$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: f3bchiCkjnNDZJOsrj53zMpX9+14UWlLE2Et4zij/1s= Subject key identifier: 6B:01:4E:35:61:3E:71:34:9A:13:6A:2D:71:FA:D4:CB:85:38:94:09 Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0CDA Signing time: Sat 18 Oct 2025 18:51:44 +0000 Manifest this update: Sat 18 Oct 2025 18:51:44 +0000 Manifest next update: Sat 25 Oct 2025 18:51:44 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: YgXPU8mclM0eDArcdVGSqNVre8iL1CoB6I+yH/PIPLA=) 2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=) 3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: Oct 18 18:51:44 2025 GMT Not After : Oct 25 18:51:44 2025 GMT Subject: CN=68f3e1c0-05e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cb:6b:ed:b4:d6:77:57:8a:16:d8:ad:2c:ee: ff:9b:5a:7d:e8:c1:c5:8a:7f:0d:03:94:1b:77:79: 3a:aa:91:00:bb:dd:7c:27:70:c6:7b:aa:52:54:bc: 08:ea:58:90:0a:de:e4:81:34:c1:a8:31:6c:20:1a: 2c:31:77:a7:ae:ce:9f:3b:ca:bc:68:f8:68:06:00: ce:39:3a:e7:7c:1a:00:53:ad:ce:b5:df:8d:4f:5b: 11:86:bf:23:3d:4a:1e:a8:63:cc:25:14:79:1f:28: 1a:e8:1b:d0:93:45:88:11:ba:8e:63:ab:03:d5:79: ac:95:d5:82:dc:6e:a8:df:e6:9a:98:1d:ea:3a:36: e2:ba:70:1e:f9:9e:b6:20:38:f3:b0:7e:d5:14:3b: 9a:73:5e:ef:f1:55:3d:b8:2a:30:5e:e0:b2:5e:ce: 20:49:cd:e9:42:ff:6c:44:9f:76:2c:95:60:0f:b2: 1c:8c:d4:c4:85:86:e7:30:14:47:b3:09:79:ca:0e: e6:b0:fd:c2:7f:13:7d:f3:29:9b:65:08:93:99:f2: 0c:dc:ae:6d:e9:cb:a4:ca:e5:9d:09:a0:be:0d:81: cc:80:ae:19:bb:9c:b6:e4:64:9f:af:ed:a5:82:b7: 5e:68:4f:4c:b9:9b:d1:00:e4:6f:59:2d:ae:28:20: 5c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:01:4E:35:61:3E:71:34:9A:13:6A:2D:71:FA:D4:CB:85:38:94:09 X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d9:2d:c3:b6:b5:dd:3b:89:07:bd:72:44:f2:40:16:f0:cf: d7:a3:b9:f9:4a:f0:2b:3f:61:f9:ce:5a:72:a0:0f:eb:81:2d: ee:ec:bb:cf:80:6a:04:a6:a6:3b:8f:86:fd:c0:41:c6:26:3e: 58:67:5f:4a:5b:dd:bd:45:3e:cc:af:b3:ac:40:fb:88:27:92: 99:ae:e4:45:8e:96:f9:7b:84:04:2d:15:ff:1d:e0:ab:ed:33: ea:7d:0c:57:3f:c7:db:e4:1c:7d:19:27:14:c0:ea:35:44:55: e5:95:24:d3:ea:3f:83:d1:d9:2b:00:99:b0:b3:fd:35:d4:2f: c2:ba:7c:44:e5:12:16:41:fd:49:3d:1f:48:a0:63:b5:f9:74: 6d:00:d8:e5:d7:03:1d:2d:64:8b:e7:a8:d6:69:96:6b:6f:1b: dd:3a:03:d7:af:df:67:be:2c:17:36:b1:21:8d:4f:89:4d:16: 7b:fe:85:8e:f8:21:45:b2:54:c7:26:2b:65:50:04:9a:25:e8: e9:4e:b8:5c:60:e5:d9:0a:c4:18:a2:ad:87:7d:9a:1c:7e:b2: 76:f7:bb:97:de:20:5d:32:54:34:63:f3:6e:90:d7:c7:67:f1: 28:bb:44:3a:82:b6:7c:63:76:d0:69:8e:b2:e6:94:42:a5:ee: c1:ac:b5:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjUxMDE4MTg1MTQ0WhcNMjUxMDI1MTg1MTQ0WjAYMRYwFAYD VQQDEw02OGYzZTFjMC0wNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98tr7bTWd1eKFtitLO7/m1p96MHFin8NA5Qbd3k6qpEAu918J3DGe6pSVLwI 6liQCt7kgTTBqDFsIBosMXenrs6fO8q8aPhoBgDOOTrnfBoAU63Otd+NT1sRhr8j PUoeqGPMJRR5Hyga6BvQk0WIEbqOY6sD1XmsldWC3G6o3+aamB3qOjbiunAe+Z62 IDjzsH7VFDuac17v8VU9uCowXuCyXs4gSc3pQv9sRJ92LJVgD7IcjNTEhYbnMBRH swl5yg7msP3CfxN98ymbZQiTmfIM3K5t6cukyuWdCaC+DYHMgK4Zu5y25GSfr+2l grdeaE9MuZvRAORvWS2uKCBcYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsBTjVh PnE0mhNqLXH61MuFOJQJMB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV2S3DtrXdO4kHvXJE8kAW8M/Xo7n5SvArP2H5zlpyoA/rgS3u7LvP gGoEpqY7j4b9wEHGJj5YZ19KW929RT7Mr7OsQPuIJ5KZruRFjpb5e4QELRX/HeCr 7TPqfQxXP8fb5Bx9GScUwOo1RFXllSTT6j+D0dkrAJmws/011C/CunxE5RIWQf1J PR9IoGO1+XRtANjl1wMdLWSL56jWaZZrbxvdOgPXr99nviwXNrEhjU+JTRZ7/oWO +CFFslTHJitlUASaJejpTrhcYOXZCsQYoq2HfZocfrJ297uX3iBdMlQ0Y/NukNfH Z/Eou0Q6grZ8Y3bQaY6y5pRCpe7BrLU7 -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:25 2025 by rpki-client