$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: w3wMGmm6bsBp9yEt4BpdsV9j+WOvO+4+p/ds3tSRxSI= Subject key identifier: F7:5F:CB:1D:DC:F0:F1:01:F3:D0:BE:6F:A3:84:26:D4:CC:C7:79:2B Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 08:33:56 +0000 Manifest this update: Sun 19 Oct 2025 08:33:56 +0000 Manifest next update: Sun 26 Oct 2025 08:33:56 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: /erQfKyTAqclpkykt7zk6VuJU0LkG6iVAF1GpIiGhqA=) 2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Oct 19 08:33:56 2025 GMT Not After : Oct 26 08:33:56 2025 GMT Subject: CN=68f4a274-e9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:af:5e:1d:a3:f0:7e:e0:8b:0e:82:6a:d8: 7e:eb:a4:67:5a:ea:12:d1:11:22:d0:f6:37:f4:16: 09:2c:cc:bc:f8:2a:91:ec:24:62:55:66:6e:4b:79: 05:04:d3:f2:0f:1d:41:f0:4c:0f:72:f5:6f:e0:44: 58:b1:34:cb:5a:65:1b:ee:2d:a8:e7:cc:7c:20:b8: 51:62:ac:93:cf:95:2e:e7:d6:ac:99:f1:aa:29:5e: e4:bf:ea:19:5e:69:84:be:7d:d8:d5:14:ef:67:d1: 26:eb:e1:5c:64:2c:c8:41:00:b1:fd:fb:31:88:a6: d6:f9:34:70:01:ea:25:ab:1e:50:0b:88:1e:e9:a4: 94:07:74:c7:4d:e5:c1:65:26:b2:96:ae:27:97:27: c7:99:36:67:d5:be:ec:fa:8e:b3:8d:79:d2:ce:7a: 8f:36:c7:fb:22:de:62:21:f1:3f:26:89:44:79:8c: fe:86:80:fc:80:f8:5d:45:3a:6e:e2:64:aa:ed:6d: 05:9c:54:02:ce:66:d2:d5:8d:33:7d:9e:f1:30:8a: 53:61:12:d7:0e:e4:50:e5:e4:8e:e3:eb:a6:95:83: 12:dc:06:86:74:e8:50:50:3b:36:3c:15:41:48:bc: 4e:80:28:e1:70:1c:1f:9a:91:0a:82:b8:e9:ad:97: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5F:CB:1D:DC:F0:F1:01:F3:D0:BE:6F:A3:84:26:D4:CC:C7:79:2B X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:be:af:1d:8a:1f:76:5e:b7:ac:48:84:ce:03:f9:32:fc:47: 65:16:38:a8:88:2e:a3:ee:23:d1:ed:16:86:ae:45:24:70:4c: 80:ff:ca:66:23:ec:b0:58:7f:74:b4:e7:6f:e2:2d:66:42:aa: 0a:58:94:39:cf:c6:1b:71:02:28:61:60:20:24:42:05:4e:1f: 98:fe:ea:50:80:e1:a7:38:bd:1d:5b:ef:94:9c:7f:d2:10:97: b0:a0:e3:77:e1:b0:61:0f:42:c4:74:28:8b:ce:b4:97:82:92: 6f:b9:05:49:e5:97:c0:32:f4:95:8e:c3:aa:63:bd:07:02:7c: d6:50:1c:11:37:a7:8d:a8:cc:b2:45:24:51:3f:af:9e:90:3d: 25:72:d2:87:79:39:32:f6:38:08:b2:3e:e5:f0:09:2f:7b:d0: 98:53:da:d7:c3:dd:d4:56:a2:b9:ec:7e:bd:47:03:b0:5e:03: 1a:9b:1f:56:90:a6:79:00:c2:c3:2c:43:5c:c2:17:ae:33:7a: 2d:5f:57:1d:2c:c2:b9:ad:61:43:27:22:0b:52:87:5d:75:ac: 6b:23:5e:e2:66:15:2c:ca:1d:e1:cf:fc:4f:81:9e:a3:c9:c5: 3f:f0:d3:cd:96:97:5b:c1:f1:77:5c:c2:8c:ec:ad:36:e7:ac: ca:a4:60:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUxMDE5MDgzMzU2WhcNMjUxMDI2MDgzMzU2WjAYMRYwFAYD VQQDEw02OGY0YTI3NC1lOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEmvXh2j8H7giw6Cath+66RnWuoS0REi0PY39BYJLMy8+CqR7CRiVWZuS3kF BNPyDx1B8EwPcvVv4ERYsTTLWmUb7i2o58x8ILhRYqyTz5Uu59asmfGqKV7kv+oZ XmmEvn3Y1RTvZ9Em6+FcZCzIQQCx/fsxiKbW+TRwAeolqx5QC4ge6aSUB3THTeXB ZSaylq4nlyfHmTZn1b7s+o6zjXnSznqPNsf7It5iIfE/JolEeYz+hoD8gPhdRTpu 4mSq7W0FnFQCzmbS1Y0zfZ7xMIpTYRLXDuRQ5eSO4+umlYMS3AaGdOhQUDs2PBVB SLxOgCjhcBwfmpEKgrjprZd+NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdfyx3c 8PEB89C+b6OEJtTMx3krMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByvq8dih92XresSITOA/ky/EdlFjioiC6j7iPR7RaGrkUkcEyA/8pm I+ywWH90tOdv4i1mQqoKWJQ5z8YbcQIoYWAgJEIFTh+Y/upQgOGnOL0dW++UnH/S EJewoON34bBhD0LEdCiLzrSXgpJvuQVJ5ZfAMvSVjsOqY70HAnzWUBwRN6eNqMyy RSRRP6+ekD0lctKHeTky9jgIsj7l8Akve9CYU9rXw93UVqK57H69RwOwXgMamx9W kKZ5AMLDLENcwheuM3otX1cdLMK5rWFDJyILUodddaxrI17iZhUsyh3hz/xPgZ6j ycU/8NPNlpdbwfF3XMKM7K0256zKpGAl -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:13 2025 by rpki-client