$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: zz1ed2lonhXSrP+W6XxqtZvJtLASZBNqvK2JUjezC4E= Subject key identifier: 7C:B3:C5:0D:ED:9B:4B:D7:05:18:D7:BA:49:A2:B3:D5:1F:CD:2D:FB Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: D9 Signing time: Wed 22 Oct 2025 03:52:48 +0000 Manifest this update: Wed 22 Oct 2025 03:52:47 +0000 Manifest next update: Wed 29 Oct 2025 03:52:47 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: OoJKWrZNMyFk4P+lrvSVyw7pYNXOwzaR/aIgRaoJOUs=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 03:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Oct 22 03:52:47 2025 GMT Not After : Oct 29 03:52:47 2025 GMT Subject: CN=68f85510-7e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:ce:22:52:00:d4:65:1c:fb:4b:4c:7d:23: 81:41:2f:1b:9b:6a:d4:c0:2c:2b:a9:06:64:2e:f0: 8b:5e:62:db:1f:b4:bf:49:f2:d4:50:bc:a4:4e:01: 6b:73:aa:8c:67:58:ae:fb:2b:ed:7b:d1:1d:b1:f4: b8:69:6f:19:40:ea:31:47:81:cd:4d:1b:8e:de:60: 73:e5:31:93:14:a1:ac:c2:6d:d6:05:92:a0:d3:9c: 7e:95:01:6e:51:6a:9d:40:67:7d:41:00:02:01:7e: 26:1c:48:0d:fa:63:a9:51:2d:e0:71:5d:5e:0d:6d: 4b:91:cf:b0:77:c7:74:ee:bd:54:a7:8b:bf:ca:1e: 6d:45:86:70:c2:8b:cc:9a:99:63:a8:ea:cf:5b:cd: 38:75:fe:c5:44:fc:3b:ec:60:25:ef:71:9e:d4:17: 1b:1b:6a:bb:4a:72:18:8e:0c:2f:f2:85:50:80:4e: dd:c5:71:76:0e:a5:82:4c:9f:24:34:78:47:a0:2c: 91:b9:d1:27:cf:ea:9b:f2:b0:8a:94:cc:53:42:4f: cf:ea:15:58:a9:4e:ff:ba:f6:5e:a9:99:00:0e:a3: 2a:0c:ab:6d:8b:2b:30:83:17:3d:5a:e5:76:f5:d9: b3:90:92:64:c9:7d:13:40:d7:cf:21:b6:26:11:16: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B3:C5:0D:ED:9B:4B:D7:05:18:D7:BA:49:A2:B3:D5:1F:CD:2D:FB X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:46:e0:c0:44:94:c2:30:23:f2:cf:d4:e3:7d:40:d4:07:04: b1:4c:4f:a2:18:43:16:8f:16:59:96:69:7d:38:d5:2b:cb:58: 7d:1f:f1:63:c4:2a:75:f1:07:6b:cc:9b:7c:14:31:5e:49:3c: 64:d1:d4:f9:28:bb:b6:64:3f:eb:51:60:eb:3e:f4:81:a9:bd: 3a:e3:81:e9:62:b1:05:3d:25:61:d3:7e:15:d9:77:5f:68:43: 75:7d:88:63:1e:f8:a2:ee:50:30:70:9e:45:38:35:34:39:17: e4:ee:31:61:06:a4:45:e5:ca:c7:22:50:db:e3:2b:80:ea:f4: 1a:e3:35:ea:a7:ef:91:c8:e0:d6:4c:94:34:f6:1d:30:ad:f6: 84:d1:55:03:28:73:e9:4d:b2:9f:fa:61:60:3a:4b:68:95:a3: 87:db:bc:38:82:e4:57:47:ab:59:b6:90:e8:16:25:19:5c:78: a2:70:b4:70:b8:86:e6:2a:ba:d3:09:c3:23:35:ef:b6:e6:52: 09:29:1b:ee:f9:5e:cd:d3:f8:35:84:ae:14:a4:66:71:ac:56: 35:1c:0b:4a:2d:7e:a4:b5:5e:57:5d:35:ab:23:bd:06:e4:0d: b3:b0:c4:ad:72:1f:9b:a4:f8:8b:aa:87:3b:cf:f5:a6:b0:94: 89:49:bf:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUxMDIyMDM1MjQ3WhcNMjUxMDI5MDM1MjQ3WjAYMRYwFAYD VQQDEw02OGY4NTUxMC03ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPnOIlIA1GUc+0tMfSOBQS8bm2rUwCwrqQZkLvCLXmLbH7S/SfLUULykTgFr c6qMZ1iu+yvte9EdsfS4aW8ZQOoxR4HNTRuO3mBz5TGTFKGswm3WBZKg05x+lQFu UWqdQGd9QQACAX4mHEgN+mOpUS3gcV1eDW1Lkc+wd8d07r1Up4u/yh5tRYZwwovM mpljqOrPW804df7FRPw77GAl73Ge1BcbG2q7SnIYjgwv8oVQgE7dxXF2DqWCTJ8k NHhHoCyRudEnz+qb8rCKlMxTQk/P6hVYqU7/uvZeqZkADqMqDKttiyswgxc9WuV2 9dmzkJJkyX0TQNfPIbYmERYdxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyzxQ3t m0vXBRjXukmis9UfzS37MB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCURuDARJTCMCPyz9TjfUDUBwSxTE+iGEMWjxZZlml9ONUry1h9H/Fj xCp18QdrzJt8FDFeSTxk0dT5KLu2ZD/rUWDrPvSBqb0644HpYrEFPSVh034V2Xdf aEN1fYhjHvii7lAwcJ5FODU0ORfk7jFhBqRF5crHIlDb4yuA6vQa4zXqp++RyODW TJQ09h0wrfaE0VUDKHPpTbKf+mFgOktolaOH27w4guRXR6tZtpDoFiUZXHiicLRw uIbmKrrTCcMjNe+25lIJKRvu+V7N0/g1hK4UpGZxrFY1HAtKLX6ktV5XXTWrI70G 5A2zsMStch+bpPiLqoc7z/WmsJSJSb9I -----END CERTIFICATE-----Generated at Wed Oct 22 22:40:35 2025 by rpki-client