$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: HVg23dCAN5F1T6w9DTSNdBYSyy0pJsnXZlfqg3M3rzw= Subject key identifier: A4:68:B7:B7:C3:2B:36:FA:0D:0A:2D:C1:99:6C:6F:DE:F3:29:88:38 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 0386 Signing time: Mon 27 Oct 2025 02:17:05 +0000 Manifest this update: Mon 27 Oct 2025 02:17:04 +0000 Manifest next update: Mon 03 Nov 2025 02:17:04 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: iofppu5oMQkgF6/jfYLWzJKpLIAWR4k6Nch9VnKW2IU=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: F+cI71SpMl71bLQgnMUz6K4+MsaifrlPMt2J8GaVcJ8=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: RWlaRiVFKIIV/wakCOCZQQ+zk9bO5MWkgTakC7o+ErY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Oct 27 02:17:04 2025 GMT Not After : Nov 3 02:17:04 2025 GMT Subject: CN=68fed621-5059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:49:61:3f:a6:45:15:f2:bf:92:59:8a:bf: b9:0b:ce:48:2b:ed:27:a4:7b:b0:8b:3f:4e:68:3d: 25:78:9a:f4:40:77:84:7b:ef:d8:20:ae:1d:38:fa: a9:01:55:da:ea:d7:c2:97:83:7d:21:54:f6:a7:93: bb:dc:18:20:fa:df:be:a0:c3:11:05:d6:84:51:0f: 73:69:d6:89:ac:49:b3:1c:dd:a3:7d:60:85:ad:6b: 76:62:42:c0:da:67:92:95:37:3c:ee:00:f7:57:b3: fa:9d:a6:d2:06:ee:16:1e:e8:2a:5e:c9:87:0b:66: fa:ae:5c:6f:20:c3:87:f0:be:95:10:43:b8:63:20: a0:8a:16:07:41:b5:e4:12:19:09:7b:3b:4d:96:52: ae:6a:e2:11:c6:75:98:99:52:ce:78:54:2f:88:40: d0:6f:50:d6:6c:bf:81:71:d5:a8:63:96:40:26:d6: 3b:81:79:11:49:49:6e:d0:6e:58:4c:ab:ce:4a:cf: c6:cc:05:0c:35:1d:be:01:f0:c3:df:f2:f1:c0:2c: 49:4c:3e:b1:6a:f9:b3:44:08:ab:ce:c3:ed:dd:99: e6:77:2d:22:c2:39:56:a9:75:c3:9e:ba:bd:df:2b: 0a:7b:54:e2:13:8f:37:42:5a:c9:09:f8:db:09:44: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:68:B7:B7:C3:2B:36:FA:0D:0A:2D:C1:99:6C:6F:DE:F3:29:88:38 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c0:0c:17:31:25:61:f6:f2:b4:a5:6d:39:7e:58:30:47:56: 16:a0:b4:92:e3:01:77:03:9d:57:d6:f3:e1:32:76:e3:78:74: 88:d1:6b:44:58:cb:7b:34:b9:5d:85:60:82:62:a9:36:da:60: af:f8:fe:d7:aa:07:e5:67:6a:42:11:37:85:47:4d:27:95:ae: c8:c0:1c:5d:98:00:15:b4:f2:2b:3d:91:60:23:4f:9b:7c:f8: 2a:84:68:ec:49:ef:22:0b:20:48:a1:b6:23:21:1a:07:b1:22: ec:17:88:6e:3a:cb:16:15:50:34:c7:23:2e:68:1c:7a:85:7a: 8f:5c:4a:84:96:ad:41:e5:f4:ac:c0:25:3d:17:20:22:bf:3d: 28:2d:15:ca:26:59:f1:2b:6b:62:4a:03:3d:d9:27:b2:3f:81: ba:f5:92:7e:71:d6:49:e2:54:97:b4:54:c4:56:1d:aa:e9:b0: 44:5d:e7:c3:59:4a:44:14:c1:1e:e7:88:f8:67:82:9a:81:a8: 51:82:b6:20:87:e6:85:bc:33:08:34:95:dd:d3:b4:76:94:e2: 26:13:7e:5d:b8:f5:1f:b2:bb:32:f5:c7:f4:17:6e:d1:0f:8b: 92:46:43:77:4a:52:40:31:a7:01:f6:52:65:9f:8b:6f:71:0c: cd:f1:76:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUxMDI3MDIxNzA0WhcNMjUxMTAzMDIxNzA0WjAYMRYwFAYD VQQDEw02OGZlZDYyMS01MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsulJYT+mRRXyv5JZir+5C85IK+0npHuwiz9OaD0leJr0QHeEe+/YIK4dOPqp AVXa6tfCl4N9IVT2p5O73Bgg+t++oMMRBdaEUQ9zadaJrEmzHN2jfWCFrWt2YkLA 2meSlTc87gD3V7P6nabSBu4WHugqXsmHC2b6rlxvIMOH8L6VEEO4YyCgihYHQbXk EhkJeztNllKuauIRxnWYmVLOeFQviEDQb1DWbL+BcdWoY5ZAJtY7gXkRSUlu0G5Y TKvOSs/GzAUMNR2+AfDD3/LxwCxJTD6xavmzRAirzsPt3Znmdy0iwjlWqXXDnrq9 3ysKe1TiE483QlrJCfjbCUR9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRot7fD Kzb6DQotwZlsb97zKYg4MB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpwAwXMSVh9vK0pW05flgwR1YWoLSS4wF3A51X1vPhMnbjeHSI0WtE WMt7NLldhWCCYqk22mCv+P7XqgflZ2pCETeFR00nla7IwBxdmAAVtPIrPZFgI0+b fPgqhGjsSe8iCyBIobYjIRoHsSLsF4huOssWFVA0xyMuaBx6hXqPXEqElq1B5fSs wCU9FyAivz0oLRXKJlnxK2tiSgM92SeyP4G69ZJ+cdZJ4lSXtFTEVh2q6bBEXefD WUpEFMEe54j4Z4KagahRgrYgh+aFvDMINJXd07R2lOImE35duPUfsrsy9cf0F27R D4uSRkN3SlJAMacB9lJln4tvcQzN8XYB -----END CERTIFICATE-----Generated at Mon Oct 27 17:34:33 2025 by rpki-client