$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: HkD+MYeCXclO+CIrFmOR1bRU7BwzfwMtoDZ++kjMobc= Subject key identifier: B4:90:C7:79:B3:EC:E8:20:98:22:94:ED:EE:F3:60:B0:55:BE:C0:F5 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: 011B Signing time: Sun 19 Oct 2025 07:39:49 +0000 Manifest this update: Sun 19 Oct 2025 07:39:48 +0000 Manifest next update: Sun 26 Oct 2025 07:39:48 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: 4hLkkW8o6qJTvghwESPg8zuxOkbT/O1lHpozcG46jY8=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987, serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Validity Not Before: Oct 19 07:39:48 2025 GMT Not After : Oct 26 07:39:48 2025 GMT Subject: CN=68f495c4-bd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5a:77:99:12:1e:03:16:a4:02:77:e7:88:70: d1:c3:06:97:89:d5:19:1f:79:ac:cd:52:7c:7d:a7: 04:07:da:b8:81:3d:2b:88:e7:06:df:ba:07:34:9a: a0:48:f1:ae:c3:fe:2a:68:ae:76:ce:d9:a3:22:33: 45:18:9c:06:45:bf:48:53:97:1d:6c:72:33:f9:e7: 96:a2:9f:06:03:d7:49:22:f5:5f:20:5c:ba:65:33: 74:6b:44:31:bd:a2:b6:45:36:37:1d:73:02:53:b2: 8c:85:ab:7e:f7:7e:b2:f5:cc:23:4c:54:9a:bc:ef: 2f:97:73:ec:d9:e7:3f:52:b1:ab:ca:d5:79:93:29: eb:49:c0:aa:c2:b3:07:6f:df:02:40:c1:6e:3b:fc: 80:71:8a:27:e1:61:54:66:6e:9a:08:09:f2:cc:a7: ea:76:7d:68:67:28:55:05:a7:59:7a:82:bc:39:ab: 6f:fb:bc:3f:4d:89:c2:e9:51:68:e8:ae:c8:63:5f: a8:ab:42:7a:bd:b3:80:ef:6d:77:54:d8:39:35:59: a5:26:64:2f:d7:0c:2d:bc:b3:fd:e5:74:54:bc:3b: 6c:cf:93:fe:c2:26:9c:66:b6:4f:af:14:88:1e:bb: 8b:3d:07:b4:10:25:92:57:4e:bd:bd:57:7b:71:a7: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:C7:79:B3:EC:E8:20:98:22:94:ED:EE:F3:60:B0:55:BE:C0:F5 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:77:66:72:92:92:b5:df:85:5a:3f:a0:3b:b5:85:0b:f5:69: 46:97:8a:5f:8b:17:8b:3a:5b:04:a1:64:1a:72:0b:25:cd:1a: 43:a4:71:06:f8:a0:59:9d:7b:49:d4:5e:94:34:06:8a:5a:7b: ba:eb:f7:5a:32:6f:c9:95:65:f9:37:52:79:c5:5b:cb:b8:a2: ed:bb:9c:78:af:8b:95:cc:3e:97:34:26:aa:2d:72:a0:3c:6e: 17:dd:cb:bc:2f:ce:ef:2e:7e:dc:c5:45:d2:d7:e2:3e:48:62: 5d:77:5c:e4:5f:8d:23:70:6d:a6:04:3a:61:8c:34:84:51:5f: aa:42:e5:29:50:49:74:6a:e7:c7:7b:ad:e7:fe:93:2c:cd:dd: 82:7b:7a:bc:58:f5:42:12:ff:d2:1b:f2:db:1a:66:85:38:50: 86:a7:61:82:3f:d8:33:0d:b0:45:d1:24:c6:92:30:b7:97:b0: fc:95:3b:f5:90:c1:22:57:03:4e:04:59:fc:a7:33:7d:23:12: 89:1c:7e:04:d1:b8:65:d7:00:6c:79:3f:2c:11:99:96:48:a0: 49:88:ac:45:27:9d:5a:4f:a6:a4:f0:fa:d2:a4:70:f4:03:2c: d9:7f:b1:75:31:a4:5f:8d:7a:ed:df:a1:b1:5c:36:0a:50:ef: 7e:16:1f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5ODcxMTAvBgNVBAUTKEIwNjFCQzQ4QTE0NDEwMDBBQkVCOEM0NDhBMDlGMTk1 RjkxMzlFMUEwHhcNMjUxMDE5MDczOTQ4WhcNMjUxMDI2MDczOTQ4WjAYMRYwFAYD VQQDEw02OGY0OTVjNC1iZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41p3mRIeAxakAnfniHDRwwaXidUZH3mszVJ8facEB9q4gT0riOcG37oHNJqg SPGuw/4qaK52ztmjIjNFGJwGRb9IU5cdbHIz+eeWop8GA9dJIvVfIFy6ZTN0a0Qx vaK2RTY3HXMCU7KMhat+936y9cwjTFSavO8vl3Ps2ec/UrGrytV5kynrScCqwrMH b98CQMFuO/yAcYon4WFUZm6aCAnyzKfqdn1oZyhVBadZeoK8Oatv+7w/TYnC6VFo 6K7IY1+oq0J6vbOA7213VNg5NVmlJmQv1wwtvLP95XRUvDtsz5P+wiacZrZPrxSI HruLPQe0ECWSV069vVd7cafHKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSQx3mz 7OggmCKU7e7zYLBVvsD1MB8GA1UdIwQYMBaAFLBhvEihRBAAq+uMRIoJ8ZX5E54a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTk4Ny9GMEZBNEZBNkZD MjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVBQ3I2NHhFaWdueGxma1Ru aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTk4Ny9GMEZBNEZBNkZDMjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVB Q3I2NHhFaWdueGxma1RuaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEd2ZykpK134VaP6A7tYUL9WlGl4pfixeLOlsEoWQacgslzRpDpHEG +KBZnXtJ1F6UNAaKWnu66/daMm/JlWX5N1J5xVvLuKLtu5x4r4uVzD6XNCaqLXKg PG4X3cu8L87vLn7cxUXS1+I+SGJdd1zkX40jcG2mBDphjDSEUV+qQuUpUEl0aufH e63n/pMszd2Ce3q8WPVCEv/SG/LbGmaFOFCGp2GCP9gzDbBF0STGkjC3l7D8lTv1 kMEiVwNOBFn8pzN9IxKJHH4E0bhl1wBseT8sEZmWSKBJiKxFJ51aT6ak8PrSpHD0 AyzZf7F1MaRfjXrt36GxXDYKUO9+Fh+I -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:40 2025 by rpki-client