$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: odiE2v2yk7U54V3jQfVPfbyWNvDslNHm4682sXnK+i0= Subject key identifier: 87:68:39:8E:DC:70:FD:33:C1:3C:5E:3E:F8:95:C0:3E:F1:8C:50:8D Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: 010D Signing time: Sun 19 Oct 2025 07:40:32 +0000 Manifest this update: Sun 19 Oct 2025 07:40:31 +0000 Manifest next update: Sun 26 Oct 2025 07:40:31 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: cXgTb92uJmRyLL57kg9grAa0oVNU/ReDwo6/iicb+fg=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: 9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: Oct 19 07:40:31 2025 GMT Not After : Oct 26 07:40:31 2025 GMT Subject: CN=68f495f0-3db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:93:ec:4e:19:74:ce:be:6a:b0:ef:94:f4: 74:75:66:1a:3b:fb:85:45:6d:24:9d:7d:f5:78:42: 6f:cc:24:f4:63:33:71:6c:4d:03:4b:90:b2:52:89: 8a:e3:44:12:20:73:7c:6d:a4:18:e5:f9:13:b0:c7: b5:61:8b:22:06:b6:85:50:0d:37:45:be:a9:1a:6d: 57:9d:f2:59:a3:20:67:79:83:1f:62:af:39:23:b9: 9d:92:ac:ab:80:52:c8:b8:57:14:08:b0:43:7e:cc: df:81:7a:a6:7b:9f:72:8d:88:1b:a7:21:7a:6e:95: 94:44:b6:f9:b5:a9:cf:71:fe:db:39:20:ea:32:0a: 9c:62:43:a4:54:d8:17:05:d2:79:19:d7:4e:d3:e7: 13:a3:c7:6e:bb:57:fc:85:72:89:c0:a7:bb:b1:8b: af:d0:62:8e:e8:0e:cc:68:e3:24:20:08:7f:b5:89: 71:8c:25:09:99:17:a1:0e:3f:29:f1:73:9d:1a:e2: 33:fe:c6:68:d2:7e:d3:65:1b:76:d4:f9:19:2a:ff: cc:aa:16:0b:b5:82:55:1f:26:ca:c0:06:ca:74:51: e5:99:0f:54:4f:d5:97:34:2c:c5:cf:60:1f:ac:83: 92:76:9e:18:53:6f:fe:53:19:16:5f:8d:e4:f9:6b: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:39:8E:DC:70:FD:33:C1:3C:5E:3E:F8:95:C0:3E:F1:8C:50:8D X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:28:81:35:46:5d:ec:73:ce:fb:44:94:5a:f0:d5:5c:f0:41: 26:fc:ad:ab:d2:5a:f5:44:48:5e:22:7e:2c:7e:5f:3c:39:10: 51:c9:be:b3:0c:d0:12:e7:c9:d0:a4:55:9b:eb:ce:6e:2d:6a: 1a:a7:96:bb:f3:9a:50:5f:8f:b2:5e:5f:d6:dd:f8:62:3d:83: 72:ed:a5:48:17:00:20:8a:21:d0:44:fc:7f:af:9b:ae:57:48: c4:15:41:5a:4f:15:23:12:ea:3e:b7:1f:98:c9:8b:23:52:ea: 63:f3:37:c1:89:b3:26:db:df:7f:7f:bc:b9:71:92:5d:89:63: e7:46:d0:81:d7:8e:1c:f6:8a:5d:81:44:9f:af:06:0a:bb:33: 7f:f1:5f:d3:56:2d:f0:b3:99:29:1c:a3:4c:63:c7:02:37:50: 3f:b7:c9:f2:19:be:6d:f6:b4:7b:fe:ac:c5:64:26:89:0c:1a: 0b:6f:65:b1:5b:31:17:6f:ec:30:82:ed:28:6b:ea:3d:d2:b3: 8d:f2:e5:46:0d:c2:e7:0c:37:14:c0:d6:59:c5:35:41:59:c3: 34:c6:d2:9c:b2:6f:6a:55:89:40:75:e0:d8:b6:7d:ed:ed:bd: 41:a6:4f:ee:c1:70:14:c1:de:f4:fe:ed:d9:51:d3:7f:61:84: 75:cd:84:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUxMDE5MDc0MDMxWhcNMjUxMDI2MDc0MDMxWjAYMRYwFAYD VQQDEw02OGY0OTVmMC0zZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB6T7E4ZdM6+arDvlPR0dWYaO/uFRW0knX31eEJvzCT0YzNxbE0DS5CyUomK 40QSIHN8baQY5fkTsMe1YYsiBraFUA03Rb6pGm1XnfJZoyBneYMfYq85I7mdkqyr gFLIuFcUCLBDfszfgXqme59yjYgbpyF6bpWURLb5tanPcf7bOSDqMgqcYkOkVNgX BdJ5GddO0+cTo8duu1f8hXKJwKe7sYuv0GKO6A7MaOMkIAh/tYlxjCUJmRehDj8p 8XOdGuIz/sZo0n7TZRt21PkZKv/MqhYLtYJVHybKwAbKdFHlmQ9UT9WXNCzFz2Af rIOSdp4YU2/+UxkWX43k+WuxoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdoOY7c cP0zwTxePviVwD7xjFCNMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAKIE1Rl3sc877RJRa8NVc8EEm/K2r0lr1REheIn4sfl88ORBRyb6z DNAS58nQpFWb685uLWoap5a785pQX4+yXl/W3fhiPYNy7aVIFwAgiiHQRPx/r5uu V0jEFUFaTxUjEuo+tx+YyYsjUupj8zfBibMm299/f7y5cZJdiWPnRtCB144c9opd gUSfrwYKuzN/8V/TVi3ws5kpHKNMY8cCN1A/t8nyGb5t9rR7/qzFZCaJDBoLb2Wx WzEXb+wwgu0oa+o90rON8uVGDcLnDDcUwNZZxTVBWcM0xtKcsm9qVYlAdeDYtn3t 7b1Bpk/uwXAUwd70/u3ZUdN/YYR1zYSs -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:46 2025 by rpki-client