$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: DiLXxAWY5pRK57HXldsvjmYsBO+xJqDVZVkl/Z53DmE= Subject key identifier: 1E:AE:DF:90:56:43:0E:01:AC:A0:59:78:98:77:85:F3:94:47:E3:B9 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0875 Signing time: Wed 22 Oct 2025 21:22:07 +0000 Manifest this update: Wed 22 Oct 2025 21:22:07 +0000 Manifest next update: Wed 29 Oct 2025 21:22:07 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: Jhno4Tj1DEAA7/rvaC+7nA6HjaloP8ufbBlgzdLxY0M=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Oct 22 21:22:07 2025 GMT Not After : Oct 29 21:22:07 2025 GMT Subject: CN=68f94aff-3434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:6e:94:99:68:8e:cc:6c:5e:ff:12:9e:79: c9:e6:7b:f0:8d:c8:31:e7:b8:42:c8:9e:f3:cd:f7: fb:65:92:08:57:11:77:66:d3:23:75:16:0d:2a:cd: 5a:89:44:a7:2a:4a:50:16:91:df:ae:c4:8d:36:60: 3f:bd:6b:b8:a6:ca:ec:75:af:b9:74:b3:c4:7f:31: c8:d8:bf:9f:8a:01:8a:ef:16:bf:4f:9e:4b:ed:43: 44:ba:c6:24:16:a5:9d:4c:b5:1b:02:94:b3:bb:d4: 07:ef:38:5a:d0:3c:6a:3f:b8:c1:34:74:0b:ec:26: 8e:b7:67:c7:57:ac:25:2c:22:b0:bb:41:be:65:7b: d0:f9:00:25:31:50:25:96:82:f2:8a:e7:75:25:71: e7:5e:bb:ca:8e:36:8c:47:9a:99:b6:bd:cd:f8:07: 57:47:5e:c1:16:f1:77:39:87:a2:a7:94:50:77:66: ab:4c:fe:47:f0:7e:2d:c4:29:7a:9d:44:7f:04:5d: 8e:55:9f:e7:51:7b:af:c0:7b:19:1a:0f:1d:6f:e1: 58:0e:be:73:e8:e1:19:0f:58:fd:71:8f:5d:36:51: c1:66:2b:c3:af:10:29:1a:6c:00:94:e8:8a:89:77: 65:93:6e:a7:59:cd:8d:e3:65:1c:91:df:0d:90:30: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AE:DF:90:56:43:0E:01:AC:A0:59:78:98:77:85:F3:94:47:E3:B9 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ba:aa:cd:a5:fa:7d:2f:3a:87:17:2a:cc:5b:f3:7f:82:04: e0:07:5c:61:66:5f:84:2b:ce:44:29:4e:a1:fd:ad:0c:4c:6e: 78:3b:c6:25:37:f2:09:4c:2e:36:16:cd:53:17:47:14:95:53: e5:63:7d:e8:a4:02:ed:48:a3:ec:0f:12:30:fa:70:dd:60:a0: 01:59:77:fe:69:53:ea:dc:fb:37:f3:1c:39:e4:93:8a:e6:9c: ca:4e:45:c9:89:14:81:9f:d1:a8:e2:e3:9c:11:65:f9:61:97: c2:06:eb:99:d3:8d:89:89:2e:7b:0f:35:f3:1d:13:97:90:12: ea:b7:86:98:d6:81:2c:85:cc:e7:24:94:af:6c:1f:4d:0c:f3: 31:2c:17:e3:d2:d7:d4:4a:cc:ff:3c:69:c6:63:f8:38:fc:25: 84:99:b8:11:6e:eb:4e:d2:29:b7:12:69:8e:8b:a5:7d:2c:35: 2e:59:1b:4a:8c:66:05:9b:9f:a0:16:c9:4a:8f:7d:49:24:e7: e7:c5:5b:d3:28:64:0d:6b:9e:0b:e3:39:e1:ea:d4:8d:a5:1e: 36:9c:eb:e3:e7:88:e1:c0:17:78:56:a7:07:0e:0c:cd:de:5d: a4:ac:7e:2e:fe:e9:b3:26:6b:84:42:4b:33:5d:5d:01:49:ad: 02:ca:c0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUxMDIyMjEyMjA3WhcNMjUxMDI5MjEyMjA3WjAYMRYwFAYD VQQDEw02OGY5NGFmZi0zNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDNulJlojsxsXv8SnnnJ5nvwjcgx57hCyJ7zzff7ZZIIVxF3ZtMjdRYNKs1a iUSnKkpQFpHfrsSNNmA/vWu4psrsda+5dLPEfzHI2L+figGK7xa/T55L7UNEusYk FqWdTLUbApSzu9QH7zha0DxqP7jBNHQL7CaOt2fHV6wlLCKwu0G+ZXvQ+QAlMVAl loLyiud1JXHnXrvKjjaMR5qZtr3N+AdXR17BFvF3OYeip5RQd2arTP5H8H4txCl6 nUR/BF2OVZ/nUXuvwHsZGg8db+FYDr5z6OEZD1j9cY9dNlHBZivDrxApGmwAlOiK iXdlk26nWc2N42Uckd8NkDBrxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6u35BW Qw4BrKBZeJh3hfOUR+O5MB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAluqrNpfp9LzqHFyrMW/N/ggTgB1xhZl+EK85EKU6h/a0MTG54O8Yl N/IJTC42Fs1TF0cUlVPlY33opALtSKPsDxIw+nDdYKABWXf+aVPq3Ps38xw55JOK 5pzKTkXJiRSBn9Go4uOcEWX5YZfCBuuZ042JiS57DzXzHROXkBLqt4aY1oEshczn JJSvbB9NDPMxLBfj0tfUSsz/PGnGY/g4/CWEmbgRbutO0im3EmmOi6V9LDUuWRtK jGYFm5+gFslKj31JJOfnxVvTKGQNa54L4znh6tSNpR42nOvj54jhwBd4VqcHDgzN 3l2krH4u/umzJmuEQkszXV0BSa0CysCz -----END CERTIFICATE-----Generated at Thu Oct 23 01:10:46 2025 by rpki-client