$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: fkF1tdwEYXJzkI0SSUUeWFDCwU8JaBUr3J0J3GyAqlY= Subject key identifier: 1C:8C:BF:86:8E:28:9F:B6:60:07:78:0E:C5:2C:9A:1D:66:AC:3C:C3 Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 094F Signing time: Wed 22 Oct 2025 20:52:12 +0000 Manifest this update: Wed 22 Oct 2025 20:52:12 +0000 Manifest next update: Wed 29 Oct 2025 20:52:12 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: 1oVw2wd9dneev8VAdYyE/rCdyfYEguqm1rPIbu4JvdQ=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: 1XpEnw/JwEEBYh3nZmy2aqDGrwdu6fQDgmNMuCskbDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: Oct 22 20:52:12 2025 GMT Not After : Oct 29 20:52:12 2025 GMT Subject: CN=68f943fc-1852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:f6:2b:6f:90:c8:85:a8:53:2e:f0:82:af: 8e:bb:69:40:16:fe:4c:b4:c5:53:18:d6:4c:7f:9e: a5:83:67:83:a2:27:15:55:7c:f5:9d:b5:2c:80:42: d2:e3:0c:c2:16:d6:19:82:a4:b9:4b:6c:ed:9c:13: 1d:f2:8f:e2:9a:e2:49:2a:66:66:6a:c6:37:9b:6d: 44:0f:f9:cb:84:10:cb:c1:c9:eb:89:7d:13:c1:08: 94:42:b2:a3:0b:c6:d8:ea:00:cd:f6:57:37:93:55: f6:e2:3d:b9:ba:1e:3b:da:67:66:9f:1e:5d:ec:05: 8d:38:a6:51:fe:a3:22:24:0c:62:c9:32:b0:44:25: 90:38:72:68:d2:29:ae:93:8f:28:d8:4a:ec:46:7b: 5e:11:16:f2:e0:d4:19:aa:49:b5:3d:ec:c5:39:04: ca:6a:89:97:f8:c9:a7:76:8b:77:73:15:d8:9c:14: 1a:73:06:68:d1:10:fe:6b:a1:8f:2c:a1:98:e0:db: df:4c:81:85:fb:48:c3:0f:7a:ef:c4:8b:a1:c3:22: 9f:5d:b3:bc:be:8b:5b:4c:a7:fa:58:e1:91:89:b4: b5:90:6c:07:fd:30:be:a4:bf:fb:96:19:ee:17:13: 71:a5:a8:bc:e6:4a:ba:18:a9:b5:c2:a4:26:27:5a: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8C:BF:86:8E:28:9F:B6:60:07:78:0E:C5:2C:9A:1D:66:AC:3C:C3 X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5e:08:a3:cb:1d:c3:3b:d3:ab:44:5b:df:7a:c9:49:7f:df: 89:09:ec:c8:7e:4f:a1:e4:cd:d3:b5:66:a2:cd:1a:5d:d9:b0: 0d:3f:63:b2:60:5c:3f:0a:d5:83:f7:44:09:af:d5:2c:78:91: 5a:7e:c3:b8:d7:85:56:59:49:c7:d7:86:9b:20:30:88:c3:1f: 61:b6:3a:f8:ae:e6:72:d8:9c:42:45:bd:f0:29:e8:62:eb:e1: 46:3b:2c:af:89:03:81:25:89:46:a7:ed:70:50:cc:74:57:bc: 1d:f4:ef:6d:fd:8a:4e:62:28:7c:ea:5c:10:5b:e9:df:db:a2: 7d:4e:56:74:9b:fe:92:5f:36:1b:64:22:a7:27:ea:45:2c:48: 8b:fb:a4:7f:e1:c0:42:0c:df:12:19:9c:98:0f:f0:35:74:0c: 21:d1:9c:63:9b:14:98:34:96:57:e3:f7:3d:9f:40:c8:9b:92: 66:c7:30:d1:1f:09:d0:bf:27:5d:b5:6d:97:f7:fa:2b:e2:0f: 9a:a2:dd:cd:0c:a1:51:c1:e1:ed:4c:14:26:7a:c8:f0:ee:e9: 10:d1:c2:c6:ad:7e:c7:74:51:0b:25:a5:54:16:fe:dd:82:03: 62:81:0d:bd:86:9d:91:c2:05:41:f3:8d:78:2a:e9:1a:18:16: df:33:b8:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjUxMDIyMjA1MjEyWhcNMjUxMDI5MjA1MjEyWjAYMRYwFAYD VQQDEw02OGY5NDNmYy0xODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvin2K2+QyIWoUy7wgq+Ou2lAFv5MtMVTGNZMf56lg2eDoicVVXz1nbUsgELS 4wzCFtYZgqS5S2ztnBMd8o/imuJJKmZmasY3m21ED/nLhBDLwcnriX0TwQiUQrKj C8bY6gDN9lc3k1X24j25uh472mdmnx5d7AWNOKZR/qMiJAxiyTKwRCWQOHJo0imu k48o2ErsRnteERby4NQZqkm1PezFOQTKaomX+Mmndot3cxXYnBQacwZo0RD+a6GP LKGY4NvfTIGF+0jDD3rvxIuhwyKfXbO8votbTKf6WOGRibS1kGwH/TC+pL/7lhnu FxNxpai85kq6GKm1wqQmJ1rc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByMv4aO KJ+2YAd4DsUsmh1mrDzDMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvXgijyx3DO9OrRFvfeslJf9+JCezIfk+h5M3TtWaizRpd2bANP2Oy YFw/CtWD90QJr9UseJFafsO414VWWUnH14abIDCIwx9htjr4ruZy2JxCRb3wKehi 6+FGOyyviQOBJYlGp+1wUMx0V7wd9O9t/YpOYih86lwQW+nf26J9TlZ0m/6SXzYb ZCKnJ+pFLEiL+6R/4cBCDN8SGZyYD/A1dAwh0ZxjmxSYNJZX4/c9n0DIm5JmxzDR HwnQvyddtW2X9/or4g+aot3NDKFRweHtTBQmesjw7ukQ0cLGrX7HdFELJaVUFv7d ggNigQ29hp2RwgVB8414KukaGBbfM7io -----END CERTIFICATE-----Generated at Wed Oct 22 23:00:11 2025 by rpki-client