$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft File: f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json) Hash identifier: s8Yv770t4gtcpWGqDSWvx4UoZYSJFCwKdQbNnTjquCE= Subject key identifier: F5:66:AB:43:D5:92:B9:EE:ED:91:37:96:57:07:22:E4:A6:7A:79:A8 Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Certificate serial: 0C1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft Manifest number: 0C13 Signing time: Sat 18 Oct 2025 19:32:27 +0000 Manifest this update: Sat 18 Oct 2025 19:32:26 +0000 Manifest next update: Sat 25 Oct 2025 19:32:26 +0000 Files and hashes: 1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: V5eAgERCHxvLoP44yRWOav6a9/3Cg7fzAET/npM7+T4=) 2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: RHZCYYPvQQbME4QEcXK5NVornLFSgAMnD5MRoiwlBuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9 Validity Not Before: Oct 18 19:32:26 2025 GMT Not After : Oct 25 19:32:26 2025 GMT Subject: CN=68f3eb4a-2c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:09:94:37:46:1a:35:05:1f:bd:3e:c8:4c: 69:92:93:cb:3e:11:b6:47:5b:44:96:f9:39:01:10: 5f:06:76:d0:78:da:42:66:ee:c5:a8:87:0c:91:e3: 79:87:71:98:6e:5f:f9:45:60:43:51:b3:ee:75:24: 92:2c:fb:0d:86:8e:38:8d:7b:68:f3:ab:04:e7:91: 3b:41:35:2d:c6:e3:8e:75:4c:6c:5c:55:cd:e0:6f: ad:67:7c:73:60:df:3d:14:84:07:1b:70:41:f9:5b: d8:c8:bb:80:6f:fd:ed:00:90:5f:f8:47:fa:f8:2f: 7c:14:9b:7a:c1:22:dc:60:86:72:58:d7:6e:bd:e8: ae:6e:15:ff:52:cc:71:62:33:4e:08:af:14:a2:c5: 94:9f:13:e8:58:7c:fd:2b:70:a7:66:82:98:3d:82: 49:ed:4f:a2:26:bc:d7:e7:5d:3a:de:9b:3d:1e:eb: e4:73:9b:25:1f:fe:5b:18:a6:87:42:64:ac:cb:21: a7:77:ad:db:7d:65:3a:48:d8:6a:1d:38:ae:53:59: 15:10:92:70:ed:8b:61:51:c1:fb:85:fe:e5:9b:51: fb:43:a6:97:1f:65:52:73:e0:32:fb:f2:8a:e5:f3: 4e:05:8f:17:4c:3d:58:60:d9:83:f6:c2:ad:c8:f2: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:66:AB:43:D5:92:B9:EE:ED:91:37:96:57:07:22:E4:A6:7A:79:A8 X509v3 Authority Key Identifier: keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c9:cc:39:ed:53:65:ac:67:68:0b:75:c0:25:78:fd:fd:22: f4:85:2e:68:6b:0d:d7:9c:ef:ab:63:ce:4b:35:89:42:80:73: 87:09:23:c4:5b:ce:59:19:1a:6e:50:4e:3a:67:a1:5d:62:bb: b2:8d:9e:9d:bd:f9:6d:42:48:22:05:c7:fa:3a:d5:6c:d6:b6: 06:b2:87:05:ad:86:c9:28:b6:e9:4e:36:e4:d1:a9:58:0c:eb: cf:87:69:c0:24:a8:ee:d4:4d:77:b5:f5:ab:bb:76:5e:c6:a5: a1:2b:5c:81:93:ad:9f:70:1f:d0:6b:2b:58:d6:db:dc:f4:11: f2:65:31:9e:43:1f:7e:8b:d5:5c:51:51:4c:07:43:82:16:ab: 8e:55:aa:4d:f7:6f:ab:c8:7f:d6:1d:71:46:e5:0d:39:38:36: 5f:91:a9:59:fc:34:2d:b2:b9:9a:00:ef:24:25:b4:65:31:34: 7e:9a:04:8c:f8:66:57:b6:8a:79:08:53:1a:c3:c0:b1:6a:b6: e4:cc:96:1c:64:1a:d1:10:9d:32:91:71:9a:6a:14:d8:42:34: 83:ef:eb:c9:20:be:07:f4:93:35:c7:78:85:86:c0:82:50:97: f5:b8:97:33:b2:02:99:54:2b:8d:af:d4:3d:b8:d7:ed:a6:a5: a1:21:02:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5 MzU0NTE3QjkwHhcNMjUxMDE4MTkzMjI2WhcNMjUxMDI1MTkzMjI2WjAYMRYwFAYD VQQDEw02OGYzZWI0YS0yYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9MJlDdGGjUFH70+yExpkpPLPhG2R1tElvk5ARBfBnbQeNpCZu7FqIcMkeN5 h3GYbl/5RWBDUbPudSSSLPsNho44jXto86sE55E7QTUtxuOOdUxsXFXN4G+tZ3xz YN89FIQHG3BB+VvYyLuAb/3tAJBf+Ef6+C98FJt6wSLcYIZyWNduveiubhX/Usxx YjNOCK8UosWUnxPoWHz9K3CnZoKYPYJJ7U+iJrzX51063ps9Huvkc5slH/5bGKaH QmSsyyGnd63bfWU6SNhqHTiuU1kVEJJw7YthUcH7hf7lm1H7Q6aXH2VSc+Ay+/KK 5fNOBY8XTD1YYNmD9sKtyPLZ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVmq0PV krnu7ZE3llcHIuSmenmoMB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE UGR2ZjRvVl9YVEdUVkZGN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzycw57VNlrGdoC3XAJXj9/SL0hS5oaw3XnO+rY85LNYlCgHOHCSPE W85ZGRpuUE46Z6FdYruyjZ6dvfltQkgiBcf6OtVs1rYGsocFrYbJKLbpTjbk0alY DOvPh2nAJKju1E13tfWru3ZexqWhK1yBk62fcB/QaytY1tvc9BHyZTGeQx9+i9Vc UVFMB0OCFquOVapN92+ryH/WHXFG5Q05ODZfkalZ/DQtsrmaAO8kJbRlMTR+mgSM +GZXtop5CFMaw8CxarbkzJYcZBrREJ0ykXGaahTYQjSD7+vJIL4H9JM1x3iFhsCC UJf1uJczsgKZVCuNr9Q9uNftpqWhIQLF -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:45 2025 by rpki-client