$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: qfniXHuyfPc535vYsXCnfPMa2A24pFkkg35IxPrhIM0= Subject key identifier: 97:09:83:CE:8D:D3:30:9A:C3:3C:2B:5D:12:31:8E:DD:79:41:CD:09 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 05D7 Signing time: Sun 19 Oct 2025 00:50:09 +0000 Manifest this update: Sun 19 Oct 2025 00:50:08 +0000 Manifest next update: Sun 26 Oct 2025 00:50:08 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: QynT4hQ99lQUt1Tdgx+ak04EM+bQLzM09Kg25tcQY6Q=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Oct 19 00:50:08 2025 GMT Not After : Oct 26 00:50:08 2025 GMT Subject: CN=68f435c1-30b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:6b:fb:18:52:e5:4d:cf:53:95:40:20:62: a9:2c:89:f3:f3:68:56:2d:7d:bf:7c:ab:9c:95:b6: 24:fb:70:2b:24:6f:44:7e:51:bd:75:d4:81:41:99: a9:45:d7:b4:91:2d:96:40:c0:a2:7a:52:bf:22:4e: df:0b:b4:19:ae:1e:47:5c:50:ad:7f:95:43:bf:8f: c4:5a:bc:38:4d:30:4b:81:d5:0c:59:e2:8c:14:fc: d6:20:ae:b1:c1:18:3c:4e:47:e4:b8:e3:a1:3a:2f: 50:9b:e3:e7:9a:0f:a4:39:47:7e:10:a1:dd:a0:d9: 3b:64:9e:7d:3f:a7:83:03:7f:02:c0:08:47:ae:f8: 67:4c:b5:3b:d7:58:4a:14:bd:6c:6a:d3:53:e7:c9: 76:d8:2b:01:66:f3:18:9a:28:2e:37:69:98:c5:ad: b2:a0:82:32:7c:74:35:69:0a:3e:c8:bc:df:48:64: a0:a9:60:c8:bc:c8:3f:ce:a9:d3:e1:a4:fd:39:b9: 44:a6:fe:84:4c:58:4c:c6:1a:8b:0a:0e:05:87:e4: 60:5b:c2:31:21:64:f9:65:67:6b:ca:8c:9c:ca:db: bc:e7:1c:99:23:dc:29:97:9c:3b:7e:55:e9:d7:4e: 77:68:f2:d0:d5:33:0c:87:f3:57:32:2e:32:e8:1c: 2f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:09:83:CE:8D:D3:30:9A:C3:3C:2B:5D:12:31:8E:DD:79:41:CD:09 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:88:f3:68:da:3f:1d:46:ed:8f:89:6b:d5:13:c9:a4:ba:4b: e9:31:7d:48:9b:99:93:ef:08:d7:62:a5:72:d7:f8:73:44:0f: 61:0f:87:a7:68:60:7d:22:6f:84:4a:54:55:96:26:44:b2:18: 95:63:74:47:68:40:b2:20:8d:f6:72:7b:3a:8a:8d:1d:24:99: 84:20:b0:22:ef:6d:c2:9e:d4:01:f4:12:d4:cb:1e:8b:2f:08: 66:b6:a6:0f:cc:63:de:47:16:c0:0a:e8:c9:60:38:f9:67:2b: 37:74:ea:96:3c:4b:51:f4:0d:5b:e0:4a:41:33:3a:bb:b4:2a: db:e5:94:d6:a2:f8:53:1f:12:d2:72:67:ef:0d:9f:6a:24:b7: 7b:37:49:4c:56:9a:60:b6:b0:ae:8c:7b:90:e4:92:cb:c7:2e: 34:be:41:84:e6:e7:72:e8:c5:2b:f4:61:c8:94:4d:0f:a7:ab: 39:9e:ca:fb:06:0c:9b:0c:7b:88:93:3f:a7:d8:26:da:05:c0: f6:f0:01:89:b4:5d:90:21:7f:f8:48:f6:97:d9:33:6d:0f:eb: 0f:a2:1a:ce:54:73:da:a8:90:99:8a:cd:00:da:4d:44:e2:2e: 04:09:01:a6:a6:bc:e9:c8:2b:e3:55:99:45:f6:f2:c4:e2:58: 38:c9:b8:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUxMDE5MDA1MDA4WhcNMjUxMDI2MDA1MDA4WjAYMRYwFAYD VQQDEw02OGY0MzVjMS0zMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx59r+xhS5U3PU5VAIGKpLInz82hWLX2/fKuclbYk+3ArJG9EflG9ddSBQZmp Rde0kS2WQMCielK/Ik7fC7QZrh5HXFCtf5VDv4/EWrw4TTBLgdUMWeKMFPzWIK6x wRg8TkfkuOOhOi9Qm+Pnmg+kOUd+EKHdoNk7ZJ59P6eDA38CwAhHrvhnTLU711hK FL1satNT58l22CsBZvMYmiguN2mYxa2yoIIyfHQ1aQo+yLzfSGSgqWDIvMg/zqnT 4aT9OblEpv6ETFhMxhqLCg4Fh+RgW8IxIWT5ZWdryoycytu85xyZI9wpl5w7flXp 1053aPLQ1TMMh/NXMi4y6BwvrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcJg86N 0zCawzwrXRIxjt15Qc0JMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWiPNo2j8dRu2PiWvVE8mkukvpMX1Im5mT7wjXYqVy1/hzRA9hD4en aGB9Im+ESlRVliZEshiVY3RHaECyII32cns6io0dJJmEILAi723CntQB9BLUyx6L LwhmtqYPzGPeRxbACujJYDj5Zys3dOqWPEtR9A1b4EpBMzq7tCrb5ZTWovhTHxLS cmfvDZ9qJLd7N0lMVppgtrCujHuQ5JLLxy40vkGE5udy6MUr9GHIlE0Pp6s5nsr7 BgybDHuIkz+n2CbaBcD28AGJtF2QIX/4SPaX2TNtD+sPohrOVHPaqJCZis0A2k1E 4i4ECQGmprzpyCvjVZlF9vLE4lg4ybjO -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:22 2025 by rpki-client