$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: eDpA3GaH8Wy5gm7zlSoma4AySTNR/LxmqU06vdekXjA= Subject key identifier: 4B:F4:9D:A8:3F:E4:8C:BC:2E:E5:3B:42:0B:87:1B:A5:26:DE:7A:B8 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 02BB Signing time: Sun 19 Oct 2025 03:36:39 +0000 Manifest this update: Sun 19 Oct 2025 03:36:38 +0000 Manifest next update: Sun 26 Oct 2025 03:36:38 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: lbUKxiMmw//z1Dhs31VrZ07L1FSlVpKXLZO9BA/hrcQ=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Oct 19 03:36:38 2025 GMT Not After : Oct 26 03:36:38 2025 GMT Subject: CN=68f45cc7-fac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:0b:a0:e7:1b:b9:24:40:e1:21:8a:ce:7c: 28:e3:d3:54:23:e1:cf:1f:d2:15:cc:c1:64:7b:ba: 40:01:a5:3b:d6:2a:b4:35:5f:f7:2d:e4:a9:eb:0d: f6:f0:ff:7b:34:55:b0:ff:4c:df:9e:77:9e:fa:14: e7:38:74:2d:9a:63:76:20:b6:ef:69:90:e1:77:ec: a8:c8:11:4e:37:fa:e5:28:5d:6b:13:cf:5e:5c:31: 5e:6f:62:4a:09:a3:f1:4f:bf:72:22:46:c6:06:6b: 05:c2:1d:4c:45:4e:49:15:30:b0:ba:67:fb:12:89: 87:98:49:ca:4b:22:02:06:dd:3c:21:21:48:a0:ec: e2:3e:a7:ad:33:d0:34:8f:e2:ea:93:eb:04:b1:5c: e6:0b:ef:96:8e:89:68:4e:7e:44:69:0a:a1:96:c1: 8f:69:8e:13:c4:77:a4:1e:e4:97:17:2e:7b:17:58: e6:cd:a5:ae:33:08:de:0a:c8:ad:21:70:b4:f1:84: 74:91:34:9e:c3:19:dc:06:bd:91:47:b4:84:07:00: 70:35:27:af:de:79:49:30:14:2a:6f:7c:a7:31:39: 7b:9b:fc:b7:2d:7a:43:38:7c:77:bb:d7:ff:31:34: 8d:1d:45:e2:d6:b7:25:97:6f:99:85:24:bc:12:9e: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:9D:A8:3F:E4:8C:BC:2E:E5:3B:42:0B:87:1B:A5:26:DE:7A:B8 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:4c:1f:e5:02:6c:b7:e7:78:a6:8f:5f:85:43:f4:49:d2:86: a1:ca:e7:3f:2d:9d:10:46:b5:13:60:2c:39:45:62:43:fe:6c: 52:72:34:ba:fb:0b:ed:a7:d5:c4:2d:70:11:06:7c:ae:f6:a2: 44:b2:c8:3a:ef:fe:08:7d:b3:85:dd:5d:32:13:1a:c6:f3:83: b6:50:de:06:0e:d0:39:53:ff:56:e7:38:f8:ad:ae:2a:81:29: df:06:50:2e:da:88:6d:7f:53:0b:51:5e:f4:ea:0f:af:c3:d4: c4:6b:ab:4a:ce:18:ec:b7:ed:1d:0d:d1:5c:43:db:1a:ff:9c: 4a:bc:85:a3:8a:84:23:b0:77:6a:e8:ef:ad:ab:aa:44:90:45: 5f:14:4b:d2:e2:66:b3:96:5f:f4:5c:58:7c:0e:b0:01:d0:23: 03:2c:90:65:14:14:55:04:6e:73:72:5c:46:82:e3:52:10:2a: 55:53:56:58:1e:58:12:12:1e:4b:89:62:02:44:af:6e:26:38: b1:a6:51:86:9c:35:64:5d:fd:fc:0e:3c:0a:f9:d5:3a:65:d1: 71:2a:dd:6e:ba:a0:8e:27:36:ff:d4:8c:9b:f1:c0:1e:94:11: 53:3d:28:5d:32:db:a4:2e:61:ca:7d:64:d1:52:24:2b:c2:7e: 95:1d:79:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUxMDE5MDMzNjM4WhcNMjUxMDI2MDMzNjM4WjAYMRYwFAYD VQQDEw02OGY0NWNjNy1mYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UILoOcbuSRA4SGKznwo49NUI+HPH9IVzMFke7pAAaU71iq0NV/3LeSp6w32 8P97NFWw/0zfnnee+hTnOHQtmmN2ILbvaZDhd+yoyBFON/rlKF1rE89eXDFeb2JK CaPxT79yIkbGBmsFwh1MRU5JFTCwumf7EomHmEnKSyICBt08ISFIoOziPqetM9A0 j+Lqk+sEsVzmC++WjoloTn5EaQqhlsGPaY4TxHekHuSXFy57F1jmzaWuMwjeCsit IXC08YR0kTSewxncBr2RR7SEBwBwNSev3nlJMBQqb3ynMTl7m/y3LXpDOHx3u9f/ MTSNHUXi1rcll2+ZhSS8Ep4erwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv0nag/ 5Iy8LuU7QguHG6Um3nq4MB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBATB/lAmy353imj1+FQ/RJ0oahyuc/LZ0QRrUTYCw5RWJD/mxScjS6 +wvtp9XELXARBnyu9qJEssg67/4IfbOF3V0yExrG84O2UN4GDtA5U/9W5zj4ra4q gSnfBlAu2ohtf1MLUV706g+vw9TEa6tKzhjst+0dDdFcQ9sa/5xKvIWjioQjsHdq 6O+tq6pEkEVfFEvS4mazll/0XFh8DrAB0CMDLJBlFBRVBG5zclxGguNSECpVU1ZY HlgSEh5LiWICRK9uJjixplGGnDVkXf38DjwK+dU6ZdFxKt1uuqCOJzb/1Iyb8cAe lBFTPShdMtukLmHKfWTRUiQrwn6VHXma -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:00 2025 by rpki-client