$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json) Hash identifier: S3juyNMfpIbO2eWnLb3ZfO+9QQcyyOECIaG8qj420EI= Subject key identifier: 72:BB:27:CA:E5:F2:E1:99:64:9C:47:BA:BB:39:B5:F5:73:56:3B:8F Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft Manifest number: 06 Signing time: Fri 17 Oct 2025 11:57:01 +0000 Manifest this update: Fri 17 Oct 2025 11:57:01 +0000 Manifest next update: Fri 24 Oct 2025 11:57:01 +0000 Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: KH9fK3/dYfQ+m9EeqbAiOAYDqG7q2cGpeUaOgTkAesE=) 2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: GetDT8ar6UQGvcmvjsGOW3aX6ZiD1t+5sWscwddFzJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Oct 17 11:57:01 2025 GMT Not After : Oct 24 11:57:01 2025 GMT Subject: CN=68f22f0d-8fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:ca:90:07:04:61:f6:c1:de:8a:74:9e:39: 0f:fb:b9:bf:17:02:e1:18:e0:62:92:63:30:64:c0: 04:d7:b0:ed:ce:c1:b1:15:76:2e:69:e9:15:40:4c: 94:fd:a5:01:b3:ed:96:2f:e7:b3:e9:14:58:89:1b: 94:b2:46:54:50:0f:21:a3:c3:9c:78:39:0b:4d:d9: b6:65:2e:6b:87:77:fa:9b:93:de:33:89:45:08:18: ea:63:c7:42:f9:41:9f:60:f7:ec:7a:a0:13:56:3e: de:8d:6f:8f:b2:93:4e:c1:68:2a:54:78:b7:3c:1c: bb:c6:ab:81:74:da:47:54:77:e5:35:dd:e3:ce:cb: 75:79:74:6d:fe:82:a0:04:76:38:47:25:86:d0:40: 16:ef:ac:2e:7a:bf:92:3c:69:1c:35:84:c1:73:3f: e5:3b:61:79:a3:c9:f1:1f:a3:32:77:dd:43:cb:4f: e1:a4:f0:70:6f:6c:2a:c7:f6:8d:70:f3:54:47:8c: 0f:d3:17:23:ff:a3:7b:8c:84:63:dc:9e:1d:d2:3d: 3c:c4:80:de:9e:6a:e9:d3:ad:b0:97:96:5b:f7:62: 68:4d:a8:1c:12:89:62:be:7d:f7:04:4a:59:77:2a: 6b:32:59:50:8c:c3:ea:b5:4f:76:a8:0f:ee:ae:98: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BB:27:CA:E5:F2:E1:99:64:9C:47:BA:BB:39:B5:F5:73:56:3B:8F X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:9a:af:51:36:41:19:38:d5:cb:1e:e0:3b:ae:07:2b:3b:47: b4:92:2c:09:89:07:d9:a5:3e:54:4a:41:81:ab:86:54:df:3d: 46:bf:3a:79:30:c4:63:ea:a8:69:11:f8:f2:1b:8c:66:2a:88: 64:09:7f:f0:b8:34:d3:d7:65:6b:8d:f3:21:92:db:99:98:58: 80:eb:3c:bf:53:4c:8f:9a:7a:d1:9e:ed:d6:7b:1f:c7:91:5c: a4:d6:d1:11:bb:80:32:0b:17:19:2e:e7:db:1a:92:87:e1:6f: 1d:f8:6f:79:b3:b6:61:a7:d5:9b:d5:2b:c8:39:b7:96:51:c5: ef:c1:58:1e:79:c0:e8:4a:ac:c2:e1:06:61:09:dd:1e:22:e1: ef:64:f7:cb:cc:9a:70:ac:21:3f:73:e7:7e:77:23:84:e7:ac: ad:3f:5a:07:2f:44:5c:6a:11:db:fd:13:8b:29:60:40:6b:68: 74:2b:f7:40:96:38:21:0a:42:a5:85:3d:e8:8a:fc:67:34:23: 36:d2:a1:79:1c:31:80:75:76:2f:49:7d:be:d1:79:9d:ff:f5: 7b:e7:c8:83:e0:e9:7b:b1:e9:37:6c:2d:f1:97:38:89:23:6d: 66:74:11:8d:be:62:74:1d:d9:a8:4c:12:a9:98:20:88:e3:7d: 11:11:32:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNTEwMTcxMTU3MDFaFw0yNTEwMjQxMTU3MDFaMBgxFjAUBgNV BAMTDTY4ZjIyZjBkLThmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwp8qQBwRh9sHeinSeOQ/7ub8XAuEY4GKSYzBkwATXsO3OwbEVdi5p6RVATJT9 pQGz7ZYv57PpFFiJG5SyRlRQDyGjw5x4OQtN2bZlLmuHd/qbk94ziUUIGOpjx0L5 QZ9g9+x6oBNWPt6Nb4+yk07BaCpUeLc8HLvGq4F02kdUd+U13ePOy3V5dG3+gqAE djhHJYbQQBbvrC56v5I8aRw1hMFzP+U7YXmjyfEfozJ33UPLT+Gk8HBvbCrH9o1w 81RHjA/TFyP/o3uMhGPcnh3SPTzEgN6eaunTrbCXllv3YmhNqBwSiWK+ffcESll3 KmsyWVCMw+q1T3aoD+6umMDzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcrsnyuXy 4ZlknEe6uzm19XNWO48wHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzNFMDlGMEU0QTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNq bEZUOHdGbXBVeWFjV1Azcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADiar1E2QRk41cse4DuuBys7R7SSLAmJB9mlPlRKQYGrhlTfPUa/Onkw xGPqqGkR+PIbjGYqiGQJf/C4NNPXZWuN8yGS25mYWIDrPL9TTI+aetGe7dZ7H8eR XKTW0RG7gDILFxku59sakofhbx34b3mztmGn1ZvVK8g5t5ZRxe/BWB55wOhKrMLh BmEJ3R4i4e9k98vMmnCsIT9z5353I4TnrK0/WgcvRFxqEdv9E4spYEBraHQr90CW OCEKQqWFPeiK/Gc0IzbSoXkcMYB1di9Jfb7ReZ3/9XvnyIPg6Xux6TdsLfGXOIkj bWZ0EY2+YnQd2ahMEqmYIIjjfRERMlA= -----END CERTIFICATE-----Generated at Sat Oct 18 23:28:24 2025 by rpki-client