$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: k2ze0JUaZ2h3QEfLRDjOCqrbHL5bCfrsefl1cD8SUhI= Subject key identifier: CF:CE:52:02:92:A2:C3:11:20:4D:F9:D4:54:CC:65:AA:6A:A7:A0:E7 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: 014A Signing time: Sun 19 Oct 2025 07:07:28 +0000 Manifest this update: Sun 19 Oct 2025 07:07:27 +0000 Manifest next update: Sun 26 Oct 2025 07:07:27 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: aA5u6b07/ETZ3Hg/bowt5oP79iRFpTncHOST+9EWEc8=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: Oct 19 07:07:27 2025 GMT Not After : Oct 26 07:07:27 2025 GMT Subject: CN=68f48e2f-9530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:2f:51:3e:e6:c1:73:44:fb:a4:a0:29:64: f0:cd:83:de:26:15:5d:df:2a:f2:ad:12:0b:ed:9e: ce:d2:c5:ea:ac:b2:59:8c:e7:2b:27:ad:bf:bb:cf: 5e:8f:10:bf:af:99:70:e8:94:1f:42:00:c5:4c:a9: 49:a5:21:7f:eb:27:6d:ad:2b:fa:0a:ab:49:ea:31: a5:39:e3:da:40:85:49:18:1e:33:14:6d:a8:5f:8d: 36:26:c6:7e:2b:3b:94:53:d6:fc:d0:f6:1c:02:0b: c4:d8:0b:7c:50:41:e8:7b:52:5c:73:76:1f:54:91: d2:d8:06:7d:3f:41:70:f9:6e:c1:26:11:54:23:01: 53:04:ea:54:6f:85:5c:67:a3:f1:e6:c6:c9:37:ed: 61:8e:dd:4b:66:ef:87:c3:8d:e8:db:67:f8:14:0b: 63:92:11:93:d7:f9:08:0c:1c:58:64:76:97:3e:40: ca:ca:c5:58:e2:f5:ff:a1:04:c0:f3:1d:2b:6b:5c: 01:d7:3f:8f:04:0b:df:1a:97:22:eb:a5:4a:f4:a1: 31:07:e7:91:de:53:ec:0f:5b:0c:44:b0:b6:de:44: 62:81:cd:fe:47:72:9a:66:87:6e:64:b8:03:ce:a4: 4b:f1:17:11:db:05:a6:31:57:b8:4a:c1:e9:20:5d: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:52:02:92:A2:C3:11:20:4D:F9:D4:54:CC:65:AA:6A:A7:A0:E7 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:97:53:35:24:7c:05:45:15:83:4f:35:e5:bf:3a:7a:f4: 43:12:e5:fd:00:f2:53:a8:64:fd:98:5a:f2:39:d4:63:22:fd: 77:16:17:d6:38:50:b5:b3:5d:bf:60:63:e9:18:65:ea:bd:52: 7a:9d:59:30:e5:67:7c:e5:e1:85:f2:fb:7e:77:61:58:85:d2: 3c:f7:78:70:22:1f:da:c9:53:64:09:33:d3:f9:dd:44:2a:bc: 37:e6:7a:28:5d:db:4f:78:7b:ea:40:fe:ca:34:27:33:fe:1d: 4a:05:07:63:76:ec:3b:48:5d:e9:9e:f6:fb:02:00:3a:af:30: 58:1c:9d:16:e4:e5:47:fa:57:d8:22:c5:b7:65:9a:79:a4:87: 4e:4a:96:8c:c2:b7:63:78:73:64:bf:ae:9c:cf:4c:14:71:99: c1:69:20:d1:87:2b:30:8f:92:db:17:4e:b2:ed:e0:cd:52:c0: da:ad:70:bc:d4:42:e9:40:a0:a6:47:78:e9:56:d1:ea:8f:d4: df:21:40:6e:b1:8e:3c:1f:c8:e6:86:d6:69:f4:bc:3a:8a:1b: ac:c4:36:a9:be:c7:aa:70:48:c9:91:99:91:fb:b0:4e:13:e6: 83:5d:8e:57:65:d9:d8:4b:d4:63:f0:03:0b:7f:8b:26:59:4b: f1:8b:e7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUxMDE5MDcwNzI3WhcNMjUxMDI2MDcwNzI3WjAYMRYwFAYD VQQDEw02OGY0OGUyZi05NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgIvUT7mwXNE+6SgKWTwzYPeJhVd3yryrRIL7Z7O0sXqrLJZjOcrJ62/u89e jxC/r5lw6JQfQgDFTKlJpSF/6ydtrSv6CqtJ6jGlOePaQIVJGB4zFG2oX402JsZ+ KzuUU9b80PYcAgvE2At8UEHoe1Jcc3YfVJHS2AZ9P0Fw+W7BJhFUIwFTBOpUb4Vc Z6Px5sbJN+1hjt1LZu+Hw43o22f4FAtjkhGT1/kIDBxYZHaXPkDKysVY4vX/oQTA 8x0ra1wB1z+PBAvfGpci66VK9KExB+eR3lPsD1sMRLC23kRigc3+R3KaZoduZLgD zqRL8RcR2wWmMVe4SsHpIF3+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/OUgKS osMRIE351FTMZapqp6DnMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxjJdTNSR8BUUVg0815b86evRDEuX9APJTqGT9mFryOdRjIv13FhfW OFC1s12/YGPpGGXqvVJ6nVkw5Wd85eGF8vt+d2FYhdI893hwIh/ayVNkCTPT+d1E Krw35nooXdtPeHvqQP7KNCcz/h1KBQdjduw7SF3pnvb7AgA6rzBYHJ0W5OVH+lfY IsW3ZZp5pIdOSpaMwrdjeHNkv66cz0wUcZnBaSDRhyswj5LbF06y7eDNUsDarXC8 1ELpQKCmR3jpVtHqj9TfIUBusY48H8jmhtZp9Lw6ihusxDapvseqcEjJkZmR+7BO E+aDXY5XZdnYS9Rj8AMLf4smWUvxi+fV -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:50 2025 by rpki-client