$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: jW/M9r6Qjo1xEgxzAqKuUZrBaTdOmvQdKYof9uNAoYQ= Subject key identifier: 2E:98:29:52:7D:68:97:C2:4E:0D:FD:3E:1D:56:B6:A4:9E:06:3C:62 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 07:39:26 +0000 Manifest this update: Sun 19 Oct 2025 07:39:25 +0000 Manifest next update: Sun 26 Oct 2025 07:39:25 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: mIFqQ0Mtgqwar/nn8Hh4aXlonSQfRyeuVnxiICS1tMI=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Oct 19 07:39:25 2025 GMT Not After : Oct 26 07:39:25 2025 GMT Subject: CN=68f495ad-9a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:76:9a:07:86:b9:50:7a:64:be:3a:56:a6: f8:c8:3f:25:5e:12:11:00:8e:da:31:d3:4c:62:cf: 40:3c:c1:dc:d6:0c:d7:ac:8f:72:d6:1f:a0:01:c3: 88:a4:42:dc:b8:0b:7e:d9:b5:8f:d4:f4:c4:4f:47: 4a:81:9f:6e:2a:5c:98:c7:5f:02:0f:71:9e:76:3f: a1:c4:19:b3:ce:9f:5f:8d:9f:65:d6:53:07:90:97: 38:9f:ce:86:90:a9:45:ba:cc:44:47:b0:e7:07:cb: 49:e9:a7:ac:c2:39:93:32:ab:a3:f8:56:b3:ba:23: 6b:45:4a:83:ef:da:7f:df:4b:c2:a8:4a:30:02:6d: 7c:05:0a:fb:32:b3:f0:f7:c2:0f:2d:52:88:12:98: 28:76:16:94:c5:0d:7e:49:42:39:cc:93:2f:12:c9: f9:10:95:b5:56:e8:0c:94:ec:f1:6b:fe:53:c6:0b: 10:32:27:5b:bc:5c:ec:c9:35:30:c8:af:de:3a:6a: ef:fd:f5:c1:1d:04:e9:b2:1c:41:a2:4e:2b:50:20: 0a:2c:d7:e3:66:c8:fa:a9:f2:a5:b4:12:6a:0a:5a: 6f:a2:7b:8b:90:61:a5:6e:71:30:13:61:0a:bb:2d: 1a:26:15:10:ad:37:34:62:be:98:a2:7a:1e:2e:76: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:29:52:7D:68:97:C2:4E:0D:FD:3E:1D:56:B6:A4:9E:06:3C:62 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:88:3b:cf:46:e5:94:b9:0f:cc:03:d7:8e:d0:c0:25:a5:55: 2f:30:ea:64:da:42:2f:aa:9a:1c:8a:fe:81:bb:04:f8:09:49: fe:ef:e6:6c:a0:55:a1:27:62:fa:81:33:bd:6a:58:2e:87:79: b1:9f:07:46:94:46:0a:b2:b0:91:d3:83:6b:dd:2f:1a:1d:f1: 49:8c:fc:37:8e:8c:6d:5c:fe:49:99:ac:0a:80:f3:68:b2:9e: 82:62:52:8f:35:05:72:4a:75:a0:97:31:a0:7e:79:25:94:cf: f2:92:90:ba:7f:62:ff:10:b5:0e:dc:3e:d8:2c:fc:24:09:1a: 65:9b:4a:b7:6b:7a:57:f5:f8:a4:cb:5c:15:73:30:01:94:ea: 69:d7:49:27:3f:74:07:a4:cf:4f:af:3f:d6:49:7e:f4:44:f4: 4b:5a:0f:a9:36:11:d4:49:bf:ac:70:b3:5c:bf:61:e6:be:47: a5:a6:b8:0a:5d:d5:0e:1a:6f:09:a6:bc:b2:41:67:40:53:55: 0b:dd:7a:c5:6e:1a:6c:67:be:95:5a:a4:d9:53:a5:c2:a9:35: 19:76:a4:07:96:39:41:e9:9b:78:43:0b:74:33:5d:78:54:be: cd:c9:a3:27:34:38:42:c7:ac:6a:24:a6:d6:53:6b:9f:4b:53: 61:5a:ef:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUxMDE5MDczOTI1WhcNMjUxMDI2MDczOTI1WjAYMRYwFAYD VQQDEw02OGY0OTVhZC05YTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUZ2mgeGuVB6ZL46Vqb4yD8lXhIRAI7aMdNMYs9APMHc1gzXrI9y1h+gAcOI pELcuAt+2bWP1PTET0dKgZ9uKlyYx18CD3Gedj+hxBmzzp9fjZ9l1lMHkJc4n86G kKlFusxER7DnB8tJ6aeswjmTMquj+FazuiNrRUqD79p/30vCqEowAm18BQr7MrPw 98IPLVKIEpgodhaUxQ1+SUI5zJMvEsn5EJW1VugMlOzxa/5TxgsQMidbvFzsyTUw yK/eOmrv/fXBHQTpshxBok4rUCAKLNfjZsj6qfKltBJqClpvonuLkGGlbnEwE2EK uy0aJhUQrTc0Yr6YonoeLnaZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6YKVJ9 aJfCTg39Ph1WtqSeBjxiMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7iDvPRuWUuQ/MA9eO0MAlpVUvMOpk2kIvqpociv6BuwT4CUn+7+Zs oFWhJ2L6gTO9alguh3mxnwdGlEYKsrCR04Nr3S8aHfFJjPw3joxtXP5JmawKgPNo sp6CYlKPNQVySnWglzGgfnkllM/ykpC6f2L/ELUO3D7YLPwkCRplm0q3a3pX9fik y1wVczABlOpp10knP3QHpM9Prz/WSX70RPRLWg+pNhHUSb+scLNcv2HmvkelprgK XdUOGm8JpryyQWdAU1UL3XrFbhpsZ76VWqTZU6XCqTUZdqQHljlB6Zt4Qwt0M114 VL7NyaMnNDhCx6xqJKbWU2ufS1NhWu/A -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:21 2025 by rpki-client