$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: sy+xepL6CZ5I76DVJuhaFl+6IZ83MiSoHlTai4uL1hk= Subject key identifier: 17:35:26:6A:C0:B1:3F:86:B4:F0:AC:11:C2:C1:2C:58:14:30:19:66 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: C3 Signing time: Sun 19 Oct 2025 09:00:03 +0000 Manifest this update: Sun 19 Oct 2025 09:00:02 +0000 Manifest next update: Sun 26 Oct 2025 09:00:02 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: guKiNoG7/oDni+s7xjWOAOsDOT1GWhJw4jBp64dukCU=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Oct 19 09:00:02 2025 GMT Not After : Oct 26 09:00:02 2025 GMT Subject: CN=68f4a893-0a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:8c:15:5c:8e:f0:11:5f:47:d4:0a:7c:33: 79:12:82:75:2b:36:1f:33:98:7b:31:b3:d9:6c:f1: 0e:d6:f0:0a:e1:24:c5:39:25:2e:dd:61:9e:a1:4c: 8b:79:f7:57:8f:f4:38:5d:07:eb:ee:03:2e:b7:f2: da:72:6f:cd:01:be:a2:84:29:80:4f:b0:8e:1a:cc: a9:55:5c:02:fc:0b:b3:b0:a2:07:9f:56:2c:7d:0d: d8:31:fb:b5:51:07:3b:72:88:52:32:0d:0e:c5:cf: 29:b0:c4:a6:a7:7b:3f:c5:da:13:9e:36:2b:b4:b1: 66:56:d2:d9:09:1b:2e:e8:8f:a9:e8:e7:1a:99:74: 00:21:f5:8e:4c:e3:f5:a6:3b:54:53:26:3a:9d:7e: 96:e8:80:91:7f:c5:8b:1b:30:68:e3:fa:3b:8b:5f: d4:06:ff:fa:a7:e3:4d:22:e3:3b:6f:f8:fe:79:eb: 19:e2:eb:2a:fe:51:0d:92:2e:e7:60:ed:7e:c8:c8: 27:d0:90:f4:34:b5:9c:b3:9e:2c:33:ec:db:6e:ac: 5f:4d:c9:c4:72:b6:03:ca:55:e7:f6:b6:40:64:6b: 6f:f6:b4:29:c6:39:e3:86:d9:e7:ca:3d:7b:5b:11: fc:60:79:2b:7b:1a:8a:1e:85:a1:63:c1:3b:36:b6: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:35:26:6A:C0:B1:3F:86:B4:F0:AC:11:C2:C1:2C:58:14:30:19:66 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fd:1a:9f:6e:3d:7c:70:ae:19:1a:04:b0:f2:32:20:95:68: 2f:20:dd:da:61:29:f9:8b:ec:45:ff:8c:d4:5b:5b:c9:b0:4f: 11:48:af:d7:0e:85:8c:3c:9d:45:7e:88:d5:10:26:e7:2e:48: 4a:19:dc:93:01:6f:a6:c8:03:ba:33:ea:0f:94:9b:17:29:77: 37:a0:29:b2:24:8e:0c:bd:b5:57:2d:c5:09:65:fc:6f:d0:d1: 3d:2a:ea:21:ca:36:26:20:ce:dc:c9:d2:9b:0b:c2:c4:17:68: 47:d5:f2:d8:0f:bf:d7:f0:65:ed:ef:dc:a2:6d:6f:66:97:54: 17:f0:e0:73:b5:65:f5:e7:f0:41:b9:82:da:24:ff:e6:ca:43: 7c:67:1b:e1:92:e2:64:04:fa:dc:02:a3:32:ee:9b:95:a0:b5: b9:30:8a:f4:07:95:30:5c:00:3f:17:1b:ed:8a:e9:d0:c8:ff: f6:dd:ff:b4:37:cf:80:8d:9e:db:49:eb:9a:02:12:10:6e:5a: c0:30:db:a1:df:52:23:c6:d9:ee:b8:ee:00:ff:14:da:f6:25: c9:ba:d5:0c:27:c1:fd:48:7a:03:bb:aa:d8:45:27:8a:eb:f5: 77:48:8f:e1:32:a3:53:47:ae:43:93:8d:b4:56:42:79:2d:07: 57:b1:88:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUxMDE5MDkwMDAyWhcNMjUxMDI2MDkwMDAyWjAYMRYwFAYD VQQDEw02OGY0YTg5My0wYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BuMFVyO8BFfR9QKfDN5EoJ1KzYfM5h7MbPZbPEO1vAK4STFOSUu3WGeoUyL efdXj/Q4XQfr7gMut/Lacm/NAb6ihCmAT7COGsypVVwC/AuzsKIHn1YsfQ3YMfu1 UQc7cohSMg0Oxc8psMSmp3s/xdoTnjYrtLFmVtLZCRsu6I+p6OcamXQAIfWOTOP1 pjtUUyY6nX6W6ICRf8WLGzBo4/o7i1/UBv/6p+NNIuM7b/j+eesZ4usq/lENki7n YO1+yMgn0JD0NLWcs54sM+zbbqxfTcnEcrYDylXn9rZAZGtv9rQpxjnjhtnnyj17 WxH8YHkrexqKHoWhY8E7NrbsNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc1JmrA sT+GtPCsEcLBLFgUMBlmMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1/Rqfbj18cK4ZGgSw8jIglWgvIN3aYSn5i+xF/4zUW1vJsE8RSK/X DoWMPJ1FfojVECbnLkhKGdyTAW+myAO6M+oPlJsXKXc3oCmyJI4MvbVXLcUJZfxv 0NE9KuohyjYmIM7cydKbC8LEF2hH1fLYD7/X8GXt79yibW9ml1QX8OBztWX15/BB uYLaJP/mykN8ZxvhkuJkBPrcAqMy7puVoLW5MIr0B5UwXAA/FxvtiunQyP/23f+0 N8+AjZ7bSeuaAhIQblrAMNuh31IjxtnuuO4A/xTa9iXJutUMJ8H9SHoDu6rYRSeK 6/V3SI/hMqNTR65Dk420VkJ5LQdXsYgM -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:55 2025 by rpki-client