$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: NYE/yrOxW1Z9sTFZ1EIS5f6egfKU8jRwY7blpjux9fo= Subject key identifier: 2C:26:80:FC:71:16:13:15:3E:CE:F6:BE:11:BE:C6:DF:4E:ED:5C:D5 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 14D5 Signing time: Mon 20 Oct 2025 19:07:37 +0000 Manifest this update: Mon 20 Oct 2025 19:07:36 +0000 Manifest next update: Mon 27 Oct 2025 19:07:36 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: 65dBPnZgSUbX1hLRT98tAi4QNhBtln3dDX/we05kOwI=) 2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: pjUqvx9LjqZcGK0IESA4LP1Wg4xMY3NQqlqvkln9QM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: Oct 20 19:07:36 2025 GMT Not After : Oct 27 19:07:36 2025 GMT Subject: CN=68f68879-19d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e0:21:08:c9:0a:f8:68:af:cb:1d:61:df:d9: 4d:b6:1f:cf:9a:d1:62:b2:08:ca:85:77:8f:18:83: 78:c3:79:64:5f:40:6c:af:54:39:89:1f:32:24:a5: 33:b9:4d:58:8f:2c:c3:d1:dd:af:69:c3:c0:6b:33: f5:c4:f9:24:99:c5:7b:80:2a:be:c1:82:46:42:fb: 47:48:38:ab:0b:6d:31:65:31:3f:7c:58:31:a3:89: c7:15:af:9b:53:e5:ce:6e:21:2e:e6:c9:d5:00:da: 81:5c:e7:37:2a:7c:98:2d:41:31:6c:63:af:ed:4d: 0a:b3:97:de:14:bf:66:0c:93:b6:a1:15:47:d4:af: a2:af:40:ed:d3:2e:75:58:30:48:0d:1d:7c:0a:4e: 2b:09:4c:43:f9:88:6e:a9:83:51:f8:35:91:75:b6: 9d:52:3c:39:20:40:7d:25:d3:eb:60:5f:f2:65:9a: 14:1a:4a:72:d1:c2:87:cf:5d:c0:3c:24:04:7c:d4: a5:34:0c:48:73:ef:0a:c4:91:09:be:47:4e:96:81: 4b:34:70:c9:61:cd:d2:3c:71:2e:1c:87:84:94:a6: e2:06:54:74:18:2c:db:02:c9:16:8b:64:5c:62:af: c7:43:59:2b:fd:b4:3f:07:8b:59:8a:c6:65:e5:df: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:26:80:FC:71:16:13:15:3E:CE:F6:BE:11:BE:C6:DF:4E:ED:5C:D5 X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:96:12:3f:1b:b9:88:bd:05:52:e0:9d:57:b7:13:7b:3d:04: cc:2e:8c:34:c5:bd:68:92:e0:63:44:39:83:58:5d:87:c2:ef: 8a:a1:a5:38:79:96:8a:da:aa:85:22:c6:12:40:74:54:49:78: f1:b8:f6:c6:ee:33:66:0d:9f:92:a7:64:dc:00:c7:2d:8f:bd: 32:ce:9c:41:d2:69:cc:0a:2b:0d:c0:ae:4d:e3:4c:c9:ad:97: 86:e4:83:bf:97:d3:aa:ab:2f:55:65:1e:8e:81:4d:c1:8c:42: 35:84:bd:71:2d:d8:b1:2c:a7:05:2c:8b:4f:73:e6:9a:6c:29: 8e:07:59:bd:97:89:55:f3:af:58:e0:e5:ec:6e:d7:6f:13:b7: 59:9e:db:94:b8:e6:20:9a:68:50:a3:4e:ed:63:93:00:e6:17: dd:5b:e2:84:81:d2:4f:e2:9e:fb:01:99:a4:6b:b4:d5:a2:ff: e1:25:95:81:b4:d5:81:3b:8c:68:62:b2:0e:e8:3f:2c:07:95: 05:ae:0a:63:4d:0f:fd:77:6f:3f:5d:a3:be:ea:2d:47:15:b3: ab:85:f3:4a:0f:37:f8:0b:e7:93:cd:05:d0:e1:75:e2:f4:b4: 1b:25:4f:22:e4:5a:39:b4:8b:6c:79:43:f0:08:1e:54:d5:6b: 12:fe:5c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUxMDIwMTkwNzM2WhcNMjUxMDI3MTkwNzM2WjAYMRYwFAYD VQQDEw02OGY2ODg3OS0xOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OAhCMkK+Givyx1h39lNth/PmtFisgjKhXePGIN4w3lkX0Bsr1Q5iR8yJKUz uU1YjyzD0d2vacPAazP1xPkkmcV7gCq+wYJGQvtHSDirC20xZTE/fFgxo4nHFa+b U+XObiEu5snVANqBXOc3KnyYLUExbGOv7U0Ks5feFL9mDJO2oRVH1K+ir0Dt0y51 WDBIDR18Ck4rCUxD+YhuqYNR+DWRdbadUjw5IEB9JdPrYF/yZZoUGkpy0cKHz13A PCQEfNSlNAxIc+8KxJEJvkdOloFLNHDJYc3SPHEuHIeElKbiBlR0GCzbAskWi2Rc Yq/HQ1kr/bQ/B4tZisZl5d/MfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwmgPxx FhMVPs72vhG+xt9O7VzVMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAglhI/G7mIvQVS4J1XtxN7PQTMLow0xb1okuBjRDmDWF2Hwu+KoaU4 eZaK2qqFIsYSQHRUSXjxuPbG7jNmDZ+Sp2TcAMctj70yzpxB0mnMCisNwK5N40zJ rZeG5IO/l9Oqqy9VZR6OgU3BjEI1hL1xLdixLKcFLItPc+aabCmOB1m9l4lV869Y 4OXsbtdvE7dZntuUuOYgmmhQo07tY5MA5hfdW+KEgdJP4p77AZmka7TVov/hJZWB tNWBO4xoYrIO6D8sB5UFrgpjTQ/9d28/XaO+6i1HFbOrhfNKDzf4C+eTzQXQ4XXi 9LQbJU8i5Fo5tItseUPwCB5U1WsS/lzN -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:43 2025 by rpki-client