$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: 4sedqMHKVVH0shgkMzs/mLf/ARTYx7mVW70hAxgvgoE= Subject key identifier: 3A:96:43:4A:CF:E7:7D:52:2E:6C:AA:6E:C0:97:26:17:03:35:8F:C3 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0ABE Signing time: Mon 20 Oct 2025 20:12:52 +0000 Manifest this update: Mon 20 Oct 2025 20:12:51 +0000 Manifest next update: Mon 27 Oct 2025 20:12:51 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: tVL6nOcD/56UXyqB/mq4F4tOIUEQSXgXRzIoCYRB/Ho=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 0MEjUCGRzvjz5epLH1Yc0e31fL5fFdQ31GIxJUqAOEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Oct 20 20:12:51 2025 GMT Not After : Oct 27 20:12:51 2025 GMT Subject: CN=68f697c4-db92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b8:f3:82:d1:1e:c6:d2:3d:f6:64:b3:3c:7d: 4a:b2:91:4a:61:08:ee:8f:23:ca:3f:6f:08:bb:02: 99:cd:b9:6b:9d:c8:07:08:46:b6:89:24:ed:23:29: 8c:a9:78:45:9c:25:d5:39:76:08:e6:90:eb:95:64: f8:22:63:63:d6:a1:96:62:6e:b1:9e:24:f3:74:d3: 47:01:86:4c:a8:c8:9e:82:51:02:24:17:2c:1b:5f: ed:c5:ad:99:5a:8b:65:5a:5e:4f:38:70:6f:6b:73: c8:e4:32:a1:6f:f2:5e:2a:cb:61:7a:c5:f4:e1:1b: 97:14:fd:c4:28:26:b8:43:9e:e4:8e:88:ad:b9:88: 5c:ee:ca:74:0a:f9:46:b4:fa:6f:02:35:7a:0e:f1: dc:bb:5e:bc:19:8e:be:68:a7:b3:78:22:b7:5b:df: c8:1d:5b:13:2a:ff:68:5f:d0:a2:57:d1:d5:f0:2d: d3:34:4f:13:c3:04:d8:ab:0a:78:62:96:d7:83:eb: 8b:79:10:c4:47:2f:14:de:5e:5d:b2:8e:e2:d6:91: 26:15:35:1d:12:5a:21:be:b4:83:f7:e8:89:93:f7: c3:c8:73:ae:32:4b:96:b9:c2:bd:f2:3a:97:3b:c6: ad:84:27:63:f2:9f:b0:55:d6:33:02:b8:ac:34:58: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:43:4A:CF:E7:7D:52:2E:6C:AA:6E:C0:97:26:17:03:35:8F:C3 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:83:e5:65:5e:e5:9a:16:78:d7:20:19:79:f3:0a:02:b0:61: ee:35:3c:26:bb:a3:85:32:22:87:fa:9a:f5:bb:9e:56:6e:71: 8d:00:c0:80:fb:52:5f:5f:98:86:f3:4b:52:24:56:92:36:08: af:d4:2c:28:3c:73:37:44:17:c5:cc:6d:38:39:e4:db:70:c0: 6d:dd:dd:e8:ba:8b:c9:92:82:13:d4:68:54:93:0d:15:ae:91: 19:ea:53:5e:96:3f:6e:96:a8:62:ca:c7:9d:fb:55:f2:69:43: 08:6a:75:7b:76:fa:0a:8b:b2:5d:5d:58:3d:b3:51:25:22:fa: 6f:4f:c4:12:bd:ae:44:e8:49:c3:fb:96:ec:7b:36:b0:af:c1: ce:a7:e5:68:dd:c7:a5:38:38:cf:d9:dd:0d:cc:55:61:9c:ec: 46:5c:31:3c:57:6a:9e:07:47:d1:0b:67:de:2e:6f:87:cb:b2: 97:26:75:52:f0:1a:51:2e:6c:ea:39:fb:76:4f:e9:c6:4a:9d: 87:e2:88:d4:1d:fa:d1:4e:af:a9:0a:3c:b5:eb:f5:2f:33:20: 87:29:d0:b0:1d:98:a4:7a:40:de:b7:db:7c:03:c6:3c:e2:5b: 40:5d:49:ed:17:32:7e:34:6f:3d:5d:14:34:48:8d:b9:c2:3a: cd:0f:6b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjUxMDIwMjAxMjUxWhcNMjUxMDI3MjAxMjUxWjAYMRYwFAYD VQQDEw02OGY2OTdjNC1kYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLjzgtEextI99mSzPH1KspFKYQjujyPKP28IuwKZzblrncgHCEa2iSTtIymM qXhFnCXVOXYI5pDrlWT4ImNj1qGWYm6xniTzdNNHAYZMqMieglECJBcsG1/txa2Z WotlWl5POHBva3PI5DKhb/JeKsthesX04RuXFP3EKCa4Q57kjoituYhc7sp0CvlG tPpvAjV6DvHcu168GY6+aKezeCK3W9/IHVsTKv9oX9CiV9HV8C3TNE8TwwTYqwp4 YpbXg+uLeRDERy8U3l5dso7i1pEmFTUdElohvrSD9+iJk/fDyHOuMkuWucK98jqX O8athCdj8p+wVdYzArisNFh66wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqWQ0rP 531SLmyqbsCXJhcDNY/DMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeg+VlXuWaFnjXIBl58woCsGHuNTwmu6OFMiKH+pr1u55WbnGNAMCA +1JfX5iG80tSJFaSNgiv1CwoPHM3RBfFzG04OeTbcMBt3d3ouovJkoIT1GhUkw0V rpEZ6lNelj9ulqhiysed+1XyaUMIanV7dvoKi7JdXVg9s1ElIvpvT8QSva5E6EnD +5bsezawr8HOp+Vo3celODjP2d0NzFVhnOxGXDE8V2qeB0fRC2feLm+Hy7KXJnVS 8BpRLmzqOft2T+nGSp2H4ojUHfrRTq+pCjy16/UvMyCHKdCwHZikekDet9t8A8Y8 4ltAXUntFzJ+NG89XRQ0SI25wjrND2t1 -----END CERTIFICATE-----Generated at Tue Oct 21 03:12:58 2025 by rpki-client