$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json) Hash identifier: JwJ85TRKr+HzmdH/31AefxrtyTWhuKIkKbD14Dv+0T0= Subject key identifier: 2B:83:33:26:D7:C8:F2:25:20:B8:22:9E:3A:DC:67:BB:61:BA:F7:A1 Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 1AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft Manifest number: 1AA1 Signing time: Wed 22 Oct 2025 16:36:51 +0000 Manifest this update: Wed 22 Oct 2025 16:36:50 +0000 Manifest next update: Wed 29 Oct 2025 16:36:50 +0000 Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: UXv8IF/1oZEfBKH5kjI0olduI5iXuY/lB2evLDyLOQw=) 2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: ZY9UVEPOCB1tx7LWMX0JPtFEK9gl6SqjcejUUwF9APo=) 3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: p7tQRESvOucR4loUarfHpuL5VMHiMFu4353xIOkSzpw=) 4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: H1ZnHxZixXVbHo7aB0OBCDDL/HvZe6bvZhxCcCw4jYQ=) 5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: e4tQVidUhYeVOQueW5SrNgjm3m0qmH9C2+LHfapMlI0=) 6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: janciRMHjU97zB3lXitJwIl9Ika5JfzU+v8Mkow8p3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6892 (0x1aec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Oct 22 16:36:50 2025 GMT Not After : Oct 29 16:36:50 2025 GMT Subject: CN=68f90822-245f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ce:42:db:84:93:71:5e:76:e1:2a:6f:94:fe: 97:26:25:f0:89:59:1a:7c:73:ca:ab:7f:0e:a0:52: 6c:2c:bc:a8:53:60:6c:52:7b:0f:c0:ad:f3:41:69: 1b:6c:97:7a:a1:0c:fc:5c:f6:14:aa:6f:a3:cf:b8: d1:c5:b1:54:81:a0:a6:94:c7:ab:bd:6c:ed:e6:d0: 68:b6:f6:a5:4c:39:9c:b6:fd:a3:d6:a6:07:f3:f4: eb:f8:7b:4c:e4:85:b1:4c:96:75:fd:e8:31:b6:35: 05:b0:98:f5:91:96:5f:c6:11:c5:ae:40:1c:e9:c0: 0a:f9:c1:3d:c1:76:3e:7d:7e:dd:f7:b0:d5:09:b4: 09:6a:95:4f:3d:69:92:aa:2e:68:8a:51:07:9e:02: 83:d6:c2:e2:90:f1:a2:8c:f4:72:19:56:c5:71:e4: 39:50:46:c1:bd:a9:eb:b0:9e:6e:56:e9:93:9a:da: 55:70:c0:84:b8:91:c2:8a:d7:1d:c2:3f:a1:0f:12: 88:6b:56:33:45:3f:08:cd:fc:0d:78:2c:b4:36:c8: f0:6f:f4:1b:b4:7a:3a:49:54:07:59:fa:97:54:44: 67:08:6a:e3:d6:d7:e3:68:e2:14:dd:b5:45:5d:37: 17:9e:33:f2:ab:06:10:47:86:53:a6:b4:cf:ba:67: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:33:26:D7:C8:F2:25:20:B8:22:9E:3A:DC:67:BB:61:BA:F7:A1 X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b7:d5:f4:d0:1f:20:e5:20:58:22:d6:1f:88:a7:65:4f:df: 8d:e7:e9:fb:fb:0e:b3:a4:d7:be:b3:07:31:3a:f2:36:54:91: 34:66:60:18:e5:71:b2:d4:04:64:99:80:34:b7:30:36:c6:2c: a8:f6:3d:62:8c:fb:13:01:70:67:47:f6:e5:19:05:cc:c1:9c: d9:d6:a5:6c:1c:64:52:2a:a5:39:23:f6:ba:8a:4d:24:d8:99: d9:65:eb:0b:68:64:d8:f5:ea:84:30:50:0a:05:f1:22:8a:6c: 3f:ea:5e:1f:e6:e5:24:32:02:af:1e:55:73:88:78:f1:85:ad: 79:ee:97:d8:d9:63:48:d5:9f:fd:af:48:22:16:7d:58:cf:96: 62:dc:8a:0e:16:e4:15:be:86:b2:39:e3:93:9d:9f:c0:0f:b5: 01:09:75:6d:e7:19:d2:98:a4:81:35:5e:4e:7f:50:6b:da:56: 1e:e9:7c:47:b3:1e:88:3d:f9:44:f4:29:0b:8a:63:a2:ed:fd: a3:a7:5b:1a:3e:59:a7:d9:d7:74:60:ef:ca:a9:e2:5f:7b:c2: fd:5e:db:61:22:9b:01:0b:b0:aa:d8:a7:15:a2:98:85:b7:cd: 47:94:00:56:b6:44:f1:e4:77:2c:57:b7:dc:30:db:c7:52:50: f0:fd:54:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjUxMDIyMTYzNjUwWhcNMjUxMDI5MTYzNjUwWjAYMRYwFAYD VQQDEw02OGY5MDgyMi0yNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6c5C24STcV524SpvlP6XJiXwiVkafHPKq38OoFJsLLyoU2BsUnsPwK3zQWkb bJd6oQz8XPYUqm+jz7jRxbFUgaCmlMervWzt5tBotvalTDmctv2j1qYH8/Tr+HtM 5IWxTJZ1/egxtjUFsJj1kZZfxhHFrkAc6cAK+cE9wXY+fX7d97DVCbQJapVPPWmS qi5oilEHngKD1sLikPGijPRyGVbFceQ5UEbBvanrsJ5uVumTmtpVcMCEuJHCitcd wj+hDxKIa1YzRT8IzfwNeCy0Nsjwb/QbtHo6SVQHWfqXVERnCGrj1tfjaOIU3bVF XTcXnjPyqwYQR4ZTprTPumeKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuDMybX yPIlILginjrcZ7thuvehMB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1 X0RZMXpVNDFCSXI0ampudTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7t9X00B8g5SBYItYfiKdlT9+N5+n7+w6zpNe+swcxOvI2VJE0ZmAY 5XGy1ARkmYA0tzA2xiyo9j1ijPsTAXBnR/blGQXMwZzZ1qVsHGRSKqU5I/a6ik0k 2JnZZesLaGTY9eqEMFAKBfEiimw/6l4f5uUkMgKvHlVziHjxha157pfY2WNI1Z/9 r0giFn1Yz5Zi3IoOFuQVvoayOeOTnZ/AD7UBCXVt5xnSmKSBNV5Of1Br2lYe6XxH sx6IPflE9CkLimOi7f2jp1saPlmn2dd0YO/KqeJfe8L9XtthIpsBC7Cq2KcVopiF t81HlABWtkTx5HcsV7fcMNvHUlDw/VRs -----END CERTIFICATE-----Generated at Fri Oct 24 00:01:21 2025 by rpki-client