$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: roE/FA+ZRrq13GS8shEF+VtLfgHBiwYno64zGhS+5eY= Subject key identifier: BB:12:F8:5B:67:56:25:4A:3E:58:FE:A0:7A:70:50:79:2C:C4:14:AA Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 017B Signing time: Thu 23 Oct 2025 05:26:33 +0000 Manifest this update: Thu 23 Oct 2025 05:26:33 +0000 Manifest next update: Thu 30 Oct 2025 05:26:33 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: hAwUPb97BEBfJ5ibAv3U2jLXAM5mMuK16dap0LIlQ+Q=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Oct 23 05:26:33 2025 GMT Not After : Oct 30 05:26:33 2025 GMT Subject: CN=68f9bc89-8f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:62:a0:b3:bf:4e:37:1f:0b:db:f4:48:60: 37:97:66:b3:96:3e:24:8a:17:c0:00:01:a5:1e:a2: b5:de:14:c5:69:17:2c:39:3d:3d:a2:69:58:06:8d: b7:ac:09:00:d0:c7:2e:6a:9b:fe:e9:02:ca:72:5a: 9d:50:16:cf:16:0d:e2:27:c7:80:c7:29:ab:af:29: 06:12:64:b8:e9:e6:8d:86:68:19:c9:9d:d2:23:03: 47:d8:db:ff:37:05:41:31:d1:0d:c8:fa:26:d0:c3: 37:60:0d:0b:52:f2:fe:36:cf:23:4f:f8:32:2f:d9: a8:35:bd:14:1b:ed:e0:fb:d8:82:ae:3f:ed:08:b5: 7f:60:be:35:c2:f5:09:19:40:ae:0c:a8:55:6e:de: 33:bc:17:de:c9:08:6c:13:91:eb:66:5f:d1:ee:4e: fd:df:b2:00:05:2c:fb:13:5b:59:e7:ec:58:31:1c: 3f:89:d6:d1:2f:e8:e2:fc:70:6d:69:3c:29:76:2d: 54:dd:13:ba:54:0c:25:ad:43:f9:49:40:03:3d:83: bb:52:ae:7b:0a:f7:74:99:4c:13:b6:7c:05:74:3e: 85:d5:8e:6f:b3:66:84:64:35:9d:46:90:d6:3d:a6: 6b:95:1f:0f:81:9d:7f:c1:cb:a3:9a:d5:6f:24:2e: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:12:F8:5B:67:56:25:4A:3E:58:FE:A0:7A:70:50:79:2C:C4:14:AA X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:23:52:5a:12:f7:8b:04:ea:37:f3:d3:e2:8e:3a:44:8a:78: 3a:14:0a:40:50:ea:4f:ba:ad:8f:72:b4:8e:85:eb:75:cf:23: 84:41:a7:9f:e2:8a:70:c0:b3:e1:41:9d:32:85:b6:4f:bf:bf: e8:65:b9:4d:83:ac:4f:a5:fb:66:cb:79:6f:13:1d:ee:ae:df: c3:13:15:ea:0a:31:7a:d5:a1:20:20:c2:b7:33:23:62:0c:cc: d3:bc:61:30:e9:33:db:09:fb:ac:4c:d7:59:2a:44:ee:e4:93: 2d:c9:c8:0a:52:89:60:a6:0e:d9:cc:d2:2d:79:e0:dd:e3:e3: 2d:38:80:c5:48:6a:d2:99:43:76:99:9c:ce:92:de:04:ba:d3: 3e:67:5d:32:58:ef:e0:f6:c0:50:8f:05:5a:75:1b:9d:36:01: 25:39:5f:62:95:5d:a9:0c:14:b6:96:d5:df:f8:89:bc:d7:a0: 15:c0:88:32:19:b2:0b:e0:5b:0a:9b:3e:6f:70:5e:1f:92:5e: 93:f8:31:46:9b:fe:f9:63:4f:08:54:a2:7e:bf:83:c7:a1:5f: 82:89:2b:7a:17:f5:ac:8b:42:fb:9c:eb:ba:62:4f:7e:bb:ae: 2c:67:32:9b:04:cd:e6:ca:ae:7c:ca:75:55:bc:a2:9e:c9:0b: 68:d5:e9:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUxMDIzMDUyNjMzWhcNMjUxMDMwMDUyNjMzWjAYMRYwFAYD VQQDEw02OGY5YmM4OS04ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxBioLO/TjcfC9v0SGA3l2azlj4kihfAAAGlHqK13hTFaRcsOT09omlYBo23 rAkA0Mcuapv+6QLKclqdUBbPFg3iJ8eAxymrrykGEmS46eaNhmgZyZ3SIwNH2Nv/ NwVBMdENyPom0MM3YA0LUvL+Ns8jT/gyL9moNb0UG+3g+9iCrj/tCLV/YL41wvUJ GUCuDKhVbt4zvBfeyQhsE5HrZl/R7k7937IABSz7E1tZ5+xYMRw/idbRL+ji/HBt aTwpdi1U3RO6VAwlrUP5SUADPYO7Uq57Cvd0mUwTtnwFdD6F1Y5vs2aEZDWdRpDW PaZrlR8PgZ1/wcujmtVvJC5DSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsS+Ftn ViVKPlj+oHpwUHksxBSqMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmI1JaEveLBOo389PijjpEing6FApAUOpPuq2PcrSOhet1zyOEQaef 4opwwLPhQZ0yhbZPv7/oZblNg6xPpftmy3lvEx3urt/DExXqCjF61aEgIMK3MyNi DMzTvGEw6TPbCfusTNdZKkTu5JMtycgKUolgpg7ZzNIteeDd4+MtOIDFSGrSmUN2 mZzOkt4EutM+Z10yWO/g9sBQjwVadRudNgElOV9ilV2pDBS2ltXf+Im816AVwIgy GbIL4FsKmz5vcF4fkl6T+DFGm/75Y08IVKJ+v4PHoV+CiSt6F/Wsi0L7nOu6Yk9+ u64sZzKbBM3myq58ynVVvKKeyQto1emq -----END CERTIFICATE-----Generated at Fri Oct 24 07:02:18 2025 by rpki-client