$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: a5YnOBWtcdWSlNh3kkIqQXMCQ3q75j0xS384Y1W5DzI= Subject key identifier: 82:18:12:B8:63:8C:1A:49:67:65:67:17:22:B4:F8:1C:91:18:E3:74 Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: 8E Signing time: Sun 19 Oct 2025 09:48:22 +0000 Manifest this update: Sun 19 Oct 2025 09:48:21 +0000 Manifest next update: Sun 26 Oct 2025 09:48:21 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: K4tgz5WEuuvyej8xsCAFoHeQJb3lP/iVxV9U6kpCNyI=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: Oct 19 09:48:21 2025 GMT Not After : Oct 26 09:48:21 2025 GMT Subject: CN=68f4b3e6-7a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:dc:14:2a:cd:d6:7e:a6:f5:c5:23:f7:0a: 9e:d3:8f:58:01:cf:10:09:4c:57:68:d5:90:15:0f: e1:d7:13:a4:c9:1c:da:07:03:e9:b4:b5:eb:d6:42: 94:4b:4b:eb:ef:49:22:75:69:22:37:b4:95:af:da: bd:4e:83:7d:2d:59:c0:a5:e7:e3:6b:b4:5e:6f:3c: 27:d6:cb:fe:be:dc:f6:8c:64:8d:c7:83:f8:b8:76: 9b:86:7d:0f:66:ea:72:bd:9c:4d:c7:2d:55:eb:40: 8b:9d:e3:4e:e4:bb:3c:e4:8f:66:93:7e:13:82:2a: 2d:3d:42:a2:72:f9:4d:97:b6:c6:7d:82:71:be:53: 8e:e6:83:34:a3:d2:7b:4a:27:c5:5f:db:72:d6:b1: 22:f7:b4:f8:7d:cd:68:fa:27:02:75:1d:ce:4d:e4: ae:88:0c:9c:2c:78:b8:1b:db:c4:fb:9a:6e:6d:64: 91:a3:37:48:80:af:33:c3:82:e5:a9:d7:e4:6e:60: d9:47:6c:33:ca:14:f6:ad:5f:0b:17:53:b4:10:98: 59:37:95:8c:37:de:95:1c:df:39:c2:9a:1d:c8:e5: e9:94:fc:e5:14:53:d2:d8:66:ad:dd:d9:89:e3:02: 17:97:17:35:41:b7:84:a0:bc:19:7f:a2:63:12:41: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:18:12:B8:63:8C:1A:49:67:65:67:17:22:B4:F8:1C:91:18:E3:74 X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:15:63:4a:f0:3b:48:2f:aa:25:39:1b:9e:fc:65:3e:4a: 97:cb:de:22:29:ff:7d:67:a1:bf:ee:8b:6c:96:fa:6c:e1:73: 3f:dc:b8:df:c4:8d:85:03:6b:47:d9:40:69:93:df:cd:0b:66: 28:8e:e1:28:80:8a:87:39:fb:9f:7a:94:00:9a:6a:6f:fa:23: f6:af:4f:d4:c8:49:99:51:fd:b6:37:ac:46:85:36:f0:2b:31: 08:ef:57:fa:76:93:dd:87:75:5a:84:ed:1c:25:a3:b6:7d:ba: f5:51:77:8c:cb:2f:a0:09:04:29:29:1d:e3:19:bc:ad:70:0a: 1d:e3:15:65:f7:ae:a0:04:91:4f:49:bc:bc:17:f3:46:ab:4c: 4a:87:14:35:c4:09:ab:83:fb:b2:aa:82:54:1c:14:44:cd:99: 5b:44:73:e0:6b:73:ac:77:1c:c3:f6:43:7d:52:4f:d4:66:1a: b1:1d:d3:b6:0f:73:82:cd:44:18:ed:bd:6e:75:e2:96:c9:69: 68:73:a3:55:61:16:ba:f4:55:e8:ed:03:73:64:56:6e:e6:b3: cc:73:69:b8:71:d3:0c:c1:4a:2a:7e:05:5a:4c:2c:46:84:f1: 0c:b2:4b:de:a9:9a:b4:a0:35:11:5e:b6:89:9a:47:cc:02:f9: 3a:df:49:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1OUQxMTAvBgNVBAUTKEZCNDg4NTY4RTc1MjBCQzc4MkExMTk4OTc2MjkwMzBF RDA2OTVDREIwHhcNMjUxMDE5MDk0ODIxWhcNMjUxMDI2MDk0ODIxWjAYMRYwFAYD VQQDEw02OGY0YjNlNi03YTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzDcFCrN1n6m9cUj9wqe049YAc8QCUxXaNWQFQ/h1xOkyRzaBwPptLXr1kKU S0vr70kidWkiN7SVr9q9ToN9LVnApefja7Rebzwn1sv+vtz2jGSNx4P4uHabhn0P ZupyvZxNxy1V60CLneNO5Ls85I9mk34TgiotPUKicvlNl7bGfYJxvlOO5oM0o9J7 SifFX9ty1rEi97T4fc1o+icCdR3OTeSuiAycLHi4G9vE+5pubWSRozdIgK8zw4Ll qdfkbmDZR2wzyhT2rV8LF1O0EJhZN5WMN96VHN85wpodyOXplPzlFFPS2Gat3dmJ 4wIXlxc1QbeEoLwZf6JjEkFMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIYErhj jBpJZ2VnFyK0+ByRGON0MB8GA1UdIwQYMBaAFPtIhWjnUgvHgqEZiXYpAw7QaVzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU5RC8wQjNGNjY1QUQ2 MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4ZUNvUm1KZGlrRER0QnBY TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU5RC8wQjNGNjY1QUQ2MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4 ZUNvUm1KZGlrRER0QnBYTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNrRVjSvA7SC+qJTkbnvxlPkqXy94iKf99Z6G/7otslvps4XM/3Ljf xI2FA2tH2UBpk9/NC2YojuEogIqHOfufepQAmmpv+iP2r0/UyEmZUf22N6xGhTbw KzEI71f6dpPdh3VahO0cJaO2fbr1UXeMyy+gCQQpKR3jGbytcAod4xVl966gBJFP Sby8F/NGq0xKhxQ1xAmrg/uyqoJUHBREzZlbRHPga3OsdxzD9kN9Uk/UZhqxHdO2 D3OCzUQY7b1udeKWyWloc6NVYRa69FXo7QNzZFZu5rPMc2m4cdMMwUoqfgVaTCxG hPEMskveqZq0oDURXraJmkfMAvk630k3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:15 2025 by rpki-client