$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: ta7J/mwgb3TuYgacnB8kJTnGs+e1THgg8qAoXr3MMmQ= Subject key identifier: 95:9D:18:BC:0E:CC:63:B5:5F:E3:AB:FD:22:0D:98:80:6A:60:77:F9 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 027D Signing time: Sun 19 Oct 2025 03:56:32 +0000 Manifest this update: Sun 19 Oct 2025 03:56:31 +0000 Manifest next update: Sun 26 Oct 2025 03:56:31 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: RZMJi1uUE4Eziy0MgzP5lm43vcEgndhHTBxItpd/cfw=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Oct 19 03:56:31 2025 GMT Not After : Oct 26 03:56:31 2025 GMT Subject: CN=68f46170-6b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:4f:e1:02:43:9e:f9:aa:10:e1:8f:cc:a3: f2:55:de:77:70:1d:4f:2e:23:fd:39:ac:06:67:ca: 35:45:61:85:42:df:13:92:40:20:11:32:a2:e0:79: 93:f5:46:57:33:36:cb:6a:e4:98:df:70:ce:f7:1c: fa:d0:7e:a0:4c:ef:f3:3d:b5:43:8d:fd:25:05:f4: 87:50:56:83:83:ff:18:ef:a4:02:f4:5b:71:73:b3: f2:53:c2:8a:e6:46:c9:53:60:b3:dc:c5:4f:86:c1: 91:0b:6d:d6:36:d8:06:57:c3:5f:81:34:65:99:b5: a9:7f:be:93:b3:6d:03:ba:ab:27:83:e0:81:45:aa: 45:35:30:87:84:eb:ad:46:0c:ec:dd:7b:26:7a:9f: 4d:2c:b4:23:16:65:95:7a:c7:c2:0d:a5:3e:e9:d0: e5:68:12:8c:20:c7:1d:ff:cf:73:3a:cb:5a:52:27: ce:12:e7:1d:89:0a:94:7a:65:b6:a5:e3:cd:6d:df: 6d:4b:c0:12:30:4f:27:aa:79:92:98:db:44:65:fe: 8d:7e:98:43:3b:d2:ae:f4:94:4c:c1:69:41:d3:5d: e7:df:17:a2:0e:72:15:cc:09:65:da:5a:6d:dc:0c: c4:51:4e:25:c4:71:34:fb:c5:ae:01:b9:86:a7:34: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:18:BC:0E:CC:63:B5:5F:E3:AB:FD:22:0D:98:80:6A:60:77:F9 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:36:7e:61:3b:7e:f1:49:19:fd:db:01:92:c3:89:27:fd:b4: ed:1e:b8:7b:c0:81:54:77:08:7b:4f:ca:56:8c:e0:cf:1e:b2: 80:1c:dd:cf:69:59:c2:2a:3e:1e:51:36:16:55:b2:e4:56:92: 74:5c:ab:3d:1c:aa:fb:87:f9:85:bc:9a:98:3d:55:c5:90:ef: 9b:b1:03:e1:cb:92:07:cc:10:51:e1:fc:2c:b8:7f:24:31:66: 1c:7d:3c:f6:9f:bd:7f:47:17:44:f1:c4:0f:b3:fc:50:9a:16: e0:f3:99:b7:47:b8:2a:d6:09:88:85:1d:b1:df:d8:30:a1:f2: 1c:34:29:f2:ae:a1:4c:a1:31:50:8c:0a:95:24:39:0d:35:c6: cb:55:93:02:0a:54:fb:a4:c4:68:e0:64:bd:34:ad:6f:c3:a8: a7:52:6d:c3:49:24:3c:cc:35:c9:22:87:1a:05:84:ca:2c:b6: 5f:43:5e:66:45:23:9b:30:a1:df:5e:74:c9:73:9d:9d:b3:d3: 4e:ea:81:fc:d8:52:42:9c:57:10:1c:78:78:0c:ed:fd:ea:16: 2e:42:d3:1f:42:94:62:ed:e4:f5:4d:96:17:4b:42:59:a7:49: 99:c4:d9:31:1e:23:e5:ce:f6:ee:bb:6e:3c:da:30:49:1c:8f: 7b:05:a2:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUxMDE5MDM1NjMxWhcNMjUxMDI2MDM1NjMxWjAYMRYwFAYD VQQDEw02OGY0NjE3MC02YjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/NP4QJDnvmqEOGPzKPyVd53cB1PLiP9OawGZ8o1RWGFQt8TkkAgETKi4HmT 9UZXMzbLauSY33DO9xz60H6gTO/zPbVDjf0lBfSHUFaDg/8Y76QC9Ftxc7PyU8KK 5kbJU2Cz3MVPhsGRC23WNtgGV8NfgTRlmbWpf76Ts20Duqsng+CBRapFNTCHhOut Rgzs3Xsmep9NLLQjFmWVesfCDaU+6dDlaBKMIMcd/89zOstaUifOEucdiQqUemW2 pePNbd9tS8ASME8nqnmSmNtEZf6NfphDO9Ku9JRMwWlB013n3xeiDnIVzAll2lpt 3AzEUU4lxHE0+8WuAbmGpzRSgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWdGLwO zGO1X+Or/SINmIBqYHf5MB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbNn5hO37xSRn92wGSw4kn/bTtHrh7wIFUdwh7T8pWjODPHrKAHN3P aVnCKj4eUTYWVbLkVpJ0XKs9HKr7h/mFvJqYPVXFkO+bsQPhy5IHzBBR4fwsuH8k MWYcfTz2n71/RxdE8cQPs/xQmhbg85m3R7gq1gmIhR2x39gwofIcNCnyrqFMoTFQ jAqVJDkNNcbLVZMCClT7pMRo4GS9NK1vw6inUm3DSSQ8zDXJIocaBYTKLLZfQ15m RSObMKHfXnTJc52ds9NO6oH82FJCnFcQHHh4DO396hYuQtMfQpRi7eT1TZYXS0JZ p0mZxNkxHiPlzvbuu2482jBJHI97BaLW -----END CERTIFICATE-----Generated at Mon Oct 20 16:28:03 2025 by rpki-client