$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: x0KslM8+nE4gvIjZQoqJ/0h3kBGHGP271FBINJCJVRk= Subject key identifier: 43:0A:CC:B8:15:98:D2:E7:B7:D3:67:7A:DF:84:94:1F:17:DE:5B:59 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 053C Signing time: Sun 19 Oct 2025 01:14:25 +0000 Manifest this update: Sun 19 Oct 2025 01:14:24 +0000 Manifest next update: Sun 26 Oct 2025 01:14:24 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: DbUCaC0Orrpt3/Qovk+oPUr4sbNGqYJ8qBJ8Q/v6pMU=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Oct 19 01:14:24 2025 GMT Not After : Oct 26 01:14:24 2025 GMT Subject: CN=68f43b71-dcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:5d:3f:23:73:16:9d:80:c0:79:28:17:4a: fa:48:86:eb:5f:78:8a:c7:f4:b7:f3:42:0f:54:3a: 7d:0d:d5:78:a9:0d:fc:b4:19:c7:f1:7f:30:a8:4d: 4d:c8:a2:4b:ca:a3:d2:39:6b:f7:12:cc:06:20:00: 11:51:4b:9b:ec:28:36:f5:50:9b:b0:6a:c3:12:0d: 60:e3:b6:ae:05:d9:9f:64:54:12:12:c9:b7:01:48: 2c:53:e2:73:25:73:bb:ef:c6:47:3a:99:70:67:f0: b2:6f:97:1d:4d:fd:0f:bc:ac:db:79:00:fc:96:05: 83:ac:66:32:66:64:2b:9c:e8:ba:dc:e8:83:ce:e4: fb:82:30:48:ea:1d:96:4a:2f:53:26:71:ed:dd:b9: c4:c6:f4:2f:85:af:a9:55:42:f0:f7:8c:e3:8c:8d: ed:34:3b:d0:cb:e7:2f:26:fc:03:ae:0c:45:65:87: 80:3d:8b:4b:b9:04:88:83:ff:bd:3a:82:d1:76:f0: b0:f0:7c:31:ab:dc:53:fc:f7:6a:e1:da:33:c1:65: 79:3b:fd:dd:ae:0f:b3:2c:ea:e3:01:b7:7c:3b:09: 29:9d:c2:26:51:26:d4:ae:4f:b0:c1:ed:b2:55:95: 9b:3c:81:2f:91:45:5d:90:93:00:f1:e9:9e:5e:43: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0A:CC:B8:15:98:D2:E7:B7:D3:67:7A:DF:84:94:1F:17:DE:5B:59 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e7:3c:95:85:4a:a1:ac:b2:1b:e1:a2:31:f9:73:88:28:b4: f9:5c:25:6c:28:e5:df:fb:93:27:70:c9:87:e4:8c:37:f2:21: b6:33:b1:8b:53:c5:6e:88:13:02:bb:73:3c:1a:05:17:6c:c3: f3:90:37:35:2a:5a:4e:9d:e3:6c:1b:3e:7d:b6:de:3b:63:39: b5:d9:9c:2d:a8:ee:ff:be:4d:93:7a:9e:be:d7:af:a0:77:21: 15:f5:ef:70:8a:0e:20:9a:6c:f9:ae:a7:16:83:23:72:3a:2f: c3:1d:31:df:6b:12:aa:7d:a8:20:df:9a:98:ea:64:c2:e5:5b: 27:ea:4f:96:30:b2:e9:b7:9a:b7:b7:2f:9a:38:1d:f9:70:4b: 0a:3b:20:db:b5:90:95:d4:33:d8:43:db:38:b2:da:bd:e8:51: cd:bd:c2:b9:ca:51:5e:f9:20:fb:fa:6d:e0:4c:98:bc:6f:b1: 72:87:90:64:31:47:04:f9:56:e2:8d:47:00:8e:bc:e5:5b:c3: 9a:25:af:d5:3e:ae:7d:d2:7b:12:71:8e:f5:8a:c2:6d:b1:72: 1a:6e:58:d2:23:07:86:50:9e:98:4f:a4:a3:2e:13:36:48:53: 58:8b:98:59:5d:7e:73:31:78:62:ab:85:b7:b8:fa:12:f5:df: 4d:cc:80:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMDE5MDExNDI0WhcNMjUxMDI2MDExNDI0WjAYMRYwFAYD VQQDEw02OGY0M2I3MS1kY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAtdPyNzFp2AwHkoF0r6SIbrX3iKx/S380IPVDp9DdV4qQ38tBnH8X8wqE1N yKJLyqPSOWv3EswGIAARUUub7Cg29VCbsGrDEg1g47auBdmfZFQSEsm3AUgsU+Jz JXO778ZHOplwZ/Cyb5cdTf0PvKzbeQD8lgWDrGYyZmQrnOi63OiDzuT7gjBI6h2W Si9TJnHt3bnExvQvha+pVULw94zjjI3tNDvQy+cvJvwDrgxFZYeAPYtLuQSIg/+9 OoLRdvCw8Hwxq9xT/Pdq4dozwWV5O/3drg+zLOrjAbd8OwkpncImUSbUrk+wwe2y VZWbPIEvkUVdkJMA8emeXkO7IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMKzLgV mNLnt9Nnet+ElB8X3ltZMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH5zyVhUqhrLIb4aIx+XOIKLT5XCVsKOXf+5MncMmH5Iw38iG2M7GL U8VuiBMCu3M8GgUXbMPzkDc1KlpOneNsGz59tt47Yzm12ZwtqO7/vk2Tep6+16+g dyEV9e9wig4gmmz5rqcWgyNyOi/DHTHfaxKqfagg35qY6mTC5Vsn6k+WMLLpt5q3 ty+aOB35cEsKOyDbtZCV1DPYQ9s4stq96FHNvcK5ylFe+SD7+m3gTJi8b7Fyh5Bk MUcE+VbijUcAjrzlW8OaJa/VPq590nsScY71isJtsXIabljSIweGUJ6YT6SjLhM2 SFNYi5hZXX5zMXhiq4W3uPoS9d9NzICE -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:30 2025 by rpki-client