$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: CwyXu0uIYRzAUCqjIj2KZ6ogoeuFiD2d9lFoHDI/XIY= Subject key identifier: 02:23:97:81:79:3F:9A:15:F5:37:77:B1:25:D4:0A:64:F2:6C:B6:DE Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 0607 Signing time: Sat 25 Oct 2025 03:09:58 +0000 Manifest this update: Sat 25 Oct 2025 03:09:57 +0000 Manifest next update: Sat 01 Nov 2025 03:09:57 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: vmoDU0p68N3ZFkKVB4KY9aa2USgqqKD3iv9jCqFC7/E=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: h7NQdBf7/WACdOSa/nz3xaJMmARVVv7RYZRpaElBghA=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: 6joZNeakIUjEpd+YMt0FiTiaFqDSbAMcOBqVVrqw5x4=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: nlYpAXZDAkP9jxeYqTWJb2nQcc7Mu88sU4gd4loVu3I=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: iJ4zqOfhJNhHuoAZdvWWzKmADnr0nYywfMeTT9vEa3M=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: iwHI+lWhCkdLiN75C3FH0nP3GqiBf7AEpFh/Xx5uzNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 03:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Oct 25 03:09:57 2025 GMT Not After : Nov 1 03:09:57 2025 GMT Subject: CN=68fc3f86-a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:79:40:e6:d3:e3:c7:84:5f:86:a4:d9:3d: 74:a2:9a:ff:3a:54:3a:b2:c5:dc:a6:4c:e5:dc:0c: 48:e8:6a:55:a0:c2:95:8b:f3:35:41:1b:44:20:df: 00:81:5f:1a:77:6d:e1:63:7b:b8:48:ca:1d:fa:0d: 14:de:18:5c:45:54:4d:41:32:b1:73:39:fd:68:40: dd:5b:ce:7b:f2:31:69:45:7a:5d:87:8a:cd:78:b2: f7:69:1d:34:2d:ea:84:73:df:5f:d4:ba:66:10:44: 63:0c:bf:6e:92:d4:b3:4b:13:bf:b0:30:b4:0f:d4: 2e:77:3d:31:24:fe:1f:fa:61:1c:d9:f0:9e:b8:20: 60:60:47:87:64:e8:5f:bd:72:2e:03:36:4e:6e:2d: f9:e1:32:28:0a:f4:48:62:e1:0c:32:47:34:1f:43: e0:cc:f2:99:ae:a5:1d:fb:cb:0b:ba:82:28:d6:58: 3b:ee:b9:d8:f5:82:3d:c9:80:fe:4a:60:63:21:b4: 19:da:6f:e4:60:d7:94:ce:6f:16:74:33:76:40:0e: d5:c0:ae:cd:0f:64:41:7e:b9:a5:70:5c:60:a1:e0: 00:72:e6:90:ff:ce:d3:99:c6:36:f4:49:ff:d3:1c: fd:85:6e:1f:e9:64:b3:ae:4b:34:8e:8e:43:d4:60: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:97:81:79:3F:9A:15:F5:37:77:B1:25:D4:0A:64:F2:6C:B6:DE X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a9:d4:be:15:3a:f4:cb:cf:d8:14:d9:a0:de:f9:c9:43:f8: 57:d1:47:51:7d:f7:ae:85:70:e9:9e:7d:70:57:1f:90:b1:ae: 72:c7:d1:25:ae:a9:de:0f:c5:3a:02:fc:a5:52:d2:ee:c2:cc: 3b:b3:f6:5e:1f:e4:bf:7e:7b:27:3e:19:29:e0:98:21:5c:82: af:66:03:63:91:77:02:3c:a6:99:b0:ff:b1:b1:16:1e:a7:46: 4d:c8:4f:e9:75:5a:da:88:6c:ea:5e:85:29:ce:0d:c0:c8:e7: cd:4c:c8:47:a0:90:38:ea:54:06:cc:54:b5:54:5a:36:92:6b: 32:3a:4b:dc:16:75:18:a7:df:f2:b1:fa:34:1e:6d:da:ec:39: 58:b3:51:44:44:ce:42:f9:cf:09:f8:17:d5:ec:4e:3b:7f:e6: 69:ac:9b:ef:ee:b5:1d:05:06:54:9b:b0:1e:d9:71:08:8b:5f: 26:a7:44:67:e9:68:1c:06:6f:70:20:ea:52:2a:13:c1:36:ff: 86:3c:3c:c9:8f:fa:b3:16:20:9d:ef:8c:a2:de:34:38:c5:a7: 6e:e4:85:fd:1d:de:f6:a2:e2:59:9f:b9:70:96:40:76:35:02: 94:c8:27:34:12:3a:ca:ed:05:a5:be:08:5c:18:c2:83:32:8c: ad:dc:9e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUxMDI1MDMwOTU3WhcNMjUxMTAxMDMwOTU3WjAYMRYwFAYD VQQDEw02OGZjM2Y4Ni1hN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWJ5QObT48eEX4ak2T10opr/OlQ6ssXcpkzl3AxI6GpVoMKVi/M1QRtEIN8A gV8ad23hY3u4SMod+g0U3hhcRVRNQTKxczn9aEDdW8578jFpRXpdh4rNeLL3aR00 LeqEc99f1LpmEERjDL9uktSzSxO/sDC0D9Qudz0xJP4f+mEc2fCeuCBgYEeHZOhf vXIuAzZObi354TIoCvRIYuEMMkc0H0PgzPKZrqUd+8sLuoIo1lg77rnY9YI9yYD+ SmBjIbQZ2m/kYNeUzm8WdDN2QA7VwK7ND2RBfrmlcFxgoeAAcuaQ/87TmcY29En/ 0xz9hW4f6WSzrks0jo5D1GAokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIjl4F5 P5oV9Td3sSXUCmTybLbeMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUqdS+FTr0y8/YFNmg3vnJQ/hX0UdRffeuhXDpnn1wVx+Qsa5yx9El rqneD8U6AvylUtLuwsw7s/ZeH+S/fnsnPhkp4JghXIKvZgNjkXcCPKaZsP+xsRYe p0ZNyE/pdVraiGzqXoUpzg3AyOfNTMhHoJA46lQGzFS1VFo2kmsyOkvcFnUYp9/y sfo0Hm3a7DlYs1FERM5C+c8J+BfV7E47f+ZprJvv7rUdBQZUm7Ae2XEIi18mp0Rn 6WgcBm9wIOpSKhPBNv+GPDzJj/qzFiCd74yi3jQ4xadu5IX9Hd72ouJZn7lwlkB2 NQKUyCc0EjrK7QWlvghcGMKDMoyt3J5M -----END CERTIFICATE-----Generated at Sat Oct 25 22:30:04 2025 by rpki-client