$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: Kdo7saQj35ytkUicvOzhXMkmYzFY2tIq9VehbIHQotc= Subject key identifier: 04:C7:5E:54:A2:66:C3:AC:DF:61:A4:02:F2:E4:5B:C8:C7:3E:25:9B Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 09FC Signing time: Sun 19 Oct 2025 00:16:51 +0000 Manifest this update: Sun 19 Oct 2025 00:16:50 +0000 Manifest next update: Sun 26 Oct 2025 00:16:50 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: sKillVbXM1jHdN9Y3FO90oC2wa24KxzPZ0TqUYOBRUY=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Oct 19 00:16:50 2025 GMT Not After : Oct 26 00:16:50 2025 GMT Subject: CN=68f42df3-356b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:8a:9c:9f:43:0a:0b:a9:26:7c:ac:a7:b2: f4:b3:5d:52:06:93:6a:c1:5b:f1:e9:3b:42:63:47: dd:c9:f7:8c:9a:ba:18:9f:f8:2c:ba:f0:28:8d:ce: 70:d0:ea:20:7a:50:2d:fc:49:b2:71:19:b9:d5:42: 11:5e:30:eb:b9:93:ac:d5:64:bd:87:b4:9d:01:dc: cc:7e:d9:07:37:98:04:00:b9:58:21:b4:d9:f2:7f: 42:9a:8e:ba:51:e0:5e:89:e4:5e:06:fd:23:0e:5b: 7d:5c:0c:41:b5:98:27:b3:70:5d:41:ef:da:55:28: 7c:80:56:56:68:6a:15:d9:ac:6c:8c:f8:45:2b:ab: 2b:39:2d:a9:a1:2a:fd:b0:5f:54:79:f2:a2:66:10: 06:ba:56:1c:15:8c:20:d2:32:c0:eb:25:2a:d0:44: 8f:95:21:92:9e:69:f6:8a:fe:be:70:88:55:88:f2: 51:76:f4:5e:62:87:51:ca:35:51:de:ec:c2:e2:dc: 58:f8:fe:1d:ec:e2:d9:2b:f7:4a:9b:bc:73:95:02: db:12:f7:d1:ad:bd:67:38:97:36:ab:a1:bb:11:38: 83:1b:b7:97:d6:bb:8c:e2:10:79:6e:8c:48:cc:33: 3f:eb:e0:67:b7:6d:c7:db:2e:7d:0f:14:54:1b:97: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C7:5E:54:A2:66:C3:AC:DF:61:A4:02:F2:E4:5B:C8:C7:3E:25:9B X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f1:2f:c0:7b:cc:8f:56:7f:40:68:a5:46:2d:98:33:aa:c8: f9:c9:27:8c:f8:eb:ec:d6:22:00:be:43:c0:a0:a6:b6:5d:27: 63:e5:98:34:b6:ac:e3:79:1a:89:5f:bb:60:07:b1:93:4b:d1: 3b:fa:56:c1:08:c0:98:ec:ea:83:6e:ea:1f:37:75:13:d1:29: 71:cb:6d:ef:bd:20:c7:8d:92:7d:71:80:6b:6f:12:cf:b6:bf: d8:c1:70:bc:44:df:ee:db:7d:b4:b7:1e:e3:da:5f:34:c0:b2: f9:2b:ed:89:3f:8e:89:2a:05:67:eb:9f:3e:41:e5:52:06:2b: 34:2e:0d:55:21:ae:c8:f0:f5:f7:9f:ea:b5:90:32:fd:b4:3a: 7c:ac:c7:c2:a3:52:d8:76:eb:21:1f:72:0c:db:16:9a:6f:ac: 98:03:14:4b:4c:78:3c:c0:d3:f6:c6:4c:72:33:c5:bd:63:6c: 8c:a4:e5:54:87:a1:9f:29:a9:1e:48:9b:78:2d:a1:e5:45:4e: 53:73:a9:5a:fc:05:23:46:7a:49:b3:88:ff:4f:66:7b:32:ea: f1:2a:80:44:85:18:55:58:20:98:5c:ff:fe:f7:9f:7f:bf:d4: 60:51:0b:ea:1d:4a:19:0e:a8:94:85:63:85:1e:1c:40:8c:5e: 7a:23:fb:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTEwMTkwMDE2NTBaFw0yNTEwMjYwMDE2NTBaMBgxFjAUBgNV BAMTDTY4ZjQyZGYzLTM1NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQSoqcn0MKC6kmfKynsvSzXVIGk2rBW/HpO0JjR93J94yauhif+Cy68CiNznDQ 6iB6UC38SbJxGbnVQhFeMOu5k6zVZL2HtJ0B3Mx+2Qc3mAQAuVghtNnyf0KajrpR 4F6J5F4G/SMOW31cDEG1mCezcF1B79pVKHyAVlZoahXZrGyM+EUrqys5LamhKv2w X1R58qJmEAa6VhwVjCDSMsDrJSrQRI+VIZKeafaK/r5wiFWI8lF29F5ih1HKNVHe 7MLi3Fj4/h3s4tkr90qbvHOVAtsS99GtvWc4lzarobsROIMbt5fWu4ziEHlujEjM Mz/r4Ge3bcfbLn0PFFQblzK7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBMdeVKJm w6zfYaQC8uRbyMc+JZswHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvxL8B7zI9Wf0BopUYtmDOqyPnJJ4z46+zWIgC+Q8CgprZdJ2PlmDS2 rON5Golfu2AHsZNL0Tv6VsEIwJjs6oNu6h83dRPRKXHLbe+9IMeNkn1xgGtvEs+2 v9jBcLxE3+7bfbS3HuPaXzTAsvkr7Yk/jokqBWfrnz5B5VIGKzQuDVUhrsjw9fef 6rWQMv20Onysx8KjUth26yEfcgzbFppvrJgDFEtMeDzA0/bGTHIzxb1jbIyk5VSH oZ8pqR5Im3gtoeVFTlNzqVr8BSNGekmziP9PZnsy6vEqgESFGFVYIJhc//73n3+/ 1GBRC+odShkOqJSFY4UeHECMXnoj+8U= -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:09 2025 by rpki-client