$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: vENPEj0bZZUlWDa9RxZjca0N5yweg9sazeBt1BKrNtI= Subject key identifier: 9F:62:E5:D0:D1:96:57:3B:7F:E5:F7:3E:FE:DD:E0:93:D1:31:B9:81 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: BA Signing time: Sun 19 Oct 2025 09:10:38 +0000 Manifest this update: Sun 19 Oct 2025 09:10:37 +0000 Manifest next update: Sun 26 Oct 2025 09:10:37 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: vuyhpDEc/kNZeK2SXfBJjUiWAC7xl0XcLOXY3Bk/z3c=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Oct 19 09:10:37 2025 GMT Not After : Oct 26 09:10:37 2025 GMT Subject: CN=68f4ab0e-b196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dd:72:6a:ef:58:88:c8:f9:a1:7c:5e:b5:03: 31:15:39:12:0e:f5:89:0e:43:d9:43:03:33:36:a4: 04:6a:db:5c:7f:a8:f8:a3:13:b2:9a:53:7f:ba:4c: 21:be:36:d0:76:78:4f:4f:af:1b:44:5a:f9:9c:e3: 74:a8:b4:b9:69:f5:70:e1:81:0d:6d:72:eb:46:c1: c3:37:81:16:eb:61:b1:f4:f8:a2:9a:d6:b9:2b:cd: 37:ad:18:04:1f:e0:36:01:6f:c3:99:46:d5:3d:bb: 8a:81:ad:cc:8d:6c:05:7c:0d:16:66:6e:60:ef:78: db:ad:5f:ac:6d:02:19:f0:86:2d:bf:60:14:0b:30: c0:1d:f1:18:f7:c9:e0:34:2b:39:c9:9a:11:fa:17: 0f:be:7a:76:4d:d8:73:07:16:40:87:28:80:e3:21: 58:33:0c:df:80:3e:34:b0:58:95:10:f1:df:0b:15: af:db:be:0a:1e:0c:a1:05:70:c9:60:97:72:b4:7c: 46:d9:ad:25:c0:24:9e:be:44:5c:65:8f:83:d9:e5: ce:29:44:52:d0:97:f5:cf:ab:69:0e:16:a4:52:88: 1d:ae:eb:c1:de:b9:20:5a:59:8e:c9:65:ef:12:a3: 75:11:70:b1:7c:24:3a:af:56:7d:e6:23:f4:f0:d9: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:62:E5:D0:D1:96:57:3B:7F:E5:F7:3E:FE:DD:E0:93:D1:31:B9:81 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:50:32:55:3a:2d:f6:f3:de:31:18:7d:14:33:75:c9:92:9b: eb:08:54:36:55:c9:66:71:f3:c8:64:fa:86:3e:b7:e8:f7:54: a3:a3:5b:0f:d8:35:55:92:5f:21:6d:1f:da:55:e1:72:0b:27: fa:99:bc:91:70:bc:31:d3:aa:15:52:fe:32:53:00:47:e9:72: 8a:69:58:5b:50:5a:a0:88:3d:d1:37:ce:d3:07:fa:2f:89:2f: 08:d4:d7:75:33:c5:00:89:65:8d:30:4d:3f:d0:e4:53:a8:5c: 4c:72:2b:b5:0f:c4:9d:46:56:07:8f:f7:04:82:8c:48:65:61: 9c:d9:9d:6c:a9:05:24:30:fd:01:b3:0f:17:7f:c0:65:16:cc: e9:73:07:32:2d:af:8b:8d:1a:53:8f:28:12:f8:f3:cd:5e:45: 1f:2b:c7:20:4f:d3:2a:1e:ad:cd:60:e0:0a:ec:50:af:4a:c9: 87:84:d8:4e:49:33:fe:ca:ea:44:d1:54:43:08:16:f7:16:b3: 00:a1:f8:77:dc:fc:9c:b2:e6:98:41:2c:c9:0f:cb:67:78:e7: 27:6d:55:bc:c4:88:81:ed:e5:02:8f:5a:e6:34:98:a8:f9:34: 6e:c2:a0:c3:56:30:82:1c:cf:6f:e0:4f:7f:60:af:53:a0:7c: a4:e6:9d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUxMDE5MDkxMDM3WhcNMjUxMDI2MDkxMDM3WjAYMRYwFAYD VQQDEw02OGY0YWIwZS1iMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6d1yau9YiMj5oXxetQMxFTkSDvWJDkPZQwMzNqQEattcf6j4oxOymlN/ukwh vjbQdnhPT68bRFr5nON0qLS5afVw4YENbXLrRsHDN4EW62Gx9Piimta5K803rRgE H+A2AW/DmUbVPbuKga3MjWwFfA0WZm5g73jbrV+sbQIZ8IYtv2AUCzDAHfEY98ng NCs5yZoR+hcPvnp2TdhzBxZAhyiA4yFYMwzfgD40sFiVEPHfCxWv274KHgyhBXDJ YJdytHxG2a0lwCSevkRcZY+D2eXOKURS0Jf1z6tpDhakUogdruvB3rkgWlmOyWXv EqN1EXCxfCQ6r1Z95iP08NkPUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9i5dDR llc7f+X3Pv7d4JPRMbmBMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtUDJVOi32894xGH0UM3XJkpvrCFQ2VclmcfPIZPqGPrfo91Sjo1sP 2DVVkl8hbR/aVeFyCyf6mbyRcLwx06oVUv4yUwBH6XKKaVhbUFqgiD3RN87TB/ov iS8I1Nd1M8UAiWWNME0/0ORTqFxMciu1D8SdRlYHj/cEgoxIZWGc2Z1sqQUkMP0B sw8Xf8BlFszpcwcyLa+LjRpTjygS+PPNXkUfK8cgT9MqHq3NYOAK7FCvSsmHhNhO STP+yupE0VRDCBb3FrMAofh33PycsuaYQSzJD8tneOcnbVW8xIiB7eUCj1rmNJio +TRuwqDDVjCCHM9v4E9/YK9ToHyk5p2O -----END CERTIFICATE-----Generated at Mon Oct 20 05:49:22 2025 by rpki-client