$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: OtKB5bmWq6BpC9IHI7kHsKu7TjvsFhFWXLoXQvDpT34= Subject key identifier: 49:BE:78:74:86:31:87:18:EE:3A:8B:9C:51:D8:54:96:EF:0E:7A:54 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0DA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D6B Signing time: Sat 18 Oct 2025 18:43:28 +0000 Manifest this update: Sat 18 Oct 2025 18:43:27 +0000 Manifest next update: Sat 25 Oct 2025 18:43:27 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: pmEwg/87ullKxszkw8ksFsFxtUbxGo5X6YTp7FdvSIM=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Oct 18 18:43:27 2025 GMT Not After : Oct 25 18:43:27 2025 GMT Subject: CN=68f3dfcf-2351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:f0:b5:b8:73:e6:e5:5b:27:46:17:1b:e8: 40:88:1f:36:aa:d9:aa:85:45:f1:56:c3:d8:29:96: 6c:b1:2e:98:2a:4d:4f:36:c8:50:0c:01:e2:d4:4c: d9:1c:64:74:03:96:82:9b:71:72:a8:c6:ca:b7:83: 17:99:9c:a9:0d:2c:40:69:94:f9:19:8c:b8:a6:12: 43:e1:87:85:09:df:16:a2:49:75:d0:4b:41:ba:8a: 8d:f2:f6:a4:8f:db:87:50:a1:25:e7:be:a4:2e:e9: e8:11:7d:6b:7b:83:c1:28:d2:b7:40:d6:30:ca:ab: 8e:8c:1b:0f:eb:c7:10:94:ad:e8:11:c4:a1:0a:31: e7:54:83:e2:84:f5:0e:dc:8d:44:a3:39:0b:c7:2d: ce:be:42:41:4a:36:62:11:9c:cf:e6:35:5a:21:5e: 1e:36:01:6a:5d:2f:88:9f:f5:b5:e6:a4:ba:f6:75: b6:ba:bd:51:37:15:d2:55:ad:e9:5f:e4:57:c4:1d: b0:ea:88:b0:4a:61:61:5c:3f:d1:4a:46:0a:39:20: 34:5e:83:1e:c0:a0:71:97:63:d4:cc:c6:15:41:ca: 06:a3:72:bb:c6:da:b5:a7:5f:b9:b2:7c:12:f6:ed: 67:f4:90:39:d5:ca:dd:d7:75:cf:d5:22:d5:2d:a5: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:78:74:86:31:87:18:EE:3A:8B:9C:51:D8:54:96:EF:0E:7A:54 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fd:6c:02:e4:d9:b4:e0:3d:23:52:32:c5:5a:79:1a:47:48: d3:14:5e:a6:80:c5:d4:f3:a5:d1:66:29:ca:51:98:7b:db:f5: 04:0a:99:17:ab:3a:c8:84:cd:60:69:22:b1:e9:f5:42:5c:2d: 94:47:80:e8:8a:44:bc:d6:3d:2e:15:9c:4c:26:20:60:06:ab: 0b:e9:1f:24:0d:e8:06:6d:b4:b8:3c:b2:cd:d3:37:ef:36:27: 17:87:da:35:bd:53:dd:f9:04:13:d3:f1:90:cc:cc:fd:95:5a: 19:3f:10:12:3b:c8:ae:64:13:1b:02:e0:39:d9:cc:97:7f:6b: 84:f0:71:d9:47:db:31:ec:c1:f4:c8:f1:f7:c1:65:1a:63:5e: ba:00:be:29:74:4e:82:ff:19:9c:4c:d0:5e:d5:d1:a9:d3:16: 22:78:64:c8:6c:b3:92:30:22:77:84:42:27:e4:ff:a6:ed:24: 0a:88:b9:44:48:a3:c5:99:62:8d:51:62:0d:fb:bc:4f:2f:0d: b9:2b:4b:c6:37:23:bc:1c:f8:fe:57:07:8d:c3:94:5c:de:6f: 9f:d2:d8:6a:14:63:17:35:66:7d:ed:b9:b4:2d:80:3b:6d:70: 37:aa:6a:24:04:f4:ca:87:90:5a:b5:60:bf:d2:7a:9f:b2:fd: ac:56:ca:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUxMDE4MTg0MzI3WhcNMjUxMDI1MTg0MzI3WjAYMRYwFAYD VQQDEw02OGYzZGZjZi0yMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv/wtbhz5uVbJ0YXG+hAiB82qtmqhUXxVsPYKZZssS6YKk1PNshQDAHi1EzZ HGR0A5aCm3FyqMbKt4MXmZypDSxAaZT5GYy4phJD4YeFCd8Wokl10EtBuoqN8vak j9uHUKEl576kLunoEX1re4PBKNK3QNYwyquOjBsP68cQlK3oEcShCjHnVIPihPUO 3I1EozkLxy3OvkJBSjZiEZzP5jVaIV4eNgFqXS+In/W15qS69nW2ur1RNxXSVa3p X+RXxB2w6oiwSmFhXD/RSkYKOSA0XoMewKBxl2PUzMYVQcoGo3K7xtq1p1+5snwS 9u1n9JA51crd13XP1SLVLaUcMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm+eHSG MYcY7jqLnFHYVJbvDnpUMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe/WwC5Nm04D0jUjLFWnkaR0jTFF6mgMXU86XRZinKUZh72/UECpkX qzrIhM1gaSKx6fVCXC2UR4DoikS81j0uFZxMJiBgBqsL6R8kDegGbbS4PLLN0zfv NicXh9o1vVPd+QQT0/GQzMz9lVoZPxASO8iuZBMbAuA52cyXf2uE8HHZR9sx7MH0 yPH3wWUaY166AL4pdE6C/xmcTNBe1dGp0xYieGTIbLOSMCJ3hEIn5P+m7SQKiLlE SKPFmWKNUWIN+7xPLw25K0vGNyO8HPj+VweNw5Rc3m+f0thqFGMXNWZ97bm0LYA7 bXA3qmokBPTKh5BatWC/0nqfsv2sVsr5 -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:49 2025 by rpki-client