$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: FCNBRJYXNMoKnUjaQhoLzjNZf7MS2Ydjw4J0e51Q/mM= Subject key identifier: F4:08:03:9B:74:F5:67:7D:74:59:FF:4A:4E:BB:9A:1A:CB:64:B6:11 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BDD Signing time: Sat 18 Oct 2025 19:43:10 +0000 Manifest this update: Sat 18 Oct 2025 19:43:09 +0000 Manifest next update: Sat 25 Oct 2025 19:43:09 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: w6QEJFW6PTIxM8SB50XZGpjVnxxsgIwsMuZDJbXEZOg=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Oct 18 19:43:09 2025 GMT Not After : Oct 25 19:43:09 2025 GMT Subject: CN=68f3edce-b561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:58:12:6f:e7:55:98:55:be:4d:24:99:a1: 22:3a:87:80:f0:80:2c:11:86:56:f8:de:bc:fd:90: ed:6b:d7:a2:5e:69:02:26:74:0d:70:96:18:a2:1d: 8c:3f:27:54:a9:94:07:e1:a4:45:84:0e:1b:26:a2: bd:90:48:2e:b6:fc:6d:47:0b:60:3d:61:bc:1a:41: b5:79:10:27:29:9d:54:56:fb:03:a0:28:75:6f:94: 61:cf:f8:fd:a2:0c:3d:fb:96:6d:92:ab:6e:0f:5d: ef:ba:34:33:25:ab:a5:3f:53:35:52:5f:b7:2e:26: 67:ea:bf:12:9c:8b:07:28:f7:63:25:6b:00:bc:3b: 06:2f:7a:96:56:55:9f:f2:df:c4:9c:0b:6d:a1:f7: 4c:0d:ae:49:37:66:18:86:77:85:2d:43:6e:ed:63: ff:97:7a:64:a7:08:55:65:06:61:a8:2c:e2:05:86: 86:9d:16:03:fd:68:cf:23:c6:f6:5a:8a:a7:7b:32: ae:f4:2a:90:79:2e:61:69:eb:78:3d:53:a4:c8:0c: 37:86:d7:70:f2:6f:da:41:c0:90:63:12:97:4d:f7: 9c:58:b1:c7:44:65:96:7e:d4:fb:7d:23:6d:74:04: f5:05:60:a7:88:90:f2:f6:20:75:70:58:f5:62:9b: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:08:03:9B:74:F5:67:7D:74:59:FF:4A:4E:BB:9A:1A:CB:64:B6:11 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:23:6b:0d:3c:d9:bf:8e:3c:56:e2:76:db:51:a2:d1:f5:e7: c5:96:5f:3f:f7:25:2a:a7:80:0d:0e:91:00:d5:78:1c:da:87: 07:c2:5e:3c:77:09:cf:fa:cd:38:34:03:e3:f1:d6:3c:62:96: 19:97:31:60:b5:b0:fd:f5:c5:c4:9b:7f:d5:80:7b:1b:54:f5: 42:79:f2:0c:c9:2c:c7:f1:25:ef:a0:6c:5a:4e:b2:e4:a1:61: 41:b9:4d:20:47:fb:4b:ed:5c:9d:6d:cd:91:4a:ca:87:6e:94: fe:03:5b:1c:12:eb:84:d4:c8:5c:93:c0:d8:48:18:2b:65:cc: 00:73:cd:52:7e:6f:9c:74:01:00:49:f9:3a:9d:80:83:bb:6a: 0f:1d:97:47:84:39:52:3f:10:d4:d9:87:6d:6d:ce:3b:f1:0b: 31:2b:46:ef:12:a9:47:e3:93:72:05:43:9e:06:41:c1:65:06: 06:91:35:fb:25:54:a1:35:72:2f:c6:f6:cb:5d:3e:ea:27:df: cb:be:c9:cc:60:1e:6c:b0:73:52:66:23:50:cd:f2:54:66:7a: 59:db:77:9c:7b:7e:10:a6:6c:bd:70:9f:5a:4b:9f:2f:67:2c: 12:67:e0:ab:3b:c9:19:01:24:f7:84:0f:3f:ab:e2:c4:de:77: f6:2e:ed:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUxMDE4MTk0MzA5WhcNMjUxMDI1MTk0MzA5WjAYMRYwFAYD VQQDEw02OGYzZWRjZS1iNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdVYEm/nVZhVvk0kmaEiOoeA8IAsEYZW+N68/ZDta9eiXmkCJnQNcJYYoh2M PydUqZQH4aRFhA4bJqK9kEgutvxtRwtgPWG8GkG1eRAnKZ1UVvsDoCh1b5Rhz/j9 ogw9+5ZtkqtuD13vujQzJaulP1M1Ul+3LiZn6r8SnIsHKPdjJWsAvDsGL3qWVlWf 8t/EnAttofdMDa5JN2YYhneFLUNu7WP/l3pkpwhVZQZhqCziBYaGnRYD/WjPI8b2 WoqnezKu9CqQeS5haet4PVOkyAw3htdw8m/aQcCQYxKXTfecWLHHRGWWftT7fSNt dAT1BWCniJDy9iB1cFj1YpuKzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQIA5t0 9Wd9dFn/Sk67mhrLZLYRMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTI2sNPNm/jjxW4nbbUaLR9efFll8/9yUqp4ANDpEA1Xgc2ocHwl48 dwnP+s04NAPj8dY8YpYZlzFgtbD99cXEm3/VgHsbVPVCefIMySzH8SXvoGxaTrLk oWFBuU0gR/tL7Vydbc2RSsqHbpT+A1scEuuE1Mhck8DYSBgrZcwAc81Sfm+cdAEA Sfk6nYCDu2oPHZdHhDlSPxDU2Ydtbc478QsxK0bvEqlH45NyBUOeBkHBZQYGkTX7 JVShNXIvxvbLXT7qJ9/LvsnMYB5ssHNSZiNQzfJUZnpZ23ece34Qpmy9cJ9aS58v ZywSZ+CrO8kZAST3hA8/q+LE3nf2Lu1a -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:06 2025 by rpki-client