$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: maCUBQ9MJ+ffHVBr22eaGwWj/+W08WUJSKHowUDnsRo= Subject key identifier: 2A:60:8B:E0:85:08:B7:4D:D4:61:E5:BD:31:22:AA:39:3E:CF:31:C8 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C7A Signing time: Sat 18 Oct 2025 19:14:07 +0000 Manifest this update: Sat 18 Oct 2025 19:14:06 +0000 Manifest next update: Sat 25 Oct 2025 19:14:06 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: KgCHHKsyOHpEVM75LmD2FDpDE8Fs30DQjOG0sm9iSSE=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: KRpOoM5OBYozHGqs3tAj+O3jIxT+88DuqXNJ+j9YBFM=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: UK4U60eiGuCuztGWWVANU0DD3PkFQsjwpFntP06fM3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Oct 18 19:14:06 2025 GMT Not After : Oct 25 19:14:06 2025 GMT Subject: CN=68f3e6ff-b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:e6:6b:0a:9c:c3:25:fa:e6:2a:24:ba:c3: f8:a0:4c:b2:40:b3:13:a6:ef:29:d8:d3:9e:de:ac: a7:28:0c:6e:04:82:a8:23:e7:05:8a:23:2e:79:d7: 22:e3:9a:56:81:d2:b8:3d:c7:bc:1b:ec:1a:b0:22: 66:ab:d7:85:d6:f1:0e:c9:ee:3d:91:d5:dc:3e:cd: f3:9d:b8:53:79:b0:6f:1e:5a:26:79:fe:d0:20:51: c0:4e:51:62:19:32:0b:bb:66:37:4c:70:e9:ec:c8: 33:31:2a:f0:41:63:77:2c:5d:f7:f6:aa:ab:0c:e0: fe:41:ff:ed:c1:16:69:ad:fb:f9:28:1e:9e:c7:5a: 21:1b:48:ed:45:4b:8a:e2:a9:bc:5c:6b:8a:56:dc: 5c:b3:0a:57:1f:f5:da:76:e0:cd:4a:c5:49:83:e3: 43:02:f1:37:49:f8:df:50:8a:98:42:fe:05:7f:f6: e6:e1:ba:8b:07:15:33:06:2e:4d:f9:35:ca:62:da: 64:f0:a3:2c:09:de:3b:3c:18:30:21:4f:1c:70:0c: 38:62:eb:03:52:26:07:18:98:a2:e1:9f:d0:54:a9: 05:bb:3d:3b:50:5a:46:47:39:62:62:c6:b1:49:68: 7d:cb:38:18:0c:1e:4f:1e:6c:38:26:cc:9a:db:49: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:60:8B:E0:85:08:B7:4D:D4:61:E5:BD:31:22:AA:39:3E:CF:31:C8 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:95:c4:95:0e:e7:e3:2e:87:78:7e:22:48:9e:05:04:92:2b: 72:f3:35:10:ea:04:8a:d6:91:e2:42:f6:eb:bd:26:ca:8a:c5: b5:c0:5a:87:31:98:aa:24:06:c2:b4:21:7d:0b:b7:64:5f:68: fe:45:27:71:42:01:6e:13:c9:1a:44:71:75:e1:a7:c4:b1:e3: af:43:74:1b:5f:18:f2:24:f2:ab:b0:18:bb:7d:57:41:34:da: a8:25:a1:e8:23:7f:49:0d:28:a3:7c:78:1c:70:2a:99:41:e1: 9c:b0:27:43:13:b3:16:e3:76:ea:f6:02:96:fb:93:98:98:b3: 31:ea:8c:72:bb:49:52:ec:46:f5:6a:0b:eb:76:36:38:e5:3f: c8:6e:3a:b4:0d:d0:67:31:55:fc:21:77:25:3f:cc:b9:c0:80: bc:65:f3:6e:0a:ba:91:95:57:75:fa:76:bb:20:8d:fb:53:69: 59:8f:a9:aa:74:52:37:c6:d3:90:71:77:95:2d:7b:4f:99:2a: 40:2b:ac:5d:23:f7:9f:02:7f:2b:d7:06:12:e2:ff:cd:b5:c6: 9e:4f:23:d7:25:2a:c6:00:10:26:c6:f3:8f:2f:ea:ce:ef:5d: f6:34:69:86:e3:45:8d:d8:dc:ee:0e:08:d2:1e:4f:99:f4:42: 8d:2a:cd:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUxMDE4MTkxNDA2WhcNMjUxMDI1MTkxNDA2WjAYMRYwFAYD VQQDEw02OGYzZTZmZi1iMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3X3mawqcwyX65iokusP4oEyyQLMTpu8p2NOe3qynKAxuBIKoI+cFiiMuedci 45pWgdK4Pce8G+wasCJmq9eF1vEOye49kdXcPs3znbhTebBvHlomef7QIFHATlFi GTILu2Y3THDp7MgzMSrwQWN3LF339qqrDOD+Qf/twRZprfv5KB6ex1ohG0jtRUuK 4qm8XGuKVtxcswpXH/XaduDNSsVJg+NDAvE3SfjfUIqYQv4Ff/bm4bqLBxUzBi5N +TXKYtpk8KMsCd47PBgwIU8ccAw4YusDUiYHGJii4Z/QVKkFuz07UFpGRzliYsax SWh9yzgYDB5PHmw4Jsya20myDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpgi+CF CLdN1GHlvTEiqjk+zzHIMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCglcSVDufjLod4fiJIngUEkity8zUQ6gSK1pHiQvbrvSbKisW1wFqH MZiqJAbCtCF9C7dkX2j+RSdxQgFuE8kaRHF14afEseOvQ3QbXxjyJPKrsBi7fVdB NNqoJaHoI39JDSijfHgccCqZQeGcsCdDE7MW43bq9gKW+5OYmLMx6oxyu0lS7Eb1 agvrdjY45T/Ibjq0DdBnMVX8IXclP8y5wIC8ZfNuCrqRlVd1+na7II37U2lZj6mq dFI3xtOQcXeVLXtPmSpAK6xdI/efAn8r1wYS4v/NtcaeTyPXJSrGABAmxvOPL+rO 7132NGmG40WN2NzuDgjSHk+Z9EKNKs2w -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:23 2025 by rpki-client