$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft File: rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json) Hash identifier: 0RBTYBrSO0LAXe5eiqsEc8/MCfA4xgjRwPgScqKMKFQ= Subject key identifier: A5:00:78:BC:D7:6F:DB:A4:BA:16:FB:7A:D0:4B:99:F1:9A:AB:8A:E6 Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE Certificate issuer: /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Certificate serial: 1107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft Manifest number: 10FF Signing time: Sat 18 Oct 2025 17:49:29 +0000 Manifest this update: Sat 18 Oct 2025 17:49:29 +0000 Manifest next update: Sat 25 Oct 2025 17:49:29 +0000 Files and hashes: 1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: iEMlTqrHN0O13qdIf1OXj795ul1VTOM9Gbi4JJBwoJY=) 2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: CkHze899oLtDE8NmW64bq/+8jNoI8+T8tB+dRDVhSSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4359 (0x1107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Validity Not Before: Oct 18 17:49:29 2025 GMT Not After : Oct 25 17:49:29 2025 GMT Subject: CN=68f3d329-9ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:b1:4e:ea:e0:26:65:fb:de:a9:e1:ca:d8: 25:92:9f:be:78:8f:b1:d3:ee:cb:12:30:a5:fa:d9: 21:03:5e:6a:a5:04:e3:10:33:aa:54:dc:fa:11:bf: 66:73:7d:b0:0b:50:ab:be:15:1f:7a:9b:1d:88:fd: 38:12:a2:24:29:14:e7:e3:26:5b:12:cd:87:ae:13: 87:7b:4b:5c:53:37:16:d3:8f:9d:5a:36:e4:21:82: 96:0e:28:76:54:3d:aa:41:7a:cc:25:b3:14:b0:5e: 4c:66:0d:52:fa:13:c3:7b:04:24:99:11:da:6e:61: bd:1c:4a:aa:00:ac:de:4d:38:16:ec:59:56:b7:1e: 6c:4a:5f:9e:42:9f:c6:52:94:00:03:c6:bc:99:90: e5:7a:69:5f:9c:85:ad:06:67:02:50:95:7a:b6:3b: b5:0d:ef:9d:17:68:b9:25:15:34:a2:73:22:5e:6c: 62:16:7d:8b:51:fd:f7:53:b2:fe:5b:85:f9:b5:00: 2b:81:d3:59:f6:78:1a:6c:33:7a:bf:bd:bd:e5:9a: 5a:0a:0b:47:d5:3c:42:de:bc:9b:15:33:59:1a:51: 78:79:c3:dd:b2:64:7d:da:5d:47:ce:a3:a2:bd:c0: 6a:9e:da:66:47:ae:f5:3f:76:63:36:88:6b:9c:b9: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:78:BC:D7:6F:DB:A4:BA:16:FB:7A:D0:4B:99:F1:9A:AB:8A:E6 X509v3 Authority Key Identifier: keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:05:9f:21:8a:cb:13:86:d2:ec:63:79:a8:cd:fb:c2:d8: 7b:0d:48:a5:93:cd:33:7c:07:ef:b9:aa:eb:5e:a5:ed:48:ba: d1:59:81:1a:fb:de:2b:3d:96:cb:23:bc:47:8d:cd:4b:b6:40: 5c:d5:67:49:65:16:c8:f1:ed:7d:2c:9c:3d:c7:3a:4c:17:43: a8:a8:03:c9:8a:1a:04:a6:4a:de:29:91:16:1c:ac:75:61:84: 19:c9:a8:d4:b9:92:25:a9:29:65:4d:2c:0e:76:c8:88:ed:13: a1:36:a2:26:1e:58:b0:ff:8d:31:8d:ce:64:8d:f9:c4:ba:ec: 7a:d3:8a:bf:14:37:84:cd:25:7b:36:9d:a0:42:ba:5e:1e:08: 0f:d9:fb:7e:97:f0:77:32:02:1a:b6:3d:08:ee:13:78:48:b8: bd:f0:b2:db:6e:47:b3:79:d8:ec:5a:55:26:48:d8:12:e4:40: 39:57:1d:8f:6a:e3:e2:24:74:4c:f6:1f:12:78:00:2d:86:09: f5:8b:d1:0c:ad:64:ee:19:26:17:4e:bc:2a:4d:af:ae:fb:ee: df:2a:60:f5:db:8a:1f:f2:69:1f:0e:89:be:0d:3f:3d:8d:50: 8c:48:49:00:92:0a:be:a5:a9:9c:10:bc:5c:02:6f:ba:31:d2: bc:ee:b0:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKEFEMjFFMkEwODg3RDgwMTA1ODgzNjlGMTQ3ODU5NjAy ODQ3N0NEQkUwHhcNMjUxMDE4MTc0OTI5WhcNMjUxMDI1MTc0OTI5WjAYMRYwFAYD VQQDEw02OGYzZDMyOS05Y2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2OxTurgJmX73qnhytglkp++eI+x0+7LEjCl+tkhA15qpQTjEDOqVNz6Eb9m c32wC1CrvhUfepsdiP04EqIkKRTn4yZbEs2HrhOHe0tcUzcW04+dWjbkIYKWDih2 VD2qQXrMJbMUsF5MZg1S+hPDewQkmRHabmG9HEqqAKzeTTgW7FlWtx5sSl+eQp/G UpQAA8a8mZDlemlfnIWtBmcCUJV6tju1De+dF2i5JRU0onMiXmxiFn2LUf33U7L+ W4X5tQArgdNZ9ngabDN6v7295ZpaCgtH1TxC3rybFTNZGlF4ecPdsmR92l1HzqOi vcBqntpmR671P3ZjNohrnLkVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUAeLzX b9ukuhb7etBLmfGaq4rmMB8GA1UdIwQYMBaAFK0h4qCIfYAQWINp8UeFlgKEd82+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri85NEZGQkFBMDI1 MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdCQllnMm54UjRXV0FvUjN6 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSGlvSWg5Z0JCWWcybnhSNFdXQW9SM3piNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri85NEZGQkFBMDI1MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdC QllnMm54UjRXV0FvUjN6YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncQWfIYrLE4bS7GN5qM37wth7DUilk80zfAfvuarrXqXtSLrRWYEa +94rPZbLI7xHjc1LtkBc1WdJZRbI8e19LJw9xzpMF0OoqAPJihoEpkreKZEWHKx1 YYQZyajUuZIlqSllTSwOdsiI7ROhNqImHliw/40xjc5kjfnEuux604q/FDeEzSV7 Np2gQrpeHggP2ft+l/B3MgIatj0I7hN4SLi98LLbbkezedjsWlUmSNgS5EA5Vx2P auPiJHRM9h8SeAAthgn1i9EMrWTuGSYXTrwqTa+u++7fKmD124of8mkfDom+DT89 jVCMSEkAkgq+pamcELxcAm+6MdK87rDV -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:55 2025 by rpki-client