$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: CoSSRFaTSzH8tS+4dQIhKoTpUMYfOKLjQSgsKW3IdWk= Subject key identifier: 68:0A:93:4A:72:52:4C:0F:A4:6A:A8:32:2D:E6:D7:33:22:09:96:E4 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0E14 Signing time: Sat 18 Oct 2025 18:29:35 +0000 Manifest this update: Sat 18 Oct 2025 18:29:34 +0000 Manifest next update: Sat 25 Oct 2025 18:29:34 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: 85vdspdQLSC2Aowu4LzSGmKgHTWkFn9EV+maIBReOOE=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3613 (0xe1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: Oct 18 18:29:34 2025 GMT Not After : Oct 25 18:29:34 2025 GMT Subject: CN=68f3dc8f-f413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:1d:49:00:e3:0b:ee:d2:09:04:cc:d3:df: 4a:62:dd:13:9c:68:23:3f:85:2e:38:7b:67:00:73: 24:75:75:97:18:52:ef:3b:58:a1:61:ac:1f:63:93: cb:23:36:01:11:2f:30:3c:6a:a7:76:f9:d8:60:bb: 77:6e:49:e8:66:95:8a:98:c5:bb:3c:b0:a6:c5:e4: 05:27:89:01:2c:18:db:69:f5:0c:eb:1e:ba:71:7c: 80:b8:49:5b:33:0e:f1:a0:2b:89:a1:31:0f:97:48: 42:39:79:12:bd:39:1c:b1:09:df:b1:3a:d8:8b:cf: 63:91:7a:1a:ec:e5:50:9e:f6:ee:5a:8e:c7:f0:39: 9e:69:f2:1f:f7:f4:a6:15:3a:9c:8b:78:5f:1b:de: 0c:cd:cf:f8:89:6a:5d:c6:e2:2b:2d:9b:48:1a:20: 35:c7:bc:fa:4d:7b:bb:cb:77:ad:74:37:65:76:45: e9:39:9f:da:c1:5b:48:31:3f:2f:7e:2a:18:80:17: 1e:dd:d6:c7:64:e9:5b:ab:a4:0d:ce:b8:27:4f:4d: eb:0e:c7:97:88:1d:39:4c:12:aa:aa:5c:e2:c2:c3: 20:f7:26:20:4f:07:d8:ad:d1:7b:fd:24:e4:52:45: 81:6c:7b:4c:88:f5:92:27:73:c2:0e:53:4f:a7:9b: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:93:4A:72:52:4C:0F:A4:6A:A8:32:2D:E6:D7:33:22:09:96:E4 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:18:42:63:dd:cb:c6:30:7a:92:93:d8:fe:41:be:0c:d0:27: 57:1a:e4:cb:f7:75:fb:0b:aa:b7:a7:4f:76:66:8f:d4:35:a6: 0a:59:0d:57:96:33:d3:73:76:8a:fb:f8:a4:52:80:a4:6c:73: 31:7f:bd:d8:66:5d:26:67:c9:da:36:c8:4c:ea:24:80:09:6e: 48:d5:27:14:56:c5:df:59:76:20:97:b5:60:9b:57:cc:b3:10: 50:8c:01:55:95:b4:bc:31:98:28:6b:29:47:c7:18:e4:44:50: 67:91:a2:d2:1c:b8:7a:27:9f:a6:ac:90:5d:6f:09:38:32:be: 02:e9:d9:56:3a:a5:39:a5:4c:02:5b:fd:be:d6:2b:bc:b2:1e: ab:f5:8b:b8:a8:56:d3:99:74:96:82:3f:76:47:1d:75:b9:16: 56:62:ca:d6:2e:4c:58:5d:f3:02:f8:27:07:b0:7f:bc:71:45: 4d:15:f4:7b:1c:ee:3f:c8:9f:c5:f6:81:67:90:d4:50:01:06: 49:e5:42:c6:2d:c0:55:9a:c0:0b:87:a5:43:20:93:48:5e:a4: 1d:42:c4:ac:e3:90:3b:f1:5a:ea:0c:a1:0a:b3:c8:03:84:c6: 67:bf:71:5b:4c:c4:f5:19:d2:96:7d:e2:64:56:d7:0a:6e:c1: 4a:ad:68:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUxMDE4MTgyOTM0WhcNMjUxMDI1MTgyOTM0WjAYMRYwFAYD VQQDEw02OGYzZGM4Zi1mNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx74dSQDjC+7SCQTM099KYt0TnGgjP4UuOHtnAHMkdXWXGFLvO1ihYawfY5PL IzYBES8wPGqndvnYYLt3bknoZpWKmMW7PLCmxeQFJ4kBLBjbafUM6x66cXyAuElb Mw7xoCuJoTEPl0hCOXkSvTkcsQnfsTrYi89jkXoa7OVQnvbuWo7H8DmeafIf9/Sm FTqci3hfG94Mzc/4iWpdxuIrLZtIGiA1x7z6TXu7y3etdDdldkXpOZ/awVtIMT8v fioYgBce3dbHZOlbq6QNzrgnT03rDseXiB05TBKqqlziwsMg9yYgTwfYrdF7/STk UkWBbHtMiPWSJ3PCDlNPp5sdXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgKk0py UkwPpGqoMi3m1zMiCZbkMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGEJj3cvGMHqSk9j+Qb4M0CdXGuTL93X7C6q3p092Zo/UNaYKWQ1X ljPTc3aK+/ikUoCkbHMxf73YZl0mZ8naNshM6iSACW5I1ScUVsXfWXYgl7Vgm1fM sxBQjAFVlbS8MZgoaylHxxjkRFBnkaLSHLh6J5+mrJBdbwk4Mr4C6dlWOqU5pUwC W/2+1iu8sh6r9Yu4qFbTmXSWgj92Rx11uRZWYsrWLkxYXfMC+CcHsH+8cUVNFfR7 HO4/yJ/F9oFnkNRQAQZJ5ULGLcBVmsALh6VDIJNIXqQdQsSs45A78VrqDKEKs8gD hMZnv3FbTMT1GdKWfeJkVtcKbsFKrWjN -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:46 2025 by rpki-client