZ3yL quVQOtOJcKMrFy2zMCUTzs/NpacxPwyxFFBkhsaRGoHJslKysw/8fz/yT1KsLZpU oY9bRbJ7RjWu4hzfTpkAOSGdv9rTEp0YdmqUGA2OCpEkJP1znm4IvipbGg02fx6I k3wgRyQ/aMhFZSG1H3Q4eIMAWsCK1zp3CjQnUp/uJvn9AlQyunZqcHLwIgYw7hf3 wR67IDWIUv6aDKiRNdPaK08YmsecI4t8rtU/W/V1nSvGj8EIh6smF/Iw+8YuMDVc ZyvWnomd0CQbJxv3dgHAzWji2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL43FoTI Wxzm0+Je+O7web49zF6VMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS Yl8xTTlDREV3UkNJbDVpSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy4aVJqMMtooSBfD1+sgNCWSEhIBxTcjRrWWNI27L6QHhMUsmsSnXq U/WC76zkK2hMz9FnCwsiEb5fQ2TCVhe6IKO80bEbyfH/XiK3b/8taxBtuogdIdLN QTY3+cbVAk5kgcD2hy3LoEA1PRVMtZX6pohRpDgXOp7KKS6NlvRORCwXYa2O5zUb l8Ou6uK7XWln7Atvt/LzTJc9vNLAhxoMRuKN/0xy1rIbf4ADgkAfSC8Qj9trOULX 2TtDweNHJbCYJYLJTziAOyqOMccW6Ka/1RvJA4BqRoUBMBNnyNkR8gNSo0EyXwtC cXuxvb9w0a1jXKiZve02uaz2k2gG+Bzd -----END CERTIFICATE-----Generated at Mon Oct 20 19:24:52 2025 by rpki-client