$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: SDc2M1kzLv9Uv0lyUcVXcBGiIUR8CQAFK0gvEsUbYTw= Subject key identifier: 5D:37:82:54:47:65:7B:FD:C8:E4:AF:37:29:37:0D:58:0F:24:DF:9C Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 072F Signing time: Sat 18 Oct 2025 23:18:45 +0000 Manifest this update: Sat 18 Oct 2025 23:18:44 +0000 Manifest next update: Sat 25 Oct 2025 23:18:44 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: xeri6djK9p6lr/WSv06A1mbgh986sn/jJ4sw9WMIaFQ=) 2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: S6sSUQCmJtkaMtMbA1O0Mmg6DyeiEI+XUAJAroLQzw0=) 3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: 3GgLx+CbNEwoDetwa0xclFosAF0ThnHDNkGy9hkBwHY=) 4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: gFTQhXxxWg+vWFd9YUvmY8166bjE5yYi7F/AL03zQaU=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: e4/df1ZKDr4aEamOFlzJbyomY0cdDHsDrVrwwMv17eI=) 6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 4feN6gwvjlguQsUZ0+vuacffttVLy9DJIXoMNN8hWOI=) 7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: zplnnTYrDs6ATh1oYF/06orqoqHtQxFtplLwmc2mqPA=) 8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 53gHj/OrKFXtL8aMTpoTUjSuuGCGwdKOy6cQhgB55pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Oct 18 23:18:44 2025 GMT Not After : Oct 25 23:18:44 2025 GMT Subject: CN=68f42054-53bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:b4:16:c5:04:29:2a:3e:64:79:23:d2:17: 1c:30:65:12:6b:2f:b4:7f:69:fd:74:27:67:a2:1f: c8:30:ff:19:74:47:d9:c5:61:c0:78:2c:17:83:80: ed:4b:ea:67:13:30:ba:63:1e:66:61:33:e2:9f:a9: 82:63:bd:02:0c:95:15:8c:e1:b5:f2:36:ad:28:64: 42:a0:14:10:6e:c5:cf:29:c1:bd:f7:2d:df:50:9d: 6e:d2:3a:3d:15:de:34:fa:81:ee:a9:63:1d:27:ca: 01:65:c9:74:fe:e1:ed:c8:4c:c8:5b:c5:ea:00:ca: 36:e7:95:ee:04:7a:2f:79:04:97:42:6e:1e:f1:c6: 79:65:20:16:e8:d0:ae:8a:98:07:1a:05:4e:d8:da: f7:76:c2:a6:1c:cd:32:66:17:11:03:e1:3c:eb:bf: 4b:a4:a2:e0:a5:e0:23:37:59:0d:7e:38:cc:43:2c: 8b:24:4a:6d:da:f2:50:5a:76:bf:91:6b:30:03:17: 23:73:ad:52:fc:b4:cf:29:f4:55:2a:48:6a:32:b4: e0:92:4a:66:7b:4c:1f:b5:96:ec:11:48:94:39:05: cc:d9:68:9c:63:ac:25:7a:84:cd:ec:a9:f3:50:31: b2:1b:52:93:5d:33:e6:b2:7c:65:d3:ac:43:a6:82: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:37:82:54:47:65:7B:FD:C8:E4:AF:37:29:37:0D:58:0F:24:DF:9C X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:78:00:44:76:2f:e0:c4:7c:46:d8:91:59:95:9a:ce:37:fc: 8d:59:9a:4d:98:4b:c1:e2:ca:27:66:b5:b6:03:de:2f:1c:12: cf:8b:c3:95:41:1a:a8:3c:1b:72:76:1e:6b:72:7e:7a:0f:1e: cc:49:d3:a9:2a:d3:e7:80:2b:0d:73:b6:60:45:f7:32:c5:8c: 0b:be:42:e4:ba:fd:22:3d:09:90:87:28:ff:8e:a0:cc:cd:fb: 77:9d:df:e5:f9:b5:96:3e:62:c2:8c:99:2f:41:60:ac:3d:c4: 23:c5:08:fe:39:52:66:dd:49:92:57:57:32:6f:cc:53:8e:49: 82:27:62:52:66:eb:a7:f7:1f:a6:15:8f:04:b0:d9:ec:4a:11: 17:7c:80:7a:75:d8:5a:80:25:f3:e1:6b:3a:b0:af:c2:1e:28: fc:87:ec:5e:4d:9e:76:a2:22:de:ba:c3:dd:b5:9c:58:68:06: b5:cd:3c:e9:3b:fa:fe:d3:aa:63:26:62:33:d0:4d:af:a9:b8: 5d:d6:67:a5:4c:a0:f7:f3:d0:02:67:f3:e6:52:e8:c6:67:d3: 38:51:d2:a0:1d:d8:2d:32:0d:d9:e8:cf:db:b0:6a:b1:60:64: ea:54:48:57:59:cd:ed:5a:51:a8:8b:1a:db:d0:b9:61:76:27: e2:a3:1a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUxMDE4MjMxODQ0WhcNMjUxMDI1MjMxODQ0WjAYMRYwFAYD VQQDEw02OGY0MjA1NC01M2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JS0FsUEKSo+ZHkj0hccMGUSay+0f2n9dCdnoh/IMP8ZdEfZxWHAeCwXg4Dt S+pnEzC6Yx5mYTPin6mCY70CDJUVjOG18jatKGRCoBQQbsXPKcG99y3fUJ1u0jo9 Fd40+oHuqWMdJ8oBZcl0/uHtyEzIW8XqAMo255XuBHoveQSXQm4e8cZ5ZSAW6NCu ipgHGgVO2Nr3dsKmHM0yZhcRA+E8679LpKLgpeAjN1kNfjjMQyyLJEpt2vJQWna/ kWswAxcjc61S/LTPKfRVKkhqMrTgkkpme0wftZbsEUiUOQXM2WicY6wleoTN7Knz UDGyG1KTXTPmsnxl06xDpoIFowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF03glRH ZXv9yOSvNyk3DVgPJN+cMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1eABEdi/gxHxG2JFZlZrON/yNWZpNmEvB4sonZrW2A94vHBLPi8OV QRqoPBtydh5rcn56Dx7MSdOpKtPngCsNc7ZgRfcyxYwLvkLkuv0iPQmQhyj/jqDM zft3nd/l+bWWPmLCjJkvQWCsPcQjxQj+OVJm3UmSV1cyb8xTjkmCJ2JSZuun9x+m FY8EsNnsShEXfIB6ddhagCXz4Ws6sK/CHij8h+xeTZ52oiLeusPdtZxYaAa1zTzp O/r+06pjJmIz0E2vqbhd1melTKD389ACZ/PmUujGZ9M4UdKgHdgtMg3Z6M/bsGqx YGTqVEhXWc3tWlGoixrb0Llhdifioxrv -----END CERTIFICATE-----Generated at Mon Oct 20 05:42:56 2025 by rpki-client