$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: Xv3n6c1BsSCD6fZjRk5CbZoIevjMzuzjegUgYg1Nrwk= Subject key identifier: 73:38:1B:E6:88:48:A9:EA:A7:61:C6:EE:EC:2C:6F:33:0C:9F:91:C7 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: CF Signing time: Sun 19 Oct 2025 08:47:30 +0000 Manifest this update: Sun 19 Oct 2025 08:47:30 +0000 Manifest next update: Sun 26 Oct 2025 08:47:30 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: TQLXCuIuaWjT4/N7tSMqO/0N6/KiCLiyVeYr3q1da5o=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: qE9tjMsEAm5+y32itfsH2PJPM2TbnYvfRnIFB/pK9/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Oct 19 08:47:30 2025 GMT Not After : Oct 26 08:47:30 2025 GMT Subject: CN=68f4a5a2-e0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:27:4b:45:87:8d:83:30:31:90:c6:18:ef: f9:c3:7c:8a:6e:4d:cd:d9:6b:4c:a8:af:e8:57:05: 2e:41:9c:15:e1:28:89:77:31:42:ea:8f:10:ec:39: f0:ae:31:67:e3:f3:2d:a3:d9:2b:97:db:39:e1:61: d4:a3:cf:09:4c:3c:5d:39:af:20:62:bd:d7:1e:0f: a4:e5:02:07:ea:97:92:67:01:4e:90:81:7b:43:9c: c4:d3:e1:62:8d:7a:0d:2c:bc:3b:67:dc:10:18:99: 44:9a:8f:ac:0e:9b:59:18:c1:de:32:5a:41:3b:66: 5a:ba:21:0d:40:1f:ab:fc:24:41:e7:9a:c6:41:7d: 40:9b:b4:ba:9f:5e:d5:7a:f9:29:6d:e9:60:14:93: 24:e1:3d:1f:6d:c3:f5:5b:c5:b9:ae:1b:24:a7:15: 58:e0:fd:4c:2b:99:76:10:6a:87:c1:fe:9b:ac:72: 47:05:76:c3:47:e6:48:24:8a:19:58:ad:cd:24:f8: 6c:90:17:dd:56:e3:fd:bb:9e:26:7f:b9:bf:26:65: 7f:ff:5b:95:f7:21:17:22:c3:bd:50:80:6f:c3:75: 7d:52:76:7e:d8:e6:e8:40:99:2b:23:90:9c:ce:15: fd:f7:84:f7:0d:9d:51:5d:fa:b2:3e:15:23:c9:83: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:38:1B:E6:88:48:A9:EA:A7:61:C6:EE:EC:2C:6F:33:0C:9F:91:C7 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b0:c0:d6:0e:b5:01:a0:67:4f:f5:7c:58:88:5f:a4:d6:19: 10:99:9b:28:a0:4e:19:cf:0e:9d:2f:18:d3:3e:3a:19:52:bb: 1c:30:79:59:8b:f9:19:03:32:6a:21:ba:a1:52:1e:0b:ce:11: f5:67:99:a6:94:92:c4:1a:cd:d3:30:a5:98:13:e5:95:13:e2: 02:8e:e2:7b:3c:5b:24:c3:be:51:6a:7d:95:d0:5e:47:18:e8: c8:31:62:37:51:d5:68:22:02:e2:b4:8d:7e:27:21:d1:f0:a4: ef:5d:94:ab:1a:ac:c6:ec:a8:26:bd:40:23:4a:eb:44:7f:d7: b7:4f:89:29:07:57:0d:d6:6d:d4:e2:6f:2f:47:b3:ec:02:ad: 8f:b3:5e:db:ae:1f:d9:b7:85:eb:96:ef:93:c4:62:b5:d5:d7: 13:aa:c8:d5:d0:ce:04:8f:b8:2a:0d:65:7d:91:20:49:28:df: 94:42:db:bf:46:b2:4a:a9:ed:75:01:12:1a:30:e0:e5:97:46: 92:7c:82:8e:97:0f:22:9f:34:75:24:3c:46:19:47:16:0e:79: 54:c9:a7:0b:c2:f9:de:77:16:06:52:70:60:43:da:82:14:55: 6b:b6:f1:be:80:bd:8d:ba:1c:ff:63:8b:8d:dd:d3:5c:73:ec: c8:6e:24:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjUxMDE5MDg0NzMwWhcNMjUxMDI2MDg0NzMwWjAYMRYwFAYD VQQDEw02OGY0YTVhMi1lMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnwnS0WHjYMwMZDGGO/5w3yKbk3N2WtMqK/oVwUuQZwV4SiJdzFC6o8Q7Dnw rjFn4/Mto9krl9s54WHUo88JTDxdOa8gYr3XHg+k5QIH6peSZwFOkIF7Q5zE0+Fi jXoNLLw7Z9wQGJlEmo+sDptZGMHeMlpBO2ZauiENQB+r/CRB55rGQX1Am7S6n17V evkpbelgFJMk4T0fbcP1W8W5rhskpxVY4P1MK5l2EGqHwf6brHJHBXbDR+ZIJIoZ WK3NJPhskBfdVuP9u54mf7m/JmV//1uV9yEXIsO9UIBvw3V9UnZ+2OboQJkrI5Cc zhX994T3DZ1RXfqyPhUjyYMm0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM4G+aI SKnqp2HG7uwsbzMMn5HHMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGsMDWDrUBoGdP9XxYiF+k1hkQmZsooE4Zzw6dLxjTPjoZUrscMHlZ i/kZAzJqIbqhUh4LzhH1Z5mmlJLEGs3TMKWYE+WVE+ICjuJ7PFskw75Ran2V0F5H GOjIMWI3UdVoIgLitI1+JyHR8KTvXZSrGqzG7KgmvUAjSutEf9e3T4kpB1cN1m3U 4m8vR7PsAq2Ps17brh/Zt4Xrlu+TxGK11dcTqsjV0M4Ej7gqDWV9kSBJKN+UQtu/ RrJKqe11ARIaMODll0aSfIKOlw8inzR1JDxGGUcWDnlUyacLwvnedxYGUnBgQ9qC FFVrtvG+gL2Nuhz/Y4uN3dNcc+zIbiR8 -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:14 2025 by rpki-client