$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft File: sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json) Hash identifier: uDay+4amcjp7Bctm19nD84A8eIg7FZj8u5UiJdxTNmI= Subject key identifier: B6:FC:AB:12:34:C9:3E:96:CF:24:1F:E1:D3:CD:70:F3:6E:66:CB:82 Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD Certificate issuer: /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft Manifest number: 0154 Signing time: Sun 19 Oct 2025 06:52:47 +0000 Manifest this update: Sun 19 Oct 2025 06:52:47 +0000 Manifest next update: Sun 26 Oct 2025 06:52:47 +0000 Files and hashes: 1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: DU5uSDakPlhJswLQNyOHDGYjpxZbKhCQwsDzhhLQggQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Validity Not Before: Oct 19 06:52:47 2025 GMT Not After : Oct 26 06:52:47 2025 GMT Subject: CN=68f48abf-5534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:84:f7:7c:90:b5:96:21:60:74:32:a5:89: 85:d3:a2:47:53:5e:b1:a5:f7:2d:1d:6b:5a:5a:64: f7:47:c2:3e:d1:b7:a0:37:9e:b2:50:a5:eb:2f:fb: 3e:12:5b:b7:7f:70:51:31:2e:6b:2b:7f:4b:16:71: 88:54:c3:97:1f:f3:de:92:fa:eb:95:ce:62:cf:c4: b5:2d:26:2d:7f:16:f9:b0:df:1c:76:9e:df:7a:5f: 7f:e5:33:2d:fe:a9:2e:e6:70:65:b9:7f:4c:4a:da: 82:aa:29:39:79:5e:f2:00:90:26:43:46:1a:5e:8a: fc:29:09:62:b5:12:b0:16:1a:bd:e7:96:d0:db:ab: 39:e2:4b:29:92:a1:8a:27:38:47:22:c2:18:81:50: 0f:71:7b:8f:17:a0:da:7a:2d:11:b7:0f:58:af:05: 33:a8:77:11:8a:6c:78:e4:5a:30:f6:52:77:61:cd: 0e:da:b0:6c:df:b9:d8:4b:93:85:c9:06:dc:9d:54: 31:e9:a4:b7:ad:9b:fa:e6:41:ba:f8:e2:a0:5e:c4: 45:1d:83:47:3b:11:10:6c:3b:23:12:15:43:cb:be: a5:6c:64:de:4c:a8:24:ca:0d:1b:24:e5:b0:e8:ac: c5:3d:b0:5f:69:73:e3:38:52:e1:f9:38:d9:c4:60: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FC:AB:12:34:C9:3E:96:CF:24:1F:E1:D3:CD:70:F3:6E:66:CB:82 X509v3 Authority Key Identifier: keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3f:00:e0:b3:e6:80:f1:62:bc:b4:af:33:b2:8d:15:eb:7e: 55:cc:b0:1b:1e:f7:73:17:14:08:11:ed:04:2e:5f:67:e4:6a: 1d:b5:97:03:e2:59:53:4d:45:9c:dc:22:00:4f:78:fc:8d:9f: b9:54:3a:2d:cd:8e:4b:d6:c0:f5:4e:14:ca:26:c6:69:f1:55: c5:64:ec:b8:19:e8:4c:b4:7e:52:55:9f:c5:7d:8e:8c:ab:d0: 61:83:f5:10:5e:a4:23:4a:a1:64:23:a0:74:1e:1f:84:7f:4c: ff:20:26:fc:84:e4:58:21:da:49:ff:34:26:09:46:1f:2c:b7: a5:09:46:70:3b:63:24:50:d2:22:2b:d4:e4:b7:99:86:5e:f0: f9:88:74:86:82:1b:4d:4a:d2:5c:f5:ce:3f:11:61:69:5a:08: 7d:c2:83:a5:18:41:fc:19:42:e2:2f:2f:a1:c2:ed:7b:26:98: 58:36:e7:6e:a5:42:bd:1e:e7:fc:5a:48:ac:f3:a5:cc:b9:db: fd:00:a2:e1:11:03:00:bd:7f:06:52:04:61:8e:56:49:6c:bc: f0:ac:db:1b:60:88:04:38:51:9b:52:ab:78:be:88:04:60:6b: 98:a8:2b:f9:b0:f2:4f:4f:0f:47:61:14:b4:6a:4e:fc:70:1d: 13:ac:7b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCNUExMTAvBgNVBAUTKEIxRDU3NkMwQzc4RTVDRjU4RDQ4MzdBMjZDOTI2M0M2 M0YxMzE1REQwHhcNMjUxMDE5MDY1MjQ3WhcNMjUxMDI2MDY1MjQ3WjAYMRYwFAYD VQQDEw02OGY0OGFiZi01NTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ECE93yQtZYhYHQypYmF06JHU16xpfctHWtaWmT3R8I+0begN56yUKXrL/s+ Elu3f3BRMS5rK39LFnGIVMOXH/Pekvrrlc5iz8S1LSYtfxb5sN8cdp7fel9/5TMt /qku5nBluX9MStqCqik5eV7yAJAmQ0YaXor8KQlitRKwFhq955bQ26s54kspkqGK JzhHIsIYgVAPcXuPF6Daei0Rtw9YrwUzqHcRimx45Fow9lJ3Yc0O2rBs37nYS5OF yQbcnVQx6aS3rZv65kG6+OKgXsRFHYNHOxEQbDsjEhVDy76lbGTeTKgkyg0bJOWw 6KzFPbBfaXPjOFLh+TjZxGCTxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb8qxI0 yT6WzyQf4dPNcPNuZsuCMB8GA1UdIwQYMBaAFLHVdsDHjlz1jUg3omySY8Y/ExXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI1QS83QzA3NUUxOEEz QjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQV05TRGVpYkpKanhqOFRG ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NkVjJ3TWVPWFBXTlNEZWliSkpqeGo4VEZkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI1QS83QzA3NUUxOEEzQjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQ V05TRGVpYkpKanhqOFRGZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUPwDgs+aA8WK8tK8zso0V635VzLAbHvdzFxQIEe0ELl9n5GodtZcD 4llTTUWc3CIAT3j8jZ+5VDotzY5L1sD1ThTKJsZp8VXFZOy4GehMtH5SVZ/FfY6M q9Bhg/UQXqQjSqFkI6B0Hh+Ef0z/ICb8hORYIdpJ/zQmCUYfLLelCUZwO2MkUNIi K9Tkt5mGXvD5iHSGghtNStJc9c4/EWFpWgh9woOlGEH8GULiLy+hwu17JphYNudu pUK9Huf8Wkis86XMudv9AKLhEQMAvX8GUgRhjlZJbLzwrNsbYIgEOFGbUqt4vogE YGuYqCv5sPJPTw9HYRS0ak78cB0TrHv/ -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:24 2025 by rpki-client