$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: u+EaeaJK2WrM1YX2JNheWzlv9N0BBEfUyYksgi/h2Rw= Subject key identifier: 12:40:74:65:42:C1:DD:DF:F5:52:70:1F:C9:4C:5F:40:B9:33:A8:85 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 06AE Signing time: Sat 18 Oct 2025 23:38:44 +0000 Manifest this update: Sat 18 Oct 2025 23:38:44 +0000 Manifest next update: Sat 25 Oct 2025 23:38:44 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: drYBsA3juffj3BocbxS6m14baUBBzBigebe7VohomUw=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Oct 18 23:38:44 2025 GMT Not After : Oct 25 23:38:44 2025 GMT Subject: CN=68f42504-59b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:96:41:3b:14:73:c4:6b:9d:c9:a0:e1:37:c2: 0d:66:7f:02:87:4f:37:65:91:54:c8:f7:85:d7:6a: 21:57:a4:76:9e:8a:3a:39:b2:84:cd:08:f5:ed:08: 4e:2b:e6:43:c5:8b:4a:92:b8:e3:12:1a:45:21:81: b4:6f:b3:b3:fb:62:6c:87:b5:57:c6:53:8b:78:14: fd:3d:db:2b:78:51:74:67:94:aa:a2:8f:56:eb:85: 38:2e:78:6b:b2:b0:a6:96:c7:38:9c:79:1b:d1:6f: 88:e9:f9:39:87:7a:29:fd:b4:2e:51:17:f4:ce:29: 48:31:40:9b:1a:8f:8b:21:d5:a9:a1:fb:e4:22:05: fb:05:8a:ec:ad:19:0a:1d:6c:5d:1a:6b:75:5b:da: 23:68:8e:ce:35:ba:69:1d:b3:44:3a:66:75:c4:96: 13:01:c0:86:9a:99:f1:53:4c:79:04:55:4b:7b:18: 4f:36:d1:ed:6f:6f:f2:7d:91:0b:ad:ff:8e:e7:94: 93:4a:23:a1:b1:12:51:bf:0a:6a:d6:83:a9:94:5a: db:f2:11:17:3b:e8:74:9e:6f:bf:0b:61:ff:28:c5: 2e:dd:99:eb:a1:f1:2e:a6:62:95:28:91:27:96:d5: 1c:f3:38:3a:47:0b:47:5e:bc:ff:0d:d4:9f:0f:20: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:40:74:65:42:C1:DD:DF:F5:52:70:1F:C9:4C:5F:40:B9:33:A8:85 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:f3:73:bd:d5:fe:96:47:ad:dc:a3:48:c7:b7:90:fe:1e:26: 36:39:cd:76:d8:21:7e:93:ce:30:32:b3:09:0a:91:b1:43:98: 3f:7d:36:de:98:b8:09:72:a6:f6:e5:aa:33:94:8a:29:c4:55: ac:b9:12:6d:3a:10:58:ba:08:6b:02:49:4c:8a:4b:ef:58:2d: ae:3d:53:4d:4a:26:25:ae:b7:13:66:06:67:ae:b9:75:72:46: 51:7d:78:fb:a2:42:f8:95:98:0b:a7:3e:f9:c4:2e:e4:ce:5e: 3f:a3:0c:8b:57:8d:bb:f7:ca:5b:b8:63:18:19:42:8c:61:bd: c4:05:32:7e:d8:19:df:c1:17:07:92:d8:39:1f:e3:21:47:0e: 8f:e8:16:72:ba:dd:76:f4:69:90:aa:30:b6:89:9a:f0:16:f3: 52:fd:86:1c:4f:3d:8d:9a:0f:e5:ff:01:17:18:de:0f:be:12: a8:13:26:9a:dc:0e:0d:c1:6b:e6:c6:2a:db:b5:67:04:5d:00: f1:c9:a1:74:fe:3f:ba:6c:4e:ec:0e:28:d7:2a:82:e9:28:bc: a8:18:cc:e0:40:ef:ee:b3:6a:ff:e1:02:4f:9c:43:33:04:1c: e3:3b:8a:5b:f1:a0:81:2c:dc:1c:50:63:c5:9c:2d:c4:d4:34: fe:a0:24:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjUxMDE4MjMzODQ0WhcNMjUxMDI1MjMzODQ0WjAYMRYwFAYD VQQDEw02OGY0MjUwNC01OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZZBOxRzxGudyaDhN8INZn8Ch083ZZFUyPeF12ohV6R2noo6ObKEzQj17QhO K+ZDxYtKkrjjEhpFIYG0b7Oz+2Jsh7VXxlOLeBT9PdsreFF0Z5Sqoo9W64U4Lnhr srCmlsc4nHkb0W+I6fk5h3op/bQuURf0zilIMUCbGo+LIdWpofvkIgX7BYrsrRkK HWxdGmt1W9ojaI7ONbppHbNEOmZ1xJYTAcCGmpnxU0x5BFVLexhPNtHtb2/yfZEL rf+O55STSiOhsRJRvwpq1oOplFrb8hEXO+h0nm+/C2H/KMUu3ZnrofEupmKVKJEn ltUc8zg6RwtHXrz/DdSfDyAY/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJAdGVC wd3f9VJwH8lMX0C5M6iFMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF83O91f6WR63co0jHt5D+HiY2Oc122CF+k84wMrMJCpGxQ5g/fTbe mLgJcqb25aozlIopxFWsuRJtOhBYughrAklMikvvWC2uPVNNSiYlrrcTZgZnrrl1 ckZRfXj7okL4lZgLpz75xC7kzl4/owyLV42798pbuGMYGUKMYb3EBTJ+2BnfwRcH ktg5H+MhRw6P6BZyut129GmQqjC2iZrwFvNS/YYcTz2Nmg/l/wEXGN4PvhKoEyaa 3A4NwWvmxirbtWcEXQDxyaF0/j+6bE7sDijXKoLpKLyoGMzgQO/us2r/4QJPnEMz BBzjO4pb8aCBLNwcUGPFnC3E1DT+oCRi -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:42 2025 by rpki-client