$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: eIpTAvzxGzdjWtT4QEYE1R2kZZ2EUrdl7iNbUceZg2Q= Subject key identifier: 50:C5:DB:66:EC:51:75:1A:E8:AF:A0:3B:B9:89:B5:90:82:68:AA:6E Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 026F Signing time: Sun 19 Oct 2025 03:54:12 +0000 Manifest this update: Sun 19 Oct 2025 03:54:12 +0000 Manifest next update: Sun 26 Oct 2025 03:54:12 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: 1x3cAbFG+6D4sc3H21KEccl8E4Q5Q2uhSh4NreVorhY=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Oct 19 03:54:12 2025 GMT Not After : Oct 26 03:54:12 2025 GMT Subject: CN=68f460e4-32dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3a:ad:1b:5c:44:f3:a7:b8:38:61:96:c6:1d: 5e:b3:19:a1:e2:30:5c:47:91:66:65:fd:4b:72:61: 96:c9:8b:63:1a:11:d2:e2:2e:5f:6e:cf:cf:0a:b3: e1:d5:a9:26:9b:82:83:50:02:8c:c7:ce:2d:11:8e: 8d:9d:64:ca:87:48:ef:20:bd:14:41:64:8a:d5:e1: 8a:ee:75:88:43:ab:24:da:18:3e:bb:d9:ca:e9:1f: 00:92:fc:97:59:ce:47:de:dd:6d:0c:78:ac:95:bd: 25:d5:a3:59:e4:74:ce:b4:cb:b6:6d:e2:56:fa:0c: a0:05:49:a6:fa:37:88:24:4a:ce:1e:fc:31:16:49: c3:60:3a:03:e1:03:f9:63:cf:55:2f:11:d9:df:1a: 55:45:c8:07:c3:95:33:0e:35:33:45:a2:27:75:e3: 4b:84:a0:b3:20:03:25:a4:61:7f:0e:24:38:61:43: 0a:99:fd:72:ab:f0:44:5e:08:1c:e8:7a:cc:77:05: eb:eb:bc:21:8e:68:bb:20:ed:ac:78:2f:36:88:4e: e0:81:f8:1c:15:aa:13:0d:f6:dd:84:05:5e:b1:ed: 89:74:4f:76:b2:28:1b:70:3d:0b:78:41:c4:9d:e3: ac:1a:08:1f:d5:0f:24:75:2b:8c:bc:8c:51:fb:c9: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C5:DB:66:EC:51:75:1A:E8:AF:A0:3B:B9:89:B5:90:82:68:AA:6E X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c8:d6:e9:ca:22:98:cc:a6:cf:15:93:e9:94:ec:51:62:0f: af:f7:c5:cf:a8:3c:81:ec:ca:a7:ab:38:f5:32:84:f9:d0:67: b4:38:d0:c0:7d:1b:d6:df:cd:95:02:a1:f5:d1:b6:9f:0f:e7: 2f:a7:57:3a:76:93:a9:2d:67:98:c0:a2:d5:de:46:1e:f2:d4: a0:98:41:7e:9f:76:0c:b4:e7:51:7a:71:da:d3:d2:89:71:e6: cb:07:2d:77:fe:fe:6c:91:6f:f0:06:aa:6b:9e:db:85:8b:b3: 79:b9:a2:d7:28:ff:55:63:18:be:01:7c:3e:78:eb:33:dc:87: fd:67:f2:23:b7:10:fa:0e:27:96:3a:70:32:68:fd:00:81:b9: 21:af:c0:34:e7:3a:a3:9d:f7:42:7f:5a:9e:3d:17:41:a2:5d: 73:2a:cb:27:59:c6:c8:44:dd:8a:b6:4f:dd:04:1a:5b:61:b7: be:7a:86:2c:53:6c:2b:49:42:13:3d:13:1b:6e:dc:6d:16:95: 79:4e:c9:88:1f:ef:e9:21:95:91:d2:6d:d7:a3:a1:61:5a:84: a6:f6:0c:5c:2a:e9:05:ee:99:64:5f:d3:3a:96:2f:7c:be:a7: 22:40:49:52:7a:7b:39:46:68:5f:17:f7:98:ea:20:eb:97:31: 94:bc:ff:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUxMDE5MDM1NDEyWhcNMjUxMDI2MDM1NDEyWjAYMRYwFAYD VQQDEw02OGY0NjBlNC0zMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DqtG1xE86e4OGGWxh1esxmh4jBcR5FmZf1LcmGWyYtjGhHS4i5fbs/PCrPh 1akmm4KDUAKMx84tEY6NnWTKh0jvIL0UQWSK1eGK7nWIQ6sk2hg+u9nK6R8AkvyX Wc5H3t1tDHislb0l1aNZ5HTOtMu2beJW+gygBUmm+jeIJErOHvwxFknDYDoD4QP5 Y89VLxHZ3xpVRcgHw5UzDjUzRaIndeNLhKCzIAMlpGF/DiQ4YUMKmf1yq/BEXggc 6HrMdwXr67whjmi7IO2seC82iE7ggfgcFaoTDfbdhAVese2JdE92sigbcD0LeEHE neOsGggf1Q8kdSuMvIxR+8nvdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDF22bs UXUa6K+gO7mJtZCCaKpuMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnyNbpyiKYzKbPFZPplOxRYg+v98XPqDyB7Mqnqzj1MoT50Ge0ONDA fRvW382VAqH10bafD+cvp1c6dpOpLWeYwKLV3kYe8tSgmEF+n3YMtOdRenHa09KJ cebLBy13/v5skW/wBqprntuFi7N5uaLXKP9VYxi+AXw+eOsz3If9Z/IjtxD6DieW OnAyaP0Agbkhr8A05zqjnfdCf1qePRdBol1zKssnWcbIRN2Ktk/dBBpbYbe+eoYs U2wrSUITPRMbbtxtFpV5TsmIH+/pIZWR0m3Xo6FhWoSm9gxcKukF7plkX9M6li98 vqciQElSens5RmhfF/eY6iDrlzGUvP/T -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:10 2025 by rpki-client