$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft File: atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json) Hash identifier: sutxL48LMdqhGQWVglbrL7CqIObyJRDNHDMCTquv/X0= Subject key identifier: EB:73:FD:8C:0A:25:53:19:B3:37:F1:7F:5B:2A:00:6D:9C:D7:48:6B Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D Certificate issuer: /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft Manifest number: 014C Signing time: Sun 19 Oct 2025 07:06:57 +0000 Manifest this update: Sun 19 Oct 2025 07:06:57 +0000 Manifest next update: Sun 26 Oct 2025 07:06:57 +0000 Files and hashes: 1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: 3iyoRDzkxBP12e057qByUFNm+9KXVkH2V6gx5ySkLlY=) 2: 0A3010E62EFE11F0B225630AC4F9AE02.roa (hash: SL+u5xNb94LlIO3MGszlS8G25kmb10774LbEot0uqXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Validity Not Before: Oct 19 07:06:57 2025 GMT Not After : Oct 26 07:06:57 2025 GMT Subject: CN=68f48e11-b348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:42:47:42:c1:81:fc:3f:cb:a6:92:6a:9b: 6e:47:2e:17:a8:0a:d6:82:95:65:e6:b5:ff:63:80: 0c:c6:01:86:44:74:70:f4:f9:c2:3d:7d:1d:86:23: f3:d8:a9:df:80:f9:bc:a1:2b:2b:4b:22:14:64:08: 30:8e:a3:96:c8:59:cb:12:c9:d1:c6:04:bb:8f:86: 42:24:34:4b:81:c7:5c:9b:b6:f3:56:f2:96:2a:ef: d8:5f:24:ab:03:3c:8c:de:19:5e:ac:4e:aa:37:4a: 28:a5:71:63:f8:e6:c4:33:5f:61:24:ce:82:cb:f0: 8a:42:1b:64:d6:05:79:e2:a1:7d:7f:68:0e:0f:88: c3:65:55:b7:4f:cc:cb:3e:a9:18:86:a8:fd:aa:79: 3b:fa:b4:94:5f:9e:fb:09:1c:e8:e7:7a:3a:b4:8d: 2b:0e:e6:b5:c1:27:07:d8:d4:f0:6a:62:dd:63:fb: 0e:ab:f7:3f:96:60:f4:50:62:79:d4:bf:1b:fb:a7: 48:05:28:b0:fd:9e:94:5a:fd:e1:22:f7:a5:35:b4: 87:a1:e1:7b:79:b8:52:32:94:f5:ec:1e:59:e3:78: ec:41:ad:b2:67:07:12:c4:27:67:64:40:be:0a:84: 3c:ff:01:88:99:49:18:67:7f:81:5e:0e:8d:71:f5: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:73:FD:8C:0A:25:53:19:B3:37:F1:7F:5B:2A:00:6D:9C:D7:48:6B X509v3 Authority Key Identifier: keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cf:bf:a4:b8:fa:f2:a1:bc:a3:c8:7b:31:67:5e:9f:01:48: 80:a5:d5:81:57:2a:c5:3d:09:0e:c0:e7:06:72:70:78:f7:45: 77:21:1a:c5:00:dd:27:c4:99:cd:94:9c:76:60:37:ec:80:ab: f9:3c:64:e8:56:7a:48:b3:f4:a2:23:f7:5a:47:48:a4:69:a9: 72:ec:81:56:58:20:f8:52:24:6f:92:f6:53:3d:36:8f:10:49: 57:8d:4a:2d:92:bf:c6:62:f7:0d:a9:94:25:4f:9f:ca:60:3f: cd:99:aa:c7:da:cd:f9:fe:8d:89:0a:f6:e6:cc:6d:91:9d:43: 71:9c:3e:ee:34:bf:94:e6:ea:dc:98:05:3a:b6:09:55:6d:30: 67:d3:28:d6:9e:10:4a:63:c6:09:b3:31:34:a0:0f:54:72:e7: f4:8a:8f:1d:31:78:6b:9d:a7:9d:2f:32:fd:91:36:4f:e4:e4: aa:b1:bb:0c:79:81:87:5a:8e:0d:28:2c:af:cb:36:bf:73:f5: 11:af:40:36:7a:65:6c:e6:cd:b4:35:0f:88:4d:a2:70:6f:83: 60:e5:c1:b3:db:a2:5f:de:bd:0c:50:ff:5c:24:20:19:8f:47: 69:9e:eb:76:ce:2b:b1:87:c7:a1:a9:03:59:cb:a5:36:89:46: df:e3:c0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4RkMxMTAvBgNVBAUTKDZBREFGQkEyOTk2ODMwQzUxRDY4MUMzMjEyRDA0QjVD NzI0QzEzMUQwHhcNMjUxMDE5MDcwNjU3WhcNMjUxMDI2MDcwNjU3WjAYMRYwFAYD VQQDEw02OGY0OGUxMS1iMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfBCR0LBgfw/y6aSaptuRy4XqArWgpVl5rX/Y4AMxgGGRHRw9PnCPX0dhiPz 2KnfgPm8oSsrSyIUZAgwjqOWyFnLEsnRxgS7j4ZCJDRLgcdcm7bzVvKWKu/YXySr AzyM3hlerE6qN0oopXFj+ObEM19hJM6Cy/CKQhtk1gV54qF9f2gOD4jDZVW3T8zL PqkYhqj9qnk7+rSUX577CRzo53o6tI0rDua1wScH2NTwamLdY/sOq/c/lmD0UGJ5 1L8b+6dIBSiw/Z6UWv3hIvelNbSHoeF7ebhSMpT17B5Z43jsQa2yZwcSxCdnZEC+ CoQ8/wGImUkYZ3+BXg6NcfX+3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtz/YwK JVMZszfxf1sqAG2c10hrMB8GA1UdIwQYMBaAFGra+6KZaDDFHWgcMhLQS1xyTBMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhGQy9GNzM5QTRGOEJE MTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01NVWRhQnd5RXRCTFhISk1F eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0cjdvcGxvTU1VZGFCd3lFdEJMWEhKTUV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhGQy9GNzM5QTRGOEJEMTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01N VWRhQnd5RXRCTFhISk1FeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlz7+kuPryobyjyHsxZ16fAUiApdWBVyrFPQkOwOcGcnB490V3IRrF AN0nxJnNlJx2YDfsgKv5PGToVnpIs/SiI/daR0ikaaly7IFWWCD4UiRvkvZTPTaP EElXjUotkr/GYvcNqZQlT5/KYD/NmarH2s35/o2JCvbmzG2RnUNxnD7uNL+U5urc mAU6tglVbTBn0yjWnhBKY8YJszE0oA9Ucuf0io8dMXhrnaedLzL9kTZP5OSqsbsM eYGHWo4NKCyvyza/c/URr0A2emVs5s20NQ+ITaJwb4Ng5cGz26Jf3r0MUP9cJCAZ j0dpnut2ziuxh8ehqQNZy6U2iUbf48BL -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:47 2025 by rpki-client