$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: GFvKykVuAqbmhypRhTVUog9+6YSR45WGG+97kqRXyoo= Subject key identifier: 73:B9:C5:C4:C8:3E:4E:38:42:4D:FA:65:FD:A9:B5:61:1A:98:76:19 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0801 Signing time: Sat 18 Oct 2025 22:11:20 +0000 Manifest this update: Sat 18 Oct 2025 22:11:19 +0000 Manifest next update: Sat 25 Oct 2025 22:11:19 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: uYv/YqDZ0bwX3pkenJT7ZX3HIOEj6K9520dz/rP6XNI=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: 0MurJBTWr3VBt4BzPGN6YSpJS0KuheQ6jbFiFb2lsDo=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: EDuSd7q+Wy9A9v2ymA1vM1CdQcsnayUqkzAJ0vginys=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: 3AbfHAacjnEAWoo2sa+rjsKYetf4drBAdDYIzgNRGw0=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: KAqNHdwX5NNEjIYv/SrmUHgArBmx24W5Jn9cFOvsuKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Oct 18 22:11:19 2025 GMT Not After : Oct 25 22:11:19 2025 GMT Subject: CN=68f41087-2135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:7f:e3:45:f9:69:0c:bb:67:05:3f:cb:2b: d6:91:e9:1e:c5:e0:e7:12:6e:a0:fd:37:9d:c8:80: 8d:f0:31:72:40:c4:d0:32:96:9f:6e:53:eb:ff:b1: 83:42:9c:39:1b:2a:08:cd:96:c6:0f:c0:56:2c:f7: 0c:62:28:71:f9:08:84:48:1a:d3:27:02:1e:25:ad: 64:a8:49:91:22:c2:85:23:49:08:2b:ca:33:ef:d9: 97:44:ac:50:e6:b7:0e:4c:c2:3f:34:15:0f:50:89: e9:6d:d0:fe:94:5a:57:4b:08:70:fc:71:65:83:7d: 33:b6:0b:10:d5:3f:92:e1:23:46:2a:66:f9:6a:d9: eb:41:89:28:d0:c0:4c:66:72:6a:96:7b:5b:a6:23: 9a:ae:9d:81:cf:a0:29:0a:84:7b:85:26:d7:9f:d4: 39:ce:0c:d7:1f:57:eb:10:37:73:b9:37:0a:88:34: 84:82:02:d2:4b:a9:b8:64:52:f6:75:d8:8c:9c:24: 45:c0:91:4a:4c:90:f1:5a:1a:40:71:85:49:f7:f9: 19:97:51:4f:8b:d5:85:74:b4:24:29:9c:4d:c1:34: 60:38:81:a2:40:9c:f9:01:72:cd:19:34:19:24:bf: 38:f0:83:15:a1:42:80:7a:64:30:f3:2b:c0:d9:38: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B9:C5:C4:C8:3E:4E:38:42:4D:FA:65:FD:A9:B5:61:1A:98:76:19 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b3:59:7d:06:e8:b3:60:56:b4:11:27:d2:8a:d5:fb:7d:06: a0:1d:b4:cb:d6:a0:d8:14:71:14:7c:f8:31:59:bf:ca:f0:bf: 46:34:e1:3d:f8:d6:f1:5e:5f:f3:f5:37:dd:7a:cc:ae:7d:91: ae:7c:b4:81:25:12:fa:80:1c:06:b9:59:08:f9:95:2e:c8:09: ec:b5:6d:52:63:d2:fc:67:99:96:59:5d:17:b9:a8:49:9e:72: f5:74:dd:92:11:07:8b:85:6d:7c:2a:62:cf:85:13:15:5f:3f: 13:8c:d4:06:4a:9b:03:f3:2e:bd:e2:29:b2:2b:a6:ec:d8:36: e7:4b:62:e1:c0:75:47:2c:22:ca:64:02:6a:79:41:fa:3f:74: 79:a6:e5:3d:99:56:fa:8c:fc:02:40:d3:f4:fe:b7:43:37:c3: 20:4f:db:e2:7a:6e:1f:eb:23:e8:e0:db:27:9c:b2:2c:02:31: ca:c8:39:05:ce:7e:cf:bf:37:79:87:50:32:80:2a:1e:fa:27: 27:1d:93:f5:9d:ef:51:fc:63:22:36:f4:cb:3c:17:9c:89:c3: 46:eb:43:8d:4c:93:30:2b:2f:48:4c:3a:61:ae:df:50:8d:e9: 77:6c:08:3d:4c:6f:0a:29:c1:86:9e:94:c9:0f:44:0e:60:db: 24:14:47:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUxMDE4MjIxMTE5WhcNMjUxMDI1MjIxMTE5WjAYMRYwFAYD VQQDEw02OGY0MTA4Ny0yMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu21/40X5aQy7ZwU/yyvWkekexeDnEm6g/TedyICN8DFyQMTQMpafblPr/7GD Qpw5GyoIzZbGD8BWLPcMYihx+QiESBrTJwIeJa1kqEmRIsKFI0kIK8oz79mXRKxQ 5rcOTMI/NBUPUInpbdD+lFpXSwhw/HFlg30ztgsQ1T+S4SNGKmb5atnrQYko0MBM ZnJqlntbpiOarp2Bz6ApCoR7hSbXn9Q5zgzXH1frEDdzuTcKiDSEggLSS6m4ZFL2 ddiMnCRFwJFKTJDxWhpAcYVJ9/kZl1FPi9WFdLQkKZxNwTRgOIGiQJz5AXLNGTQZ JL848IMVoUKAemQw8yvA2TiRlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHO5xcTI Pk44Qk36Zf2ptWEamHYZMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJs1l9BuizYFa0ESfSitX7fQagHbTL1qDYFHEUfPgxWb/K8L9GNOE9 +NbxXl/z9TfdesyufZGufLSBJRL6gBwGuVkI+ZUuyAnstW1SY9L8Z5mWWV0XuahJ nnL1dN2SEQeLhW18KmLPhRMVXz8TjNQGSpsD8y694imyK6bs2DbnS2LhwHVHLCLK ZAJqeUH6P3R5puU9mVb6jPwCQNP0/rdDN8MgT9viem4f6yPo4NsnnLIsAjHKyDkF zn7Pvzd5h1AygCoe+icnHZP1ne9R/GMiNvTLPBecicNG60ONTJMwKy9ITDphrt9Q jel3bAg9TG8KKcGGnpTJD0QOYNskFEdz -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:12 2025 by rpki-client