$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: fo1u4LPXQt4BvQNhoDmxesql79jR1mkwlzfiO+jVpmQ= Subject key identifier: 93:DB:8D:41:86:E6:03:E0:B8:77:ED:EE:9E:59:A2:2A:BF:AE:29:8D Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1797 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16F8 Signing time: Mon 20 Oct 2025 16:55:59 +0000 Manifest this update: Mon 20 Oct 2025 16:55:58 +0000 Manifest next update: Mon 27 Oct 2025 16:55:58 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: EmbLO2dxUnW3SrkNGVqjHPQU2u32A0nXSrxWiTbZ3So=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: +7/Vt0FTaK5GWH/3IE+pQmL2wHj4vbU0fzaTx23ZBa4=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 6: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: nhXCTWcJehwPCNY1j5T1uE9/H57zSIf0fsFJ0V9vXtI=) 7: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 8: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6039 (0x1797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Oct 20 16:55:58 2025 GMT Not After : Oct 27 16:55:58 2025 GMT Subject: CN=68f6699e-8978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c7:77:4d:79:e6:f0:28:a3:21:12:fb:95:6c: c4:ed:a5:ca:83:df:b3:cc:45:99:95:c1:bd:d5:42: 5d:7f:1c:f6:03:73:a7:38:52:ca:80:a7:8b:a3:4b: 51:b8:c9:c6:7d:27:00:29:07:b9:26:45:87:7d:74: 66:d3:08:f3:37:bd:56:05:ab:f3:5b:d8:59:c7:36: 4a:98:a8:62:2e:c0:97:98:8e:0a:86:bf:a8:11:01: 2d:6f:10:d3:af:9e:ae:14:74:ad:dd:b4:16:a5:fc: 68:1e:3d:22:be:ed:7b:07:a8:fa:08:fc:c8:e1:e8: 6a:3f:58:98:db:0e:75:3c:fe:5f:89:f5:26:60:96: 47:7e:0f:03:3a:e9:1b:a2:15:7c:dc:fe:56:c0:c2: 6c:c8:0c:e3:46:24:e0:e9:ef:76:f7:2b:01:77:ea: fe:c5:5f:45:f9:44:b9:80:2b:6f:ac:a5:0d:28:a4: 51:c4:9b:02:c9:27:b7:ff:90:e4:55:05:06:de:9b: 01:ec:b8:bc:4a:5f:76:8f:ab:12:ca:4d:a2:44:8e: fd:8d:fd:8c:df:03:78:6d:63:00:fb:8e:89:1a:98: 48:de:78:ce:b9:49:fd:d4:b7:0f:a1:3b:c1:07:ba: 2b:fc:71:37:49:da:00:84:5c:b6:db:59:93:42:8e: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DB:8D:41:86:E6:03:E0:B8:77:ED:EE:9E:59:A2:2A:BF:AE:29:8D X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:45:ff:7d:6e:8f:6c:70:6b:eb:29:89:9e:52:c1:2a:7e:4f: e3:78:dd:00:a7:f7:71:90:6c:5b:64:c8:f5:39:af:93:d8:a5: 7b:eb:59:68:9f:b8:8c:8f:0c:e3:02:8a:34:84:e6:8f:9f:37: 2e:a3:82:d2:cd:f2:85:f9:34:2f:f0:7a:9b:f0:57:6e:2f:c5: 2c:0f:0c:c9:3a:e2:10:92:9d:86:f7:92:d5:70:33:6d:f7:1b: 04:2f:c1:9a:3f:70:fe:4b:29:e4:93:1e:57:29:38:c3:35:56: 9d:7e:62:cb:3e:e4:53:d2:cf:ba:fe:03:07:e7:0b:94:65:7b: 70:de:50:a8:dd:2b:84:06:c8:f6:a1:ae:44:ae:7a:b6:7d:9c: 4c:3a:8a:77:22:63:16:32:ba:5b:6d:74:22:f8:26:5c:23:be: 16:8c:b5:dc:57:43:aa:dc:ae:7e:9d:60:c2:bb:73:cc:50:87: 91:78:01:4d:0c:cc:f5:aa:33:76:24:70:87:5a:c7:69:ac:ea: 48:7f:de:30:a6:01:0a:95:06:c0:f4:40:ad:46:53:6c:c6:f1: 67:29:93:82:a9:4a:c5:bc:b9:02:78:7f:21:0e:0c:0a:1d:32: 14:77:e4:b3:01:76:7e:d3:51:2f:34:b4:0a:79:04:2a:e8:fd: b8:13:6e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUxMDIwMTY1NTU4WhcNMjUxMDI3MTY1NTU4WjAYMRYwFAYD VQQDEw02OGY2Njk5ZS04OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sd3TXnm8CijIRL7lWzE7aXKg9+zzEWZlcG91UJdfxz2A3OnOFLKgKeLo0tR uMnGfScAKQe5JkWHfXRm0wjzN71WBavzW9hZxzZKmKhiLsCXmI4Khr+oEQEtbxDT r56uFHSt3bQWpfxoHj0ivu17B6j6CPzI4ehqP1iY2w51PP5fifUmYJZHfg8DOukb ohV83P5WwMJsyAzjRiTg6e929ysBd+r+xV9F+US5gCtvrKUNKKRRxJsCySe3/5Dk VQUG3psB7Li8Sl92j6sSyk2iRI79jf2M3wN4bWMA+46JGphI3njOuUn91LcPoTvB B7or/HE3SdoAhFy221mTQo7c+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPbjUGG 5gPguHft7p5Zoiq/rimNMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcRf99bo9scGvrKYmeUsEqfk/jeN0Ap/dxkGxbZMj1Oa+T2KV761lo n7iMjwzjAoo0hOaPnzcuo4LSzfKF+TQv8Hqb8FduL8UsDwzJOuIQkp2G95LVcDNt 9xsEL8GaP3D+Synkkx5XKTjDNVadfmLLPuRT0s+6/gMH5wuUZXtw3lCo3SuEBsj2 oa5Ernq2fZxMOop3ImMWMrpbbXQi+CZcI74WjLXcV0Oq3K5+nWDCu3PMUIeReAFN DMz1qjN2JHCHWsdprOpIf94wpgEKlQbA9ECtRlNsxvFnKZOCqUrFvLkCeH8hDgwK HTIUd+SzAXZ+01EvNLQKeQQq6P24E26L -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:23 2025 by rpki-client