$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: am+9g/V5lasDZgJO4hIqT5Eh36IE5B2XgS1vZ4a3jnY= Subject key identifier: 9A:6C:89:BD:5D:52:70:4B:B7:8B:E7:30:FC:57:78:CB:4A:B5:1B:78 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 016C Signing time: Sun 19 Oct 2025 06:48:44 +0000 Manifest this update: Sun 19 Oct 2025 06:48:44 +0000 Manifest next update: Sun 26 Oct 2025 06:48:44 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: FjOnSOctSqJRR5j2rKb1N+5IyNJwqgvlO8bvqKCk0aA=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Oct 19 06:48:44 2025 GMT Not After : Oct 26 06:48:44 2025 GMT Subject: CN=68f489cc-36ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:95:a5:d0:e8:66:43:9d:57:50:c6:9d:aa: e6:01:e7:1a:a6:b9:bf:dd:31:50:93:da:3e:c1:be: f7:a7:ea:94:3a:de:a3:64:18:4d:c5:91:32:18:47: 38:94:ca:e7:89:41:5c:5c:b8:27:ae:d3:3d:0e:e4: 97:2e:16:8f:51:5a:41:e2:e4:58:ae:63:b5:3f:06: 98:8c:72:06:45:e0:36:50:1c:38:44:41:49:f7:be: 68:0f:90:09:7b:d1:c3:36:48:ba:72:c8:bd:62:6e: c4:ba:4b:20:1d:ae:a2:cb:03:ca:7a:de:26:c7:65: 92:3a:2f:e0:4c:fa:e5:c9:e7:e9:35:af:dc:0a:2a: 5c:bb:41:5f:ac:d6:74:4b:3e:70:93:fa:76:b9:2e: 1b:ab:e6:2f:d3:ea:9c:51:00:cb:18:c2:69:63:72: 7f:2d:2a:fe:ac:fb:5c:95:4e:46:35:06:9c:4e:88: d4:46:0f:c0:c8:c0:7e:a5:9c:6d:80:88:bd:19:08: 0c:34:4d:a9:33:b0:b7:93:b9:c1:89:19:49:29:bb: 5f:26:1b:64:29:24:23:bb:ed:34:b7:d7:64:f5:74: a9:94:5d:3f:70:f0:ef:32:59:48:fc:c4:0b:9a:c2: 01:5e:ac:61:53:3e:48:c1:7a:0b:9b:56:62:5d:e3: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6C:89:BD:5D:52:70:4B:B7:8B:E7:30:FC:57:78:CB:4A:B5:1B:78 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:01:c7:0a:63:97:22:04:eb:71:1b:cd:f9:a7:81:33:53:1b: 06:60:96:e6:65:c6:2a:63:64:05:53:a3:0d:92:62:4a:11:55: eb:9b:53:7a:84:cb:eb:0c:a6:ed:14:07:73:93:22:31:82:a9: 73:87:a5:64:00:cc:59:88:68:20:94:76:7e:d8:50:c9:b9:4d: d3:03:8f:4e:8f:60:4e:26:f0:f2:09:7d:e7:6e:fc:14:b1:7f: db:b8:6c:cf:fb:3d:c4:21:22:5d:98:dd:09:e9:f6:3d:fd:b0: d4:c5:69:b3:8d:31:d9:67:5f:94:3d:1b:89:7e:c1:f0:08:71: b3:11:29:b7:50:93:ab:e4:e1:b6:c7:4f:14:c1:3d:8d:4a:12: db:81:e2:4f:3c:4a:fe:7c:80:d8:90:a1:75:24:ef:e3:7f:55: c6:34:02:39:37:29:f5:59:48:a4:66:b6:fc:34:04:ae:d0:31: fd:ef:e4:78:18:43:db:f2:ed:f5:a4:ab:97:62:8b:21:4c:e4: f3:df:5c:fb:63:c9:ee:18:47:c4:5d:fd:45:6f:78:aa:50:88: 36:77:94:94:59:2a:10:89:86:a0:35:b0:23:d2:8b:dd:e3:8c: 85:25:47:b7:8a:72:96:81:ac:d6:a0:44:4a:b5:dd:2f:ff:cd: a2:91:6d:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjUxMDE5MDY0ODQ0WhcNMjUxMDI2MDY0ODQ0WjAYMRYwFAYD VQQDEw02OGY0ODljYy0zNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupuVpdDoZkOdV1DGnarmAecaprm/3TFQk9o+wb73p+qUOt6jZBhNxZEyGEc4 lMrniUFcXLgnrtM9DuSXLhaPUVpB4uRYrmO1PwaYjHIGReA2UBw4REFJ975oD5AJ e9HDNki6csi9Ym7EuksgHa6iywPKet4mx2WSOi/gTPrlyefpNa/cCipcu0FfrNZ0 Sz5wk/p2uS4bq+Yv0+qcUQDLGMJpY3J/LSr+rPtclU5GNQacTojURg/AyMB+pZxt gIi9GQgMNE2pM7C3k7nBiRlJKbtfJhtkKSQju+00t9dk9XSplF0/cPDvMllI/MQL msIBXqxhUz5IwXoLm1ZiXeOGdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpsib1d UnBLt4vnMPxXeMtKtRt4MB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiAccKY5ciBOtxG835p4EzUxsGYJbmZcYqY2QFU6MNkmJKEVXrm1N6 hMvrDKbtFAdzkyIxgqlzh6VkAMxZiGgglHZ+2FDJuU3TA49Oj2BOJvDyCX3nbvwU sX/buGzP+z3EISJdmN0J6fY9/bDUxWmzjTHZZ1+UPRuJfsHwCHGzESm3UJOr5OG2 x08UwT2NShLbgeJPPEr+fIDYkKF1JO/jf1XGNAI5Nyn1WUikZrb8NASu0DH97+R4 GEPb8u31pKuXYoshTOTz31z7Y8nuGEfEXf1Fb3iqUIg2d5SUWSoQiYagNbAj0ovd 44yFJUe3inKWgazWoERKtd0v/82ikW0I -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:11 2025 by rpki-client