$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json) Hash identifier: I69uBWztQGOuumKAXlCQWoQrw/A8eJQy6iP88ybERhY= Subject key identifier: E4:6B:B9:B9:BC:0C:5B:D5:4A:D5:89:AB:79:0F:E5:C8:4B:1A:10:0C Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37 Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37 Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft Manifest number: 039E Signing time: Sun 19 Oct 2025 02:45:09 +0000 Manifest this update: Sun 19 Oct 2025 02:45:08 +0000 Manifest next update: Sun 26 Oct 2025 02:45:08 +0000 Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: /XtuMpWoExbFJ2zP+3hy0K+DjywQWXwXqrKXAtKn45k=) 2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: 3vF76S8iWJW8vHG1MAht+7FYZNQsdje1uuqCEx57cyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37 Validity Not Before: Oct 19 02:45:08 2025 GMT Not After : Oct 26 02:45:08 2025 GMT Subject: CN=68f450b5-67bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:65:01:e9:a7:69:f6:9b:b6:2d:c5:d5:cd: 16:bc:33:2b:9e:82:61:a2:8b:a0:c0:ef:1b:1a:b9: 57:24:5e:f4:d3:dd:0a:cb:85:07:a9:29:92:be:63: 11:b2:16:b9:96:0a:8f:35:78:b4:9f:4e:02:a4:3c: 11:02:76:db:a9:55:b9:a0:6d:21:45:13:4d:61:7c: 4a:82:e2:8e:09:fd:3e:13:17:95:56:37:5b:cd:28: 5f:30:0d:63:a5:83:11:8f:ed:62:62:cc:84:88:8e: 65:93:05:72:84:23:f1:0f:2e:ec:57:49:f6:ac:dc: 3b:76:57:2d:90:f1:fb:c7:7b:07:0e:e7:bb:16:c1: 60:1e:4d:03:4b:72:e2:1a:72:65:06:8c:28:1c:ea: 5e:ed:77:0d:c7:59:fc:fd:a6:c1:4d:84:09:1e:76: e6:36:a5:87:f4:31:86:fd:71:18:3b:71:dc:da:94: 96:1a:5a:a0:ec:37:2f:17:47:ba:00:fa:e5:08:95: fd:25:41:90:44:12:9f:a7:44:47:d3:36:2d:e8:13: ee:0d:40:98:0a:a2:59:f3:89:c1:11:6e:7f:25:cf: ec:17:dc:fc:6f:2f:29:45:12:55:2b:0c:9b:76:9e: a5:0c:ad:ff:80:d3:d3:3a:1a:9f:95:a2:0f:0c:cd: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:B9:B9:BC:0C:5B:D5:4A:D5:89:AB:79:0F:E5:C8:4B:1A:10:0C X509v3 Authority Key Identifier: keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:67:f9:c3:86:42:56:68:11:fe:7a:7c:87:3f:cd:c4:d6:c3: 20:f4:64:6f:52:7f:22:c2:38:e7:a8:07:63:72:f0:21:ac:1b: 33:03:68:b3:e2:ca:43:81:d4:ef:5e:17:72:fb:78:2e:36:1d: 8d:2b:ee:6f:ad:db:6e:04:5c:a3:2f:fe:15:71:61:94:ba:87: 3d:f0:5d:a2:08:44:ab:ba:c2:3f:41:fd:f0:04:e9:c0:f7:0d: 70:99:2c:99:28:7b:8b:a0:2d:fb:ab:cc:84:71:8f:ae:e9:2f: 59:88:82:eb:2c:f6:d5:20:2f:e5:4f:07:62:4e:d9:c9:77:14: 71:2e:16:3c:1e:a6:89:06:89:80:e4:65:a5:0c:bf:79:4a:52: ab:96:1d:c9:89:7c:42:8b:ea:8a:87:eb:4f:49:85:2c:80:63: a6:a6:fd:ee:b9:4d:95:df:ea:5a:9d:80:9e:99:df:88:13:3d: ae:f4:66:80:33:c9:86:f8:a6:c5:c3:62:84:ed:85:e7:85:5e: 77:61:dc:03:7a:42:82:91:76:1d:6e:5a:c4:50:0b:ff:c9:23: 5f:07:41:ca:7f:4d:64:2f:1a:25:80:79:0d:d2:32:c0:7f:2f: 53:78:58:72:f8:cb:09:c3:98:4c:ae:c9:42:50:22:80:e6:63: 11:21:54:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxQUUxMTAvBgNVBAUTKEU3NjhGQ0M4Qjk2N0Q2RjFDODgxRTBENDlBMEM0MjA4 REYwN0ZCMzcwHhcNMjUxMDE5MDI0NTA4WhcNMjUxMDI2MDI0NTA4WjAYMRYwFAYD VQQDEw02OGY0NTBiNS02N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04ZlAemnafabti3F1c0WvDMrnoJhoougwO8bGrlXJF70090Ky4UHqSmSvmMR sha5lgqPNXi0n04CpDwRAnbbqVW5oG0hRRNNYXxKguKOCf0+ExeVVjdbzShfMA1j pYMRj+1iYsyEiI5lkwVyhCPxDy7sV0n2rNw7dlctkPH7x3sHDue7FsFgHk0DS3Li GnJlBowoHOpe7XcNx1n8/abBTYQJHnbmNqWH9DGG/XEYO3Hc2pSWGlqg7DcvF0e6 APrlCJX9JUGQRBKfp0RH0zYt6BPuDUCYCqJZ84nBEW5/Jc/sF9z8by8pRRJVKwyb dp6lDK3/gNPTOhqflaIPDM1rzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORrubm8 DFvVStWJq3kP5chLGhAMMB8GA1UdIwQYMBaAFOdo/Mi5Z9bxyIHg1JoMQgjfB/s3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzFBRS81OEQ5OTJERUI2 NzYxMUVDOEY1Mzc4NDdDNEY5QUUwMi81Mmo4eUxsbjF2SElnZURVbWd4Q0NOOEgt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyajh5TGxuMXZISWdlRFVtZ3hDQ044SC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzFBRS81OEQ5OTJERUI2NzYxMUVDOEY1Mzc4NDdDNEY5QUUwMi81Mmo4eUxsbjF2 SElnZURVbWd4Q0NOOEgtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlZ/nDhkJWaBH+enyHP83E1sMg9GRvUn8iwjjnqAdjcvAhrBszA2iz 4spDgdTvXhdy+3guNh2NK+5vrdtuBFyjL/4VcWGUuoc98F2iCESrusI/Qf3wBOnA 9w1wmSyZKHuLoC37q8yEcY+u6S9ZiILrLPbVIC/lTwdiTtnJdxRxLhY8HqaJBomA 5GWlDL95SlKrlh3JiXxCi+qKh+tPSYUsgGOmpv3uuU2V3+panYCemd+IEz2u9GaA M8mG+KbFw2KE7YXnhV53YdwDekKCkXYdblrEUAv/ySNfB0HKf01kLxolgHkN0jLA fy9TeFhy+MsJw5hMrslCUCKA5mMRIVQS -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:31 2025 by rpki-client