$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: tWYCbgX8UsYyH/71876cK6tTnQmwXUn60Yzg8Cf1jaQ= Subject key identifier: 95:CA:AD:EE:22:83:2B:E5:72:7A:A3:F0:9D:42:4C:19:67:15:19:02 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 085B Signing time: Sat 18 Oct 2025 21:51:08 +0000 Manifest this update: Sat 18 Oct 2025 21:51:07 +0000 Manifest next update: Sat 25 Oct 2025 21:51:07 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: Zu9y+hXHoDUPMGV+7P2O0jMLKh0mpc7BhGqLgLIX9pI=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Oct 18 21:51:07 2025 GMT Not After : Oct 25 21:51:07 2025 GMT Subject: CN=68f40bcc-538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:3c:c4:52:d6:74:88:25:0a:90:f3:12:4c: 0d:4e:ff:da:4e:cc:d8:a9:70:c2:be:56:d1:65:c4: f5:30:64:9e:8d:cd:3e:fc:e5:94:ec:65:d0:44:8f: 7e:04:9f:b2:23:a4:45:8d:f7:54:6e:f4:d5:19:e5: 36:51:ea:f4:a8:b4:38:2e:3e:ad:b4:e0:29:a0:a6: 94:eb:9b:42:70:83:f4:1a:11:14:fa:02:a0:47:ce: b5:db:c5:d0:ce:b8:26:23:6a:89:c4:c1:73:66:9a: 10:86:52:47:c5:64:ac:14:ae:fc:f1:41:ed:6c:6a: 6f:9b:43:7f:80:e0:d6:f1:b8:82:2b:f1:16:14:80: fe:c8:75:33:3b:40:5e:85:78:df:cc:82:dd:84:40: 63:1e:b2:ee:a5:8d:b2:90:8c:40:b4:af:9c:ed:34: d5:2f:e4:ce:ff:87:23:2a:b9:e6:c4:75:df:dd:33: fe:7d:9a:83:5f:9e:45:e6:08:61:37:00:13:e9:65: ff:4a:0e:4c:31:7f:88:ef:d2:f2:2c:75:6f:18:e1: 48:93:aa:75:76:ed:40:df:f9:3b:93:f9:01:b5:26: 66:42:0d:93:97:99:dd:e0:ec:77:7c:c2:16:1d:aa: 1d:32:be:c6:bc:7b:fa:76:27:c9:a1:03:0c:60:ef: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:AD:EE:22:83:2B:E5:72:7A:A3:F0:9D:42:4C:19:67:15:19:02 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c0:b6:30:f2:3b:f9:2d:43:1c:7a:43:d0:d0:4a:05:be:4d: 23:45:4c:58:3e:97:2d:8c:81:04:03:e1:7c:62:1c:b0:11:fa: dc:0d:91:67:b1:ec:eb:69:a8:49:17:8b:fa:f2:92:6f:04:2d: b8:53:c2:bd:cc:35:3f:b7:c5:64:45:f3:0b:2e:eb:9b:40:c6: 98:cc:06:d1:5a:4b:c2:f6:ea:a2:66:df:dc:73:3d:80:4c:d3: 60:08:5e:61:2e:18:91:76:bd:e3:6c:ed:a0:f4:db:e9:e8:e1: 29:6d:af:76:9d:ff:ad:c7:04:cb:27:c0:27:49:ba:e8:1f:c1: 6d:8c:3a:cc:5a:d5:a4:59:2a:43:a5:ce:2a:f8:8d:35:ed:c7: 8f:4c:21:e3:af:42:75:2e:fd:1a:99:95:f7:9e:26:f1:e4:1b: 5d:a0:d6:1a:5a:ae:e6:e6:8d:24:f9:5c:e8:c5:e5:22:48:27: ac:76:77:19:83:27:f0:36:55:d2:6e:62:be:58:9c:76:d4:29: fd:0d:79:6c:a0:c1:b1:b8:0a:10:4f:30:81:cb:29:bb:32:ee: d0:89:9b:9b:03:0b:c8:d3:48:8e:59:33:71:0a:49:a5:7a:fd: 52:6f:ac:31:02:4f:6c:13:f1:45:79:cd:8d:fe:54:1b:1d:73: 1f:9c:4b:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUxMDE4MjE1MTA3WhcNMjUxMDI1MjE1MTA3WjAYMRYwFAYD VQQDEw02OGY0MGJjYy01MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/g8xFLWdIglCpDzEkwNTv/aTszYqXDCvlbRZcT1MGSejc0+/OWU7GXQRI9+ BJ+yI6RFjfdUbvTVGeU2Uer0qLQ4Lj6ttOApoKaU65tCcIP0GhEU+gKgR86128XQ zrgmI2qJxMFzZpoQhlJHxWSsFK788UHtbGpvm0N/gODW8biCK/EWFID+yHUzO0Be hXjfzILdhEBjHrLupY2ykIxAtK+c7TTVL+TO/4cjKrnmxHXf3TP+fZqDX55F5ghh NwAT6WX/Sg5MMX+I79LyLHVvGOFIk6p1du1A3/k7k/kBtSZmQg2Tl5nd4Ox3fMIW HaodMr7GvHv6difJoQMMYO/+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXKre4i gyvlcnqj8J1CTBlnFRkCMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/wLYw8jv5LUMcekPQ0EoFvk0jRUxYPpctjIEEA+F8YhywEfrcDZFn sezraahJF4v68pJvBC24U8K9zDU/t8VkRfMLLuubQMaYzAbRWkvC9uqiZt/ccz2A TNNgCF5hLhiRdr3jbO2g9Nvp6OEpba92nf+txwTLJ8AnSbroH8FtjDrMWtWkWSpD pc4q+I017cePTCHjr0J1Lv0amZX3nibx5BtdoNYaWq7m5o0k+VzoxeUiSCesdncZ gyfwNlXSbmK+WJx21Cn9DXlsoMGxuAoQTzCByym7Mu7QiZubAwvI00iOWTNxCkml ev1Sb6wxAk9sE/FFec2N/lQbHXMfnEvt -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:00 2025 by rpki-client