$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: 56Leu+C+oKlG6sdn5cgPCs7Bem1UR297oevQkGVf+xM= Subject key identifier: 34:7B:88:C8:16:DC:6C:22:84:39:1C:AC:2B:13:42:E1:48:3F:F4:AE Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 7B Signing time: Sun 19 Oct 2025 10:04:13 +0000 Manifest this update: Sun 19 Oct 2025 10:04:13 +0000 Manifest next update: Sun 26 Oct 2025 10:04:13 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: lLgiinLCeP1iPOzc0VsL6f1Ypzyg8jgwSDHuOcMnzvA=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: BR0iac6RCibng8iXx5EGv9yUT7uect2xiyJYOcbA9Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Oct 19 10:04:13 2025 GMT Not After : Oct 26 10:04:13 2025 GMT Subject: CN=68f4b79d-aa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:bb:d6:0d:cf:b1:9a:2a:44:4e:15:42:b0: 04:c4:17:10:4f:d6:c0:be:f0:36:cf:92:60:60:91: aa:a5:37:c2:3a:b5:97:d9:13:bf:30:fa:fd:c9:49: 1e:08:5b:7b:eb:5d:e8:a5:d3:44:4a:41:8d:a2:13: 4c:28:23:5e:94:9f:21:53:e2:d1:6a:b9:37:80:70: 13:0e:28:28:5e:87:8b:25:50:e9:b5:8e:46:63:6b: 4f:5e:96:c8:4a:bd:89:88:ec:2b:e5:de:d1:f7:23: 5f:cd:4d:07:54:f6:d8:ec:a6:d2:04:7c:0f:f0:f6: 32:23:ef:bd:0c:e5:e1:7c:2f:21:42:82:f5:09:65: 92:b1:ba:99:14:2c:7f:87:02:72:83:e7:86:a5:57: 16:78:ee:36:47:f9:a9:37:41:de:26:02:d6:24:4f: ab:88:9c:64:7b:55:c6:ba:67:fc:68:1c:5d:6e:52: e0:f2:dd:f1:41:8f:93:d5:44:b4:1e:0f:b1:95:a8: fc:8f:af:03:8a:c7:fc:38:86:3e:25:16:9b:a2:a6: 32:82:65:92:4b:5c:33:8f:f4:98:93:87:77:b7:7e: 53:b9:39:de:81:b6:c2:bb:f2:ce:8b:74:08:15:53: 22:a4:f0:5c:df:f2:b3:67:90:3b:61:ab:78:e5:b5: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:88:C8:16:DC:6C:22:84:39:1C:AC:2B:13:42:E1:48:3F:F4:AE X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cc:69:74:af:11:24:c9:b1:38:5a:da:0d:88:bf:f7:c6:fc: d4:53:94:79:7a:17:8d:3c:ae:57:c3:f0:fe:8c:0e:8d:d6:7c: a0:fd:6d:e4:cf:b5:93:ec:86:6c:48:a7:a5:3f:5b:e0:19:bc: 53:65:bb:76:65:9d:b1:48:d4:a4:79:c1:9b:62:dc:34:91:b2: c7:10:31:9e:53:aa:f3:d2:42:e5:16:81:f6:6d:59:0c:9e:b7: a2:90:82:8e:ea:db:81:66:c3:c6:e3:24:37:36:97:28:3b:f7: 8f:cb:d6:3a:32:c0:1a:88:55:c2:2f:33:7d:b4:cb:d5:96:68: 93:55:be:58:43:52:31:38:49:00:f2:21:41:4b:7b:1a:fc:b7: c3:aa:b0:9c:91:39:68:1d:99:4e:e7:6f:67:22:f3:a6:41:15: 91:ad:c6:09:5d:9f:89:40:c3:c3:03:9c:38:7c:a0:c4:53:45: 7b:e2:16:91:9d:17:1e:c5:f1:7b:ad:20:61:1e:a9:16:61:cc: d3:28:fb:9f:33:19:22:30:26:cd:e1:51:cc:e4:1e:a8:43:7d: be:7e:7b:a3:2a:8d:c0:36:ee:11:84:01:01:58:0d:07:b6:76: 03:95:bd:05:42:2f:10:7d:39:79:80:1f:35:ea:af:a6:1c:c1: b4:7e:eb:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTQ3NzExMC8GA1UEBRMoNzI0MUU4RjAzOEI5RjI1MkZCNjFDQTQxQjZBNEZDMTY3 Qjc3NTUyNjAeFw0yNTEwMTkxMDA0MTNaFw0yNTEwMjYxMDA0MTNaMBgxFjAUBgNV BAMTDTY4ZjRiNzlkLWFhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ZLvWDc+xmipEThVCsATEFxBP1sC+8DbPkmBgkaqlN8I6tZfZE78w+v3JSR4I W3vrXeil00RKQY2iE0woI16UnyFT4tFquTeAcBMOKCheh4slUOm1jkZja09elshK vYmI7Cvl3tH3I1/NTQdU9tjsptIEfA/w9jIj770M5eF8LyFCgvUJZZKxupkULH+H AnKD54alVxZ47jZH+ak3Qd4mAtYkT6uInGR7Vca6Z/xoHF1uUuDy3fFBj5PVRLQe D7GVqPyPrwOKx/w4hj4lFpuipjKCZZJLXDOP9JiTh3e3flO5Od6BtsK78s6LdAgV UyKk8Fzf8rNnkDthq3jltefbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNHuIyBbc bCKEORysKxNC4Ug/9K4wHwYDVR0jBBgwFoAUckHo8Di58lL7YcpBtqT8Fnt3VSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNDc3LzZCNzAzNUY4RjNG QzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2tIbzhEaTU4bEw3WWNwQnRxVDhGbnQzVlNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NDc3LzZCNzAzNUY4RjNGQzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxM N1ljcEJ0cVQ4Rm50M1ZTWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHMaXSvESTJsTha2g2Iv/fG/NRTlHl6F408rlfD8P6MDo3WfKD9beTP tZPshmxIp6U/W+AZvFNlu3ZlnbFI1KR5wZti3DSRsscQMZ5TqvPSQuUWgfZtWQye t6KQgo7q24Fmw8bjJDc2lyg794/L1joywBqIVcIvM320y9WWaJNVvlhDUjE4SQDy IUFLexr8t8OqsJyROWgdmU7nb2ci86ZBFZGtxgldn4lAw8MDnDh8oMRTRXviFpGd Fx7F8XutIGEeqRZhzNMo+58zGSIwJs3hUczkHqhDfb5+e6MqjcA27hGEAQFYDQe2 dgOVvQVCLxB9OXmAHzXqr6YcwbR+65w= -----END CERTIFICATE-----Generated at Mon Oct 20 08:55:47 2025 by rpki-client