$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: rTuWIee9pmfbjA8hgkhigvlq0Bho7snm6VYrWz9MEeI= Subject key identifier: 15:7A:7F:A0:DC:2B:2B:A9:3B:7B:96:40:D8:DE:DD:F2:74:2A:9A:58 Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 97 Signing time: Sun 19 Oct 2025 09:36:39 +0000 Manifest this update: Sun 19 Oct 2025 09:36:39 +0000 Manifest next update: Sun 26 Oct 2025 09:36:39 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: xgcAamq8dFRE7Hgj6EEkY2FTm60FY68DmEMbCEFhdX4=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Oct 19 09:36:39 2025 GMT Not After : Oct 26 09:36:39 2025 GMT Subject: CN=68f4b127-41b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:d1:aa:3c:79:f2:7e:74:b5:de:5f:c9:57: 1f:00:91:9a:e2:51:06:c5:20:96:75:1c:e1:9b:61: e1:29:df:13:72:ff:25:b9:b3:2f:0e:6d:9f:e0:3a: 7a:fa:5e:4d:98:a6:20:b9:30:84:97:b1:55:3e:6c: a6:4f:fd:b8:79:82:fb:9e:59:0e:bc:b9:e8:49:89: fe:4c:f5:07:08:7c:81:ba:45:6d:9b:37:81:bf:5e: b1:30:22:34:fb:90:24:c6:49:0a:fc:c3:90:a3:e1: d3:ad:57:91:27:d7:af:df:66:8f:0e:2e:c4:dc:8e: 88:e5:c0:54:fe:44:39:5d:a0:70:a5:57:6f:8d:26: 27:98:d8:9e:9f:1c:62:16:32:16:7b:16:c1:45:46: c9:c7:32:3d:57:c6:06:e9:66:30:a6:6f:84:c4:35: d0:01:ce:f6:1b:4a:36:bd:0d:6e:b2:9d:d7:d4:ce: fd:8b:69:a3:0b:d8:8e:fc:95:e7:6b:45:f3:07:0f: ef:5b:f3:be:f2:be:b6:5a:15:8b:b1:4c:f8:af:c2: da:b2:02:6b:19:a3:45:9f:69:f0:28:da:34:5d:bf: d5:14:45:93:4b:08:1b:35:67:f4:41:cc:e4:b3:08: 29:fc:d0:23:d0:6b:ed:c2:7e:8e:05:c2:e5:dc:90: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:7F:A0:DC:2B:2B:A9:3B:7B:96:40:D8:DE:DD:F2:74:2A:9A:58 X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0f:66:87:db:49:78:78:a4:13:6f:8e:9f:9d:6c:c3:3e:ad: 4d:2f:f3:70:e6:6f:31:42:07:a5:6d:e8:43:75:0d:45:cd:ca: 2f:1b:72:b1:87:2d:51:b8:c3:0a:e4:d9:62:02:8e:41:e7:31: e9:f0:c5:22:3c:6b:e4:89:58:4b:e1:fd:18:d6:50:9f:fb:a9: d7:c3:59:b8:75:8f:77:25:ce:5b:7a:03:1a:d4:56:a8:15:0c: ee:47:a8:ce:62:51:e9:85:a3:7d:d8:c5:7b:ff:86:08:64:ef: 76:04:b6:ef:ce:7e:cb:63:e0:ee:3b:a5:4a:ac:91:7a:1f:c1: c5:a6:fa:dc:c6:56:b3:79:a4:21:e7:c9:bd:ab:53:87:63:e7: 2a:03:6f:56:db:79:22:77:94:41:6f:09:54:0c:bc:70:60:c9: 1c:79:4c:86:ca:c6:8c:e0:99:d5:cc:1b:4b:54:19:e6:ba:47: ac:aa:58:ba:f3:c3:3d:8e:cd:be:d4:12:ec:41:78:b5:9a:e1: e8:c9:78:b7:b5:3c:7e:0e:64:e7:80:40:31:70:f8:ee:2e:00: 83:ad:0c:bf:60:ba:7e:09:d7:e6:67:06:dc:f7:78:2f:31:97: 5b:a3:15:d4:a6:fa:dc:fb:62:13:26:c9:e3:ac:06:8b:a9:4d: 62:53:d8:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDk5QjcwQkYyMDI1RUREQ0RGOTJBNDdEMDRDQjc1NkFD QjA3M0RDNDUwHhcNMjUxMDE5MDkzNjM5WhcNMjUxMDI2MDkzNjM5WjAYMRYwFAYD VQQDEw02OGY0YjEyNy00MWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzrRqjx58n50td5fyVcfAJGa4lEGxSCWdRzhm2HhKd8Tcv8lubMvDm2f4Dp6 +l5NmKYguTCEl7FVPmymT/24eYL7nlkOvLnoSYn+TPUHCHyBukVtmzeBv16xMCI0 +5AkxkkK/MOQo+HTrVeRJ9ev32aPDi7E3I6I5cBU/kQ5XaBwpVdvjSYnmNienxxi FjIWexbBRUbJxzI9V8YG6WYwpm+ExDXQAc72G0o2vQ1usp3X1M79i2mjC9iO/JXn a0XzBw/vW/O+8r62WhWLsUz4r8LasgJrGaNFn2nwKNo0Xb/VFEWTSwgbNWf0Qczk swgp/NAj0Gvtwn6OBcLl3JDicQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV6f6Dc KyupO3uWQNje3fJ0KppYMB8GA1UdIwQYMBaAFJm3C/ICXt3N+SpH0Ey3Vqywc9xF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82REVGREI3MEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNjMzVLa2ZRVExkV3JMQnoz RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82REVGREI3MEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNj MzVLa2ZRVExkV3JMQnozRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhD2aH20l4eKQTb46fnWzDPq1NL/Nw5m8xQgelbehDdQ1FzcovG3Kx hy1RuMMK5NliAo5B5zHp8MUiPGvkiVhL4f0Y1lCf+6nXw1m4dY93Jc5begMa1Fao FQzuR6jOYlHphaN92MV7/4YIZO92BLbvzn7LY+DuO6VKrJF6H8HFpvrcxlazeaQh 58m9q1OHY+cqA29W23kid5RBbwlUDLxwYMkceUyGysaM4JnVzBtLVBnmukesqli6 88M9js2+1BLsQXi1muHoyXi3tTx+DmTngEAxcPjuLgCDrQy/YLp+CdfmZwbc93gv MZdboxXUpvrc+2ITJsnjrAaLqU1iU9hE -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:24 2025 by rpki-client