$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json) Hash identifier: LIkdH4YQIJt9GCpE9DFHsVjV+xXw/QYbe+JGeEdCpdk= Subject key identifier: B9:47:2A:73:C8:3D:F7:95:CA:85:B3:F8:20:51:84:2A:DE:3D:2C:AC Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft Manifest number: 05CE Signing time: Sun 19 Oct 2025 00:48:22 +0000 Manifest this update: Sun 19 Oct 2025 00:48:22 +0000 Manifest next update: Sun 26 Oct 2025 00:48:22 +0000 Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: vnf6gPBqtxNGj+kY+iEWKDahWYk30JqufYaTcBRosRQ=) 2: 774D2C8A895911F082979238C4F9AE02.roa (hash: MNGV40v8PxwIzKP/YcpeveDanhXceoP8ufn50nFL4nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: Oct 19 00:48:22 2025 GMT Not After : Oct 26 00:48:22 2025 GMT Subject: CN=68f43556-51b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:11:91:40:2c:e3:e1:19:a5:06:6f:25:18: c5:38:6c:81:6a:03:a8:8c:11:a0:d1:2e:37:8e:e1: 7d:78:ce:af:6c:a1:27:4f:c9:e0:58:07:b4:a6:b8: f9:89:9b:f6:1a:27:82:fd:1b:7e:8a:e1:bb:ad:a9: fe:a0:3d:33:a7:05:50:4c:6a:2e:41:4f:4d:45:69: a8:a0:d1:0b:97:e6:6f:b5:09:9f:5d:80:f8:f4:5e: 18:7d:1b:00:ef:45:20:69:21:ac:0b:9d:30:ea:ed: e9:f7:93:51:61:4c:9f:b7:b8:97:7f:a5:41:0e:c1: 27:de:90:f1:12:46:32:88:6b:c6:ec:d0:8f:b6:b2: 66:3d:fc:5f:94:78:e1:5c:9c:ef:db:f3:41:3b:a7: a0:76:d6:f4:43:1e:6a:2f:29:b5:61:5e:4e:0a:38: e9:f6:28:e8:a5:14:48:2b:f7:15:05:bc:f9:ba:6e: 06:33:a0:ba:8c:62:b0:fc:bf:34:4e:a7:8e:90:ec: 23:59:15:de:c7:10:0d:ac:66:8a:37:3a:67:93:77: 46:64:32:2a:36:e9:2e:7e:14:52:69:51:5e:4b:d8: cd:f2:48:ea:f8:45:67:18:07:fe:28:26:a3:54:8b: 34:84:4f:65:53:de:81:0c:49:d7:fe:d8:a9:a1:7f: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:2A:73:C8:3D:F7:95:CA:85:B3:F8:20:51:84:2A:DE:3D:2C:AC X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:02:53:cd:a2:88:e6:27:02:34:a3:b5:08:27:c3:40:39:d1: bc:73:82:d6:ac:07:d0:89:64:63:7b:1f:09:65:d6:37:6a:31: 02:85:43:cc:c5:71:c3:87:0a:85:af:fe:6e:f2:9b:39:7d:5f: d3:21:19:ed:92:70:84:63:9d:2e:d3:f5:5c:89:59:b3:87:2f: bd:a8:b6:95:0c:eb:b6:12:9e:c7:6c:6b:d9:04:82:5e:b2:cf: 8a:aa:56:3b:f2:bd:50:80:c2:f5:bc:c9:ac:56:91:d8:83:d7: 75:42:87:59:40:aa:fd:3c:51:05:8c:69:64:de:8b:8e:54:79: 8d:1e:cf:cb:63:53:5a:14:3c:94:d0:e3:c1:8b:f9:c6:5b:1b: c9:10:1e:3a:44:15:04:78:50:cc:1e:e7:59:c4:6e:0d:b1:c0: 96:46:b5:70:b3:28:22:b3:e9:0f:a6:3f:92:2a:98:fa:5c:b3: 2c:c4:ce:df:26:64:be:07:4c:c0:be:93:5b:27:40:89:c7:e7: 86:18:c0:5a:4e:bf:2d:31:dc:ba:9b:db:06:e4:ac:92:fb:b8: c6:7a:a6:d7:6f:2c:50:93:09:c1:f2:e6:fe:18:32:3f:f7:60: 7b:d2:2c:51:a0:28:4b:b0:79:0b:b8:be:9e:5a:06:9b:1c:20: ac:61:8c:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTBBRjExMC8GA1UEBRMoNjhFRTg1RjRDMjdENEJBOTNFMEQ2QjZBM0U5MjY1OUUx MEQ2ODk1RTAeFw0yNTEwMTkwMDQ4MjJaFw0yNTEwMjYwMDQ4MjJaMBgxFjAUBgNV BAMTDTY4ZjQzNTU2LTUxYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ3BGRQCzj4RmlBm8lGMU4bIFqA6iMEaDRLjeO4X14zq9soSdPyeBYB7SmuPmJ m/YaJ4L9G36K4butqf6gPTOnBVBMai5BT01Faaig0QuX5m+1CZ9dgPj0Xhh9GwDv RSBpIawLnTDq7en3k1FhTJ+3uJd/pUEOwSfekPESRjKIa8bs0I+2smY9/F+UeOFc nO/b80E7p6B21vRDHmovKbVhXk4KOOn2KOilFEgr9xUFvPm6bgYzoLqMYrD8vzRO p46Q7CNZFd7HEA2sZoo3OmeTd0ZkMio26S5+FFJpUV5L2M3ySOr4RWcYB/4oJqNU izSET2VT3oEMSdf+2Kmhf/tjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuUcqc8g9 95XKhbP4IFGEKt49LKwwHwYDVR0jBBgwFoAUaO6F9MJ9S6k+DWtqPpJlnhDWiV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMEFGL0ZENjVCNEQ4RTRB NjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU82RjlNSjlTNmstRFd0cVBwSmxuaERXaVY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MEFGL0ZENjVCNEQ4RTRBNjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZr LURXdHFQcEpsbmhEV2lWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4CU82iiOYnAjSjtQgnw0A50bxzgtasB9CJZGN7Hwll1jdqMQKFQ8zF ccOHCoWv/m7ymzl9X9MhGe2ScIRjnS7T9VyJWbOHL72otpUM67YSnsdsa9kEgl6y z4qqVjvyvVCAwvW8yaxWkdiD13VCh1lAqv08UQWMaWTei45UeY0ez8tjU1oUPJTQ 48GL+cZbG8kQHjpEFQR4UMwe51nEbg2xwJZGtXCzKCKz6Q+mP5IqmPpcsyzEzt8m ZL4HTMC+k1snQInH54YYwFpOvy0x3Lqb2wbkrJL7uMZ6ptdvLFCTCcHy5v4YMj/3 YHvSLFGgKEuweQu4vp5aBpscIKxhjHU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:00:53 2025 by rpki-client