$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: c6bzreLDCev7wFSXZFvttOaUUZ1nWWgpm2e0svXVIJw= Subject key identifier: FE:C2:E1:99:5B:D0:CF:DC:54:DE:1D:69:43:CD:56:97:CF:A8:E2:01 Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: 9D Signing time: Sat 25 Oct 2025 10:20:17 +0000 Manifest this update: Sat 25 Oct 2025 10:20:17 +0000 Manifest next update: Sat 01 Nov 2025 10:20:17 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: dcp174TLNYXHN2KSIuu4HbDViY6v804a3sYC/R0TJQg=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: SWCcm9UJuFnyydTujMQaVhSJ1qOMjifkiPJ4UhwGm9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Oct 25 10:20:17 2025 GMT Not After : Nov 1 10:20:17 2025 GMT Subject: CN=68fca461-1edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:1c:aa:95:7f:19:22:25:63:74:91:eb:74: 40:1e:0b:c9:06:95:16:04:4b:3d:0e:9d:41:f1:73: 4e:38:08:a6:a0:0f:72:08:8d:82:34:91:d1:bf:ac: 97:46:c0:a0:e7:0f:91:8f:98:bf:d0:20:cb:6d:31: 9b:5b:c7:f4:93:3a:b3:52:6d:a3:6e:ce:0a:df:1b: fd:30:7e:7e:3a:ca:ce:96:46:b0:a4:f8:38:fa:a2: 15:4a:24:6f:09:6a:70:1e:4b:48:d6:1c:69:f4:52: 21:fa:3a:37:e3:3c:f7:60:19:55:1a:de:b1:1c:42: 04:e7:7f:49:b8:0e:67:1f:e7:c8:5a:76:9f:62:f8: ed:48:d3:1d:98:df:29:10:a0:ac:0b:19:02:ba:21: e1:79:f3:b6:f0:01:12:ee:c8:bf:d5:e6:b6:0e:18: 9b:68:87:7a:4d:cb:98:98:88:2e:7e:60:60:78:fc: 14:9a:f4:c4:ed:c2:15:f7:de:66:b1:9f:b0:a2:07: a1:ee:b7:23:74:78:76:9b:74:ff:6f:d2:ab:85:e9: 71:05:c1:02:d1:15:6d:03:cd:f0:44:25:ea:11:d0: 49:43:0e:42:7f:1c:0b:e5:0f:77:b5:66:64:15:b1: bc:b3:21:95:3e:b6:46:74:84:0a:24:bf:7f:8f:3a: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:E1:99:5B:D0:CF:DC:54:DE:1D:69:43:CD:56:97:CF:A8:E2:01 X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f0:41:dd:93:58:ce:83:3d:c1:ff:42:a5:9b:86:0f:5f:eb: c4:7a:59:95:79:ce:da:e4:b5:82:6c:2c:ec:13:98:d6:ad:0f: ee:bd:4a:9f:87:ff:72:75:6a:a6:99:e8:a2:d6:5f:eb:b8:58: 87:27:52:8b:39:7a:c4:88:7e:29:d2:df:67:79:2d:b0:24:3d: e6:3a:24:51:3c:a2:f6:9e:0b:99:0e:4b:56:66:f5:58:74:5e: bb:26:6d:c5:cf:d8:46:4e:c6:a1:d0:eb:a3:aa:36:26:74:0a: 8d:72:bd:e8:93:e4:dd:62:3c:f9:5c:90:41:68:9b:e6:00:10: 22:56:c9:0f:e3:ad:57:e1:3c:06:85:ea:eb:ad:1e:e0:6c:e8: b7:11:60:95:2f:29:cf:c2:2c:4f:da:ff:98:27:ee:67:3d:c4: 73:11:0d:58:fe:35:15:42:a9:85:84:42:fe:ba:bc:ee:70:24: e9:f3:f9:eb:6f:ca:89:07:94:77:fe:d8:c5:81:ac:99:91:51: 67:1e:5c:4f:5b:26:47:2f:32:5c:2e:b2:8d:71:ee:5c:e7:ff: e6:e5:53:4e:da:81:22:77:32:a7:6b:d6:0d:96:2c:20:7d:93: 58:25:df:15:84:c9:23:7c:47:c5:cf:b5:27:7a:bf:5a:5a:46: 74:1d:0c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw QkVFQTQ4RDAwHhcNMjUxMDI1MTAyMDE3WhcNMjUxMTAxMTAyMDE3WjAYMRYwFAYD VQQDEw02OGZjYTQ2MS0xZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySwcqpV/GSIlY3SR63RAHgvJBpUWBEs9Dp1B8XNOOAimoA9yCI2CNJHRv6yX RsCg5w+Rj5i/0CDLbTGbW8f0kzqzUm2jbs4K3xv9MH5+OsrOlkawpPg4+qIVSiRv CWpwHktI1hxp9FIh+jo34zz3YBlVGt6xHEIE539JuA5nH+fIWnafYvjtSNMdmN8p EKCsCxkCuiHhefO28AES7si/1ea2DhibaId6TcuYmIgufmBgePwUmvTE7cIV995m sZ+wogeh7rcjdHh2m3T/b9KrhelxBcEC0RVtA83wRCXqEdBJQw5CfxwL5Q93tWZk FbG8syGVPrZGdIQKJL9/jzrxKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7C4Zlb 0M/cVN4daUPNVpfPqOIBMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2 c05zTjVsWmZBc2tMN3FTTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt8EHdk1jOgz3B/0Klm4YPX+vEelmVec7a5LWCbCzsE5jWrQ/uvUqf h/9ydWqmmeii1l/ruFiHJ1KLOXrEiH4p0t9neS2wJD3mOiRRPKL2nguZDktWZvVY dF67Jm3Fz9hGTsah0OujqjYmdAqNcr3ok+TdYjz5XJBBaJvmABAiVskP461X4TwG herrrR7gbOi3EWCVLynPwixP2v+YJ+5nPcRzEQ1Y/jUVQqmFhEL+urzucCTp8/nr b8qJB5R3/tjFgayZkVFnHlxPWyZHLzJcLrKNce5c5//m5VNO2oEidzKna9YNliwg fZNYJd8VhMkjfEfFz7Uner9aWkZ0HQxf -----END CERTIFICATE-----Generated at Sun Oct 26 02:55:28 2025 by rpki-client