$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json) Hash identifier: twWugHiJ2Muih+J68ZZWZGSr7SlYXXxYhSGVZIXiw44= Subject key identifier: 4F:6D:8A:5A:DF:E5:44:B8:F7:8A:2E:47:FA:7E:4A:91:F0:D9:DD:70 Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft Manifest number: 075D Signing time: Sat 18 Oct 2025 23:01:03 +0000 Manifest this update: Sat 18 Oct 2025 23:01:03 +0000 Manifest next update: Sat 25 Oct 2025 23:01:03 +0000 Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: u9Ttt5aU/fI1ablwrqqeUJWWxsGryLrYRdSjXXmlmic=) 2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: P6M32s9N/Ait6pG90TBg5gFRqcz9Jw3z+OITkwygUn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: Oct 18 23:01:03 2025 GMT Not After : Oct 25 23:01:03 2025 GMT Subject: CN=68f41c2f-19ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:25:fe:7d:2a:dc:b8:09:d9:82:fe:65:aa: ab:a9:01:ac:5a:19:23:ec:0f:9f:89:63:cd:8b:cb: 4d:f2:a3:31:c5:3a:d9:16:94:1e:db:eb:5b:fa:bb: 6b:2c:2c:a0:3b:30:a3:b1:2d:4d:2b:ba:42:57:ff: 79:dc:8a:87:e5:74:66:48:7f:5a:1d:a4:55:b7:73: 14:86:c7:ae:c2:7e:c0:f4:2b:38:42:9c:6e:5d:7b: 0a:4c:c2:d8:25:93:5e:9f:41:09:6c:3a:51:a2:f1: 08:3a:43:a5:17:23:96:a6:6d:a6:24:4d:f4:65:95: fd:2c:44:8a:7b:24:ad:7a:40:8f:e0:48:e2:4e:ef: 95:c5:73:3e:b1:ee:d4:c7:73:c1:99:e4:3b:97:18: 77:85:51:1b:f7:dd:23:61:c3:cd:09:7c:4b:b4:26: d2:93:bd:9e:6e:70:0e:34:06:de:22:00:31:b9:4c: e0:90:17:4e:78:48:45:69:7d:bf:69:c6:7c:74:bc: 14:d1:d6:29:6e:39:2c:fb:2c:ea:ac:d0:1f:9f:db: e1:56:bd:b2:21:f8:df:bf:0a:67:bd:e3:e6:af:5b: 4c:a0:73:89:af:d2:a8:0b:d4:a6:32:ab:07:85:29: 09:35:9e:3d:eb:72:bc:6a:2a:c6:d7:4d:64:83:4c: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:8A:5A:DF:E5:44:B8:F7:8A:2E:47:FA:7E:4A:91:F0:D9:DD:70 X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ad:a5:21:ad:8d:42:39:81:4a:8d:1e:c0:ac:de:61:30:e8: a3:e1:1f:6f:a0:3a:c1:20:d7:e9:b3:48:9a:72:00:ce:b2:ec: df:d6:d4:bb:ad:76:7a:a5:5a:5e:25:66:59:65:e5:59:45:ac: 4a:92:05:76:4d:73:ff:76:57:bb:02:b0:ad:08:ce:35:dc:85: 5b:81:c0:c2:ce:59:41:48:19:19:a0:24:2c:43:82:8f:85:7a: 5b:7a:55:3a:db:16:80:86:80:cd:96:bb:72:e5:24:39:48:24: ee:de:f9:18:09:58:83:87:29:e9:b3:69:cd:10:83:0e:b3:6a: 90:e3:a4:5c:c3:31:29:0d:f5:eb:82:63:62:05:fa:dd:e1:74: 33:f9:cf:93:68:87:44:66:b9:01:cc:83:ba:9e:e8:a3:41:bd: 7a:3b:0e:41:0f:27:e9:24:7d:07:30:91:f1:99:06:bc:0f:d6: fe:43:a8:da:71:93:b2:25:0b:5e:87:f4:e0:44:6e:e2:84:0d: e2:18:2b:94:d5:d6:2c:37:09:3c:f6:df:98:ce:3e:a2:ef:17: e8:22:e3:c5:b0:b0:f5:74:bd:3b:fa:17:1d:bf:a0:a4:3a:13: b8:db:06:dc:c3:ab:d0:a5:fa:a6:13:66:aa:1f:22:4c:a9:d1: 6e:40:bd:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjUxMDE4MjMwMTAzWhcNMjUxMDI1MjMwMTAzWjAYMRYwFAYD VQQDEw02OGY0MWMyZi0xOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H0l/n0q3LgJ2YL+ZaqrqQGsWhkj7A+fiWPNi8tN8qMxxTrZFpQe2+tb+rtr LCygOzCjsS1NK7pCV/953IqH5XRmSH9aHaRVt3MUhseuwn7A9Cs4QpxuXXsKTMLY JZNen0EJbDpRovEIOkOlFyOWpm2mJE30ZZX9LESKeyStekCP4EjiTu+VxXM+se7U x3PBmeQ7lxh3hVEb990jYcPNCXxLtCbSk72ebnAONAbeIgAxuUzgkBdOeEhFaX2/ acZ8dLwU0dYpbjks+yzqrNAfn9vhVr2yIfjfvwpnvePmr1tMoHOJr9KoC9SmMqsH hSkJNZ4963K8airG101kg0xUwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9tilrf 5US494ouR/p+SpHw2d1wMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5 Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfraUhrY1COYFKjR7ArN5hMOij4R9voDrBINfps0iacgDOsuzf1tS7 rXZ6pVpeJWZZZeVZRaxKkgV2TXP/dle7ArCtCM413IVbgcDCzllBSBkZoCQsQ4KP hXpbelU62xaAhoDNlrty5SQ5SCTu3vkYCViDhynps2nNEIMOs2qQ46RcwzEpDfXr gmNiBfrd4XQz+c+TaIdEZrkBzIO6nuijQb16Ow5BDyfpJH0HMJHxmQa8D9b+Q6ja cZOyJQteh/TgRG7ihA3iGCuU1dYsNwk89t+Yzj6i7xfoIuPFsLD1dL07+hcdv6Ck OhO42wbcw6vQpfqmE2aqHyJMqdFuQL0q -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:01 2025 by rpki-client