$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: PrQZuiKEMJffJ6k09iX+fesgmzH6a9O0xMmjyv/WGcE= Subject key identifier: 8B:D2:3D:E8:89:31:BA:B3:76:34:CD:E3:C2:95:3B:A9:5A:3A:1B:61 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 06B0 Signing time: Sat 18 Oct 2025 23:39:58 +0000 Manifest this update: Sat 18 Oct 2025 23:39:58 +0000 Manifest next update: Sat 25 Oct 2025 23:39:58 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: 7z5NqjX4wsKGvQzvUUzlEUzbTfj+1ZzzrFo+lf+Q3fY=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: BgYstOucC84ZHYmnH6LDnjDF0uTc0h31+Q9K97MIQUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: Oct 18 23:39:58 2025 GMT Not After : Oct 25 23:39:58 2025 GMT Subject: CN=68f4254e-bd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:19:4a:18:38:14:87:ba:eb:b5:c2:6d:98: 01:fa:89:f9:ce:e7:60:43:7a:94:11:5b:98:d9:e7: 96:90:46:a5:8d:13:28:e5:7f:71:c3:a7:8b:f9:4f: a1:0c:e5:83:de:af:e1:92:d2:e0:c0:9b:9f:ab:90: 01:2c:49:c7:48:8c:8c:71:23:c8:75:c7:e2:d3:88: e9:e6:d0:56:4d:2b:cf:b3:73:f1:47:0e:f1:5a:27: 49:ab:3f:d1:79:5a:79:64:21:64:1f:40:de:bf:36: 19:d6:93:1c:e5:cb:67:88:01:27:34:8e:89:85:c7: 2f:0d:0f:f3:81:01:c3:d1:1f:e7:2d:25:90:4c:26: e3:b3:2a:9e:91:cb:0b:ac:ae:a9:d9:db:59:c7:f3: 0e:b4:2a:3c:0d:c0:e3:74:53:ce:c5:7f:7c:c5:b8: d0:ac:13:96:37:ef:1a:6c:8e:01:d9:bb:31:94:f9: 5f:66:28:b2:87:1b:cd:5d:c3:d2:88:61:9a:f8:01: 25:dd:d6:0b:d5:5f:ae:64:69:6b:60:2e:78:4d:62: eb:9b:11:ca:47:95:60:12:e6:08:bd:e2:a4:18:c4: 06:9d:56:0a:95:c2:87:c8:45:34:f2:34:aa:a3:c7: 2a:0a:7e:08:20:6c:fe:ee:94:10:c8:a2:c7:ea:2d: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:3D:E8:89:31:BA:B3:76:34:CD:E3:C2:95:3B:A9:5A:3A:1B:61 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:29:d9:e5:7a:b5:df:84:1d:45:ab:df:6c:d7:81:12:65:2d: 9b:eb:09:62:62:5a:31:1c:f1:fc:7f:49:3a:7f:a1:7c:6b:56: e3:13:cf:22:09:12:6c:69:94:d7:05:53:73:67:78:72:d3:b0: da:27:99:50:58:26:38:6f:df:82:f1:94:f2:05:46:57:5e:f6: 97:b3:68:9a:93:11:f3:d5:35:c9:38:6a:b3:d7:d8:59:6a:8f: c0:e7:a3:c0:2d:5c:c5:f3:eb:e7:97:d0:09:42:b4:6f:ee:78: 82:6e:a5:fc:a1:ed:cb:cd:8c:d3:dc:07:77:48:e0:72:31:29: 4b:3d:8b:61:b6:f5:45:33:23:d0:7f:6d:b2:59:c5:e5:8c:c7: 0a:68:f4:ec:38:c3:21:8e:54:cd:97:df:81:20:61:1f:de:d4: 90:05:b3:40:77:80:95:79:0c:76:cb:a3:73:0a:0a:5b:18:29: 4b:ed:f0:06:2b:a4:ad:d3:cb:8d:c6:31:91:ca:c1:d1:b3:76: 1e:7a:45:ad:6e:36:bf:b3:9c:fd:7b:ac:f5:9a:5f:15:96:75: bb:e1:f6:b6:d2:ff:90:02:d6:28:e9:56:0e:41:d5:17:02:b1: 69:4b:78:a8:d7:03:1e:8a:08:3d:6e:22:52:ff:b2:68:78:b3: 64:be:53:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjUxMDE4MjMzOTU4WhcNMjUxMDI1MjMzOTU4WjAYMRYwFAYD VQQDEw02OGY0MjU0ZS1iZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgcZShg4FIe667XCbZgB+on5zudgQ3qUEVuY2eeWkEaljRMo5X9xw6eL+U+h DOWD3q/hktLgwJufq5ABLEnHSIyMcSPIdcfi04jp5tBWTSvPs3PxRw7xWidJqz/R eVp5ZCFkH0DevzYZ1pMc5ctniAEnNI6JhccvDQ/zgQHD0R/nLSWQTCbjsyqekcsL rK6p2dtZx/MOtCo8DcDjdFPOxX98xbjQrBOWN+8abI4B2bsxlPlfZiiyhxvNXcPS iGGa+AEl3dYL1V+uZGlrYC54TWLrmxHKR5VgEuYIveKkGMQGnVYKlcKHyEU08jSq o8cqCn4IIGz+7pQQyKLH6i2S3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvSPeiJ MbqzdjTN48KVO6laOhthMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKdnlerXfhB1Fq99s14ESZS2b6wliYloxHPH8f0k6f6F8a1bjE88i CRJsaZTXBVNzZ3hy07DaJ5lQWCY4b9+C8ZTyBUZXXvaXs2iakxHz1TXJOGqz19hZ ao/A56PALVzF8+vnl9AJQrRv7niCbqX8oe3LzYzT3Ad3SOByMSlLPYthtvVFMyPQ f22yWcXljMcKaPTsOMMhjlTNl9+BIGEf3tSQBbNAd4CVeQx2y6NzCgpbGClL7fAG K6St08uNxjGRysHRs3YeekWtbja/s5z9e6z1ml8VlnW74fa20v+QAtYo6VYOQdUX ArFpS3io1wMeigg9biJS/7JoeLNkvlNY -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:06 2025 by rpki-client