$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json) Hash identifier: WqQYWzu7A0nB/cFfzs/5I7qBxYgHmt4KNlIOCDyFw7s= Subject key identifier: 16:59:2C:9C:75:A0:B4:CE:00:64:54:54:44:9D:F0:29:41:AD:1D:75 Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft Manifest number: FF Signing time: Sun 19 Oct 2025 08:03:19 +0000 Manifest this update: Sun 19 Oct 2025 08:03:18 +0000 Manifest next update: Sun 26 Oct 2025 08:03:18 +0000 Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: KQia6BchRNpSZCZWBgA6CbmFOd+i+PaJX5AhNs/csZ8=) 2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: RJoaBkivOrsbbGOk4+rF7GV3mPNikd+l5jkX1SaMaN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Validity Not Before: Oct 19 08:03:18 2025 GMT Not After : Oct 26 08:03:18 2025 GMT Subject: CN=68f49b46-7395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:25:07:09:00:6c:08:ef:c8:99:87:b0:2a: 48:a1:aa:19:2d:7f:17:e2:be:69:90:b8:11:a6:46: 1c:5e:54:a9:a0:d5:e6:6e:29:40:03:eb:ff:94:10: 1a:d1:46:7a:b2:ca:b9:8e:dd:d5:a9:81:e5:5a:49: 01:93:1a:bd:28:60:f6:b6:ce:fc:d7:76:8b:5b:69: 98:03:d0:cb:6f:26:24:d5:18:0d:96:6c:4c:39:43: 00:74:c7:c4:ef:e3:b1:64:11:93:c1:a1:82:91:27: 23:9d:ed:4b:37:44:b9:d8:02:6a:e0:3b:56:ab:4c: bf:24:1f:fe:f3:97:88:58:4d:80:b7:58:53:60:96: 29:4c:3b:d4:4f:85:dd:51:d2:21:b4:75:81:f4:87: 6d:d1:f4:77:e5:21:49:32:e7:fa:5e:51:f6:9b:c7: c1:7e:be:8c:a2:32:32:25:66:45:75:a2:27:ac:6b: 7b:7d:72:16:40:62:0d:17:a2:8f:c8:34:0d:1e:ae: 3b:8f:c6:77:cd:02:ef:04:e9:a3:fd:5a:3b:6b:2f: 4a:6a:a6:c1:11:cd:85:91:4a:95:75:ac:37:19:9f: b9:99:6b:d1:ae:ed:54:f6:cf:0b:d3:59:f1:3d:6d: a9:2f:d0:76:7f:0e:44:90:7d:ce:a7:4c:12:14:31: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:59:2C:9C:75:A0:B4:CE:00:64:54:54:44:9D:F0:29:41:AD:1D:75 X509v3 Authority Key Identifier: keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ba:ab:df:ee:3b:d0:a4:11:d9:fd:db:71:3a:c6:c7:4b:a0: fa:ca:f4:8c:f9:e3:10:4f:8e:d1:e8:ee:09:f3:ff:30:15:e0: c0:82:9a:45:c2:62:0c:c6:fc:1b:9a:c5:59:72:fb:dc:90:94: df:aa:b2:cb:ff:4f:5e:6c:24:ed:8d:c5:23:49:3a:ce:53:ee: 6c:f4:90:ca:3a:b4:75:71:70:bd:a1:13:79:89:97:18:4b:dc: 31:c0:da:a7:30:d7:7f:65:bb:59:b3:2d:ff:77:b9:35:7a:d8: 7f:ca:34:a7:71:b8:b8:b7:14:4c:68:3a:b7:98:a0:d3:e0:da: 17:1c:8a:84:e7:c7:7f:26:ba:5f:8c:61:1e:2d:5e:87:4d:33: 42:ff:62:4b:74:ff:5e:71:c7:99:8f:06:7f:4d:e6:2e:16:89: 42:6d:cd:65:1d:16:b1:11:f7:8a:33:4f:ae:20:7e:81:4f:50: 63:b6:1d:41:9f:73:7d:b8:e4:d0:88:15:aa:b9:6a:68:8d:c0: 03:d4:7f:60:7a:aa:df:b1:ea:50:83:a6:22:04:59:6a:5c:90: d7:fb:97:e6:40:f1:8c:3d:bb:2a:2d:ff:35:7a:3d:5b:98:e9: 52:4a:28:a6:a8:c0:30:b8:61:56:c1:c0:94:64:e4:2a:36:e4: 80:7b:cb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFRUIxMTAvBgNVBAUTKEE2MTk5NTBDQ0E2NDY0ODdBQjlCRDQ0QTQxRjdGNkM5 QjQwOUIzRDcwHhcNMjUxMDE5MDgwMzE4WhcNMjUxMDI2MDgwMzE4WjAYMRYwFAYD VQQDEw02OGY0OWI0Ni03Mzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYQlBwkAbAjvyJmHsCpIoaoZLX8X4r5pkLgRpkYcXlSpoNXmbilAA+v/lBAa 0UZ6ssq5jt3VqYHlWkkBkxq9KGD2ts7813aLW2mYA9DLbyYk1RgNlmxMOUMAdMfE 7+OxZBGTwaGCkScjne1LN0S52AJq4DtWq0y/JB/+85eIWE2At1hTYJYpTDvUT4Xd UdIhtHWB9Idt0fR35SFJMuf6XlH2m8fBfr6MojIyJWZFdaInrGt7fXIWQGINF6KP yDQNHq47j8Z3zQLvBOmj/Vo7ay9KaqbBEc2FkUqVdaw3GZ+5mWvRru1U9s8L01nx PW2pL9B2fw5EkH3Op0wSFDEjMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZZLJx1 oLTOAGRUVESd8ClBrR11MB8GA1UdIwQYMBaAFKYZlQzKZGSHq5vUSkH39sm0CbPX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEVFQi9GNDkxMTQ4MDJC QzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJZXJtOVJLUWZmMnliUUpz OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEVFQi9GNDkxMTQ4MDJCQzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJ ZXJtOVJLUWZmMnliUUpzOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZuqvf7jvQpBHZ/dtxOsbHS6D6yvSM+eMQT47R6O4J8/8wFeDAgppF wmIMxvwbmsVZcvvckJTfqrLL/09ebCTtjcUjSTrOU+5s9JDKOrR1cXC9oRN5iZcY S9wxwNqnMNd/ZbtZsy3/d7k1eth/yjSncbi4txRMaDq3mKDT4NoXHIqE58d/Jrpf jGEeLV6HTTNC/2JLdP9ecceZjwZ/TeYuFolCbc1lHRaxEfeKM0+uIH6BT1Bjth1B n3N9uOTQiBWquWpojcAD1H9geqrfsepQg6YiBFlqXJDX+5fmQPGMPbsqLf81ej1b mOlSSiimqMAwuGFWwcCUZOQqNuSAe8u2 -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:08 2025 by rpki-client