$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: tyW1r+1DUJkwrqnefBs/4NSLmXTDxv3N5/+hcI3fnX8= Subject key identifier: A6:19:7D:9F:C1:0E:E4:BC:D4:D8:EE:E4:A8:1E:F3:5B:50:D1:99:A5 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: 0124 Signing time: Sun 19 Oct 2025 07:37:09 +0000 Manifest this update: Sun 19 Oct 2025 07:37:08 +0000 Manifest next update: Sun 26 Oct 2025 07:37:08 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: hsXu1jKewNgbQAISeEoGTB5XcYh3+HNpG7d22xDsDmk=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: 23z4JEUFNko8Hv77YRE2junsGcE7MgL4d2UYU11q19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Oct 19 07:37:08 2025 GMT Not After : Oct 26 07:37:08 2025 GMT Subject: CN=68f49524-4679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:c5:c0:8d:7a:a6:8e:c4:5e:67:24:ed:c2: 70:74:7a:45:5f:d4:c2:60:75:83:d7:33:5d:5b:af: 0b:1c:a9:3b:21:8d:2f:18:f5:78:a5:57:12:95:08: 46:4f:af:fb:9f:9b:10:ec:53:f5:ce:ed:39:1c:7f: 69:26:86:a1:ce:32:94:80:6a:a3:df:44:db:d2:17: 03:e5:63:6c:bf:3d:a7:4b:49:7a:a0:08:ea:af:7d: 68:00:dc:96:88:fa:65:3f:63:df:5c:3d:2a:61:e4: 6d:42:ce:a6:17:3a:d1:e9:ea:c9:fa:9f:62:d0:39: c4:84:4e:37:27:19:95:28:b8:6a:89:1d:eb:b1:3a: 35:3f:27:ee:30:3d:eb:d0:ab:df:c4:13:66:bb:04: 85:39:b3:b8:10:29:63:b6:9f:80:7f:6c:a2:60:f2: ab:5a:00:e7:f2:39:c4:7f:39:90:9b:eb:d2:f8:d6: 0d:86:c4:f4:e8:e3:92:9c:fa:bb:54:07:99:aa:00: 4e:a2:69:7c:b8:6a:58:0b:a4:49:79:79:db:10:8c: 81:3a:e3:8e:c1:58:45:cf:0c:c1:30:0c:6d:65:7c: 78:b9:3f:0f:2c:8a:4d:ef:6a:be:88:a6:b8:33:dd: 0e:c4:31:b8:b0:ad:75:22:8d:5c:ac:f4:46:29:08: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:19:7D:9F:C1:0E:E4:BC:D4:D8:EE:E4:A8:1E:F3:5B:50:D1:99:A5 X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a7:54:59:d6:bc:b4:7e:c0:6e:77:12:8a:65:d0:2f:35:9b: fd:87:3f:15:d1:78:d1:93:67:4d:29:07:fc:84:bf:18:65:5a: 7d:d3:14:c5:ee:e3:cb:87:48:53:41:a5:e9:9f:f7:87:de:32: da:87:ff:f8:21:41:f6:e7:ea:63:0c:79:0e:ac:83:6e:e6:4c: b7:59:00:fe:9d:39:a0:35:d1:69:59:6d:55:25:65:e4:66:83: bb:f3:83:b7:de:3b:9a:c2:c2:6f:fb:ce:5b:f9:4e:cd:4a:e5: 44:1e:77:b3:2c:99:c5:bd:ac:e2:d4:ce:dc:76:b4:c0:14:7b: 47:5c:c4:df:2f:b4:5a:77:28:5f:6c:5a:3c:37:3c:a9:2a:ac: 27:f2:21:34:df:db:7f:e8:7d:5f:3c:8d:a3:fa:8e:fb:d3:c8: 6c:00:f4:ff:c8:d2:d7:28:04:66:ac:10:0d:d7:2c:7b:49:68: cc:8d:7d:c6:60:57:5f:37:09:32:f6:75:ee:74:73:2c:82:73: c4:b8:62:79:4d:c3:f9:ae:56:0a:79:d8:98:33:c5:89:d5:7e: eb:ad:d1:41:bb:0c:9b:b2:c5:05:70:8b:f8:08:e2:b9:43:82: 71:8e:14:78:0b:b3:06:16:45:b7:c8:c1:e0:5b:7d:3c:d8:7c: 7e:3f:b1:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUxMDE5MDczNzA4WhcNMjUxMDI2MDczNzA4WjAYMRYwFAYD VQQDEw02OGY0OTUyNC00Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3bFwI16po7EXmck7cJwdHpFX9TCYHWD1zNdW68LHKk7IY0vGPV4pVcSlQhG T6/7n5sQ7FP1zu05HH9pJoahzjKUgGqj30Tb0hcD5WNsvz2nS0l6oAjqr31oANyW iPplP2PfXD0qYeRtQs6mFzrR6erJ+p9i0DnEhE43JxmVKLhqiR3rsTo1PyfuMD3r 0KvfxBNmuwSFObO4ECljtp+Af2yiYPKrWgDn8jnEfzmQm+vS+NYNhsT06OOSnPq7 VAeZqgBOoml8uGpYC6RJeXnbEIyBOuOOwVhFzwzBMAxtZXx4uT8PLIpN72q+iKa4 M90OxDG4sK11Io1crPRGKQhQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYZfZ/B DuS81Nju5Kge81tQ0ZmlMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjczQy9DQkQ2MjExQ0Y2NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxL SVJ5bGRtVVdqUGZIeDBjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFp1RZ1ry0fsBudxKKZdAvNZv9hz8V0XjRk2dNKQf8hL8YZVp90xTF 7uPLh0hTQaXpn/eH3jLah//4IUH25+pjDHkOrINu5ky3WQD+nTmgNdFpWW1VJWXk ZoO784O33juawsJv+85b+U7NSuVEHnezLJnFvazi1M7cdrTAFHtHXMTfL7Radyhf bFo8NzypKqwn8iE039t/6H1fPI2j+o7708hsAPT/yNLXKARmrBAN1yx7SWjMjX3G YFdfNwky9nXudHMsgnPEuGJ5TcP5rlYKediYM8WJ1X7rrdFBuwybssUFcIv4COK5 Q4JxjhR4C7MGFkW3yMHgW3082Hx+P7Ew -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:17 2025 by rpki-client