$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: VqH30LakuiQchkLfJEasa0gATxj6IT4qdv/bsKwUr1c= Subject key identifier: 18:2A:A1:6D:47:6C:43:B2:4C:2E:6F:4F:1C:77:EC:36:86:6D:01:E1 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0FA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0F99 Signing time: Sun 02 Nov 2025 17:33:58 +0000 Manifest this update: Sun 02 Nov 2025 17:33:58 +0000 Manifest next update: Sun 09 Nov 2025 17:33:58 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: Ckm7TBhg4rDa4p/jot3DIizz27btq84BRW0QWarkw28=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: 8ztrTQcP/jo0fNou8ezgxWbldFvPq9dRhjV7IPER7OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Nov 2 17:33:58 2025 GMT Not After : Nov 9 17:33:58 2025 GMT Subject: CN=69079606-16f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:5b:c8:fc:46:e5:4d:78:72:38:3c:05:e1: 41:f1:82:9d:9d:45:2c:da:a1:3e:71:bb:ca:5b:97: 36:3f:d0:b8:f5:0e:e6:17:b3:f6:ae:77:77:fb:6f: 52:05:f7:07:03:af:0b:a6:e3:3d:23:2d:af:b2:93: 68:c2:91:1d:4e:87:49:79:71:f7:bb:83:bb:dc:68: 59:ea:d2:ff:da:33:e6:61:a2:fd:69:2b:d4:97:71: 08:71:77:63:8f:14:47:b6:4b:de:66:ca:7d:24:59: e6:8d:a3:61:2a:6d:95:16:c8:bf:76:2d:4a:77:c7: 07:b4:d5:d7:ee:46:7c:db:b0:0a:bf:03:c9:75:b5: b6:49:87:34:b3:8f:dd:dd:ea:e8:06:4f:04:f3:f2: 74:9f:8e:f0:e0:aa:10:d5:93:f1:61:38:92:bc:32: 93:78:b7:e6:42:f0:70:33:ae:d8:38:24:79:42:04: d8:11:0f:35:a3:a4:e9:02:bc:60:e9:74:29:e4:57: 7a:35:e0:33:26:fa:9f:0e:53:3a:9f:7f:03:89:8a: 4c:f8:7d:01:96:4f:a1:df:35:44:5c:fa:57:df:fd: a6:85:0d:91:f5:c9:bf:ed:f4:ca:36:62:46:71:cc: 56:83:58:76:b4:5d:04:48:c5:3e:88:c3:1e:e9:0e: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2A:A1:6D:47:6C:43:B2:4C:2E:6F:4F:1C:77:EC:36:86:6D:01:E1 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:d5:70:81:cc:ae:e0:a8:54:b8:e7:2b:96:ab:78:3d:42: d7:0b:5b:b1:be:aa:b0:51:40:d0:89:90:60:4a:4e:95:e0:b7: f3:25:62:9b:62:2d:81:87:37:55:b5:52:8f:94:7e:44:7a:4b: 01:7e:f3:04:de:88:62:2f:b3:e4:c0:d8:57:e9:51:58:b4:d7: 4f:aa:2d:0f:e7:98:72:0c:ca:6c:e6:2b:39:ec:52:8b:db:83: 5d:37:ae:cf:18:2d:15:cd:ad:ff:8d:a9:46:0c:3b:58:80:e6: 8d:50:d1:99:4a:5a:9a:3f:1f:c4:95:fe:fe:c9:da:39:f7:97: 62:92:b3:97:39:de:77:64:e7:28:71:49:8e:16:2b:18:75:93: e7:04:bc:2a:17:a6:13:a1:bd:31:69:f7:ab:ce:c7:4c:42:34: 10:f1:a4:e9:f7:e8:45:ce:b6:79:ee:c6:c9:06:3d:69:d7:c5: 57:2a:f1:d3:e0:45:8c:23:05:d8:46:aa:23:e1:a0:11:91:da: 5b:30:19:32:5a:54:9b:27:0e:32:7b:b5:d9:a7:2e:1a:c9:d0: cb:17:a4:9f:d8:30:18:7c:e0:75:a9:02:c2:ee:97:40:cd:22: 20:60:0a:6f:35:bc:d3:57:c1:ff:d2:ac:f5:e4:8b:23:43:f9: c0:a3:c0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUxMTAyMTczMzU4WhcNMjUxMTA5MTczMzU4WjAYMRYwFAYD VQQDEw02OTA3OTYwNi0xNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hZbyPxG5U14cjg8BeFB8YKdnUUs2qE+cbvKW5c2P9C49Q7mF7P2rnd3+29S BfcHA68LpuM9Iy2vspNowpEdTodJeXH3u4O73GhZ6tL/2jPmYaL9aSvUl3EIcXdj jxRHtkveZsp9JFnmjaNhKm2VFsi/di1Kd8cHtNXX7kZ827AKvwPJdbW2SYc0s4/d 3eroBk8E8/J0n47w4KoQ1ZPxYTiSvDKTeLfmQvBwM67YOCR5QgTYEQ81o6TpArxg 6XQp5Fd6NeAzJvqfDlM6n38DiYpM+H0Blk+h3zVEXPpX3/2mhQ2R9cm/7fTKNmJG ccxWg1h2tF0ESMU+iMMe6Q75GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgqoW1H bEOyTC5vTxx37DaGbQHhMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW39Vwgcyu4KhUuOcrlqt4PULXC1uxvqqwUUDQiZBgSk6V4LfzJWKb Yi2BhzdVtVKPlH5EeksBfvME3ohiL7PkwNhX6VFYtNdPqi0P55hyDMps5is57FKL 24NdN67PGC0Vza3/jalGDDtYgOaNUNGZSlqaPx/Elf7+ydo595dikrOXOd53ZOco cUmOFisYdZPnBLwqF6YTob0xaferzsdMQjQQ8aTp9+hFzrZ57sbJBj1p18VXKvHT 4EWMIwXYRqoj4aARkdpbMBkyWlSbJw4ye7XZpy4aydDLF6Sf2DAYfOB1qQLC7pdA zSIgYApvNbzTV8H/0qz15IsjQ/nAo8CT -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:55 2025 by rpki-client