$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: U9Y523lT0zQBzwFxY4du3RF3RXdT3RFy3VFSuzNG9kQ= Subject key identifier: B1:AA:AF:FD:22:6B:1F:15:6C:C5:58:76:0B:88:BE:D7:38:CB:39:7E Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 286D Signing time: Wed 22 Oct 2025 15:48:00 +0000 Manifest this update: Wed 22 Oct 2025 15:48:00 +0000 Manifest next update: Wed 29 Oct 2025 15:48:00 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: C4zlahv5iNUudBFzYRe2oETW4u5rm7sPAILF3mY8f4I=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: oWJMpDIMTFAfw38plnHhHvz3GPHifE5GFKfNlopflac=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: OSz44UCcf4qRfBCOUb7r8YIHW2Z7ikWsfsVPeHHaHxE=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: b2Yq5jV0ZpUmJZqaRWPtD89nJkoGKuS1X5rO9Hm2iOA=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 3rfvelTpkGIVSx6swNlRbMEKIqAJwLp3a6nGC9gVNp0=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: dRhDk/TC6lFxMS9HL4htDv50FillTad96WfyUbhWzRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10579 (0x2953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Oct 22 15:48:00 2025 GMT Not After : Oct 29 15:48:00 2025 GMT Subject: CN=68f8fcb0-8100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a2:25:ed:d9:c3:dd:62:96:4a:f9:6a:b4:41: 0c:b0:da:1d:8b:d4:cc:27:0c:e6:3a:b9:25:db:03: 21:88:86:6b:87:83:c4:f9:c6:7b:52:d0:b7:c3:fe: 08:e7:5a:ce:13:c9:26:06:d4:44:61:2f:be:88:97: 70:e5:1d:db:e2:8b:5d:5d:00:61:3c:b7:58:cd:72: 3f:ee:2d:1a:69:f6:e9:c7:98:78:b2:01:f8:51:99: 12:36:26:4a:5a:f4:4a:8b:07:e1:cc:02:ba:0f:16: aa:75:36:de:ff:ca:d7:54:28:da:ae:b7:60:d5:e3: 8b:90:50:0d:21:0e:e3:66:50:49:61:63:b2:ff:41: b6:34:a3:9d:d1:cc:d0:ea:e9:78:17:00:99:a5:50: 00:27:d5:51:2f:85:de:5c:eb:30:e7:2f:d6:85:8e: 8a:4a:5e:f2:cc:1b:5c:a9:f6:67:d9:0d:3d:cb:ee: 9c:d4:97:f8:3b:75:e4:21:3d:bb:5a:e8:75:fb:61: cb:c0:91:0d:c0:3d:fb:5d:a7:e1:04:bd:2b:57:b1: 5a:34:37:c3:d1:e7:59:ca:5f:1b:f7:3b:cf:4e:65: 24:29:4f:43:13:75:b0:5e:12:37:58:30:1e:05:91: fc:2e:ee:08:11:b0:07:4d:20:5e:40:37:87:24:9a: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AA:AF:FD:22:6B:1F:15:6C:C5:58:76:0B:88:BE:D7:38:CB:39:7E X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b2:a3:a6:47:52:44:6c:05:a9:22:e8:cd:e3:86:38:dd:05: 94:61:36:bf:84:ff:b9:ef:29:f2:16:b8:cb:e5:58:55:ee:56: 3c:5e:a9:19:66:f0:b6:d5:08:c4:af:ea:19:d8:03:a7:9e:fc: 72:57:c8:a6:97:57:4e:ed:4d:ea:c2:8d:47:eb:a1:93:c3:b1: 6c:03:a1:4f:d1:35:6f:a2:ef:5e:9f:ca:8f:0f:07:62:d4:24: f2:27:9b:46:8d:03:e2:c6:aa:46:0a:90:b8:a4:1d:6f:4f:62: 33:89:c1:15:54:35:07:14:c5:c0:e6:5e:6e:cf:76:fe:b5:66: 50:33:fd:07:64:a7:9b:ed:f1:74:bf:42:4d:60:65:52:9d:7a: 1b:f4:a6:8b:5b:42:e7:b2:ae:3d:2e:76:a2:ef:84:39:66:ba: c8:e4:02:3b:f3:17:4f:1d:58:f2:9a:7e:1b:17:e3:77:15:30: 39:05:35:b4:90:00:10:7b:56:ce:c7:6c:2e:fa:47:bc:1a:78: d8:16:0e:dc:52:19:ab:ca:c1:90:6e:15:4c:92:5e:f6:87:03: 54:a5:83:1c:09:ce:a0:b8:05:6b:6f:e5:5c:70:74:f4:50:6a: 33:1d:60:52:8e:24:2d:98:6e:39:b4:8a:10:ad:3b:99:52:29: ec:54:e9:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUxMDIyMTU0ODAwWhcNMjUxMDI5MTU0ODAwWjAYMRYwFAYD VQQDEw02OGY4ZmNiMC04MTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KIl7dnD3WKWSvlqtEEMsNodi9TMJwzmOrkl2wMhiIZrh4PE+cZ7UtC3w/4I 51rOE8kmBtREYS++iJdw5R3b4otdXQBhPLdYzXI/7i0aafbpx5h4sgH4UZkSNiZK WvRKiwfhzAK6DxaqdTbe/8rXVCjarrdg1eOLkFANIQ7jZlBJYWOy/0G2NKOd0czQ 6ul4FwCZpVAAJ9VRL4XeXOsw5y/WhY6KSl7yzBtcqfZn2Q09y+6c1Jf4O3XkIT27 Wuh1+2HLwJENwD37XafhBL0rV7FaNDfD0edZyl8b9zvPTmUkKU9DE3WwXhI3WDAe BZH8Lu4IEbAHTSBeQDeHJJqxmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGqr/0i ax8VbMVYdguIvtc4yzl+MB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCsqOmR1JEbAWpIujN44Y43QWUYTa/hP+57ynyFrjL5VhV7lY8XqkZ ZvC21QjEr+oZ2AOnnvxyV8iml1dO7U3qwo1H66GTw7FsA6FP0TVvou9en8qPDwdi 1CTyJ5tGjQPixqpGCpC4pB1vT2IzicEVVDUHFMXA5l5uz3b+tWZQM/0HZKeb7fF0 v0JNYGVSnXob9KaLW0Lnsq49Lnai74Q5ZrrI5AI78xdPHVjymn4bF+N3FTA5BTW0 kAAQe1bOx2wu+ke8GnjYFg7cUhmrysGQbhVMkl72hwNUpYMcCc6guAVrb+VccHT0 UGozHWBSjiQtmG45tIoQrTuZUinsVOn+ -----END CERTIFICATE-----Generated at Wed Oct 22 21:36:58 2025 by rpki-client