$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: a6+Gq5wkR5c8BiNskfY1oqsdgUHAfRghmTNX89L6s20= Subject key identifier: A6:24:B2:E3:A4:74:9E:80:9D:23:D1:25:74:05:B1:5A:B3:1A:B1:CF Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 8F Signing time: Sun 19 Oct 2025 09:52:35 +0000 Manifest this update: Sun 19 Oct 2025 09:52:34 +0000 Manifest next update: Sun 26 Oct 2025 09:52:34 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: zU6KuLvZYGCTP3kYuA9eVKqoygtIWZqdJXXfoiuepnE=) 2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=) 3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: Oct 19 09:52:34 2025 GMT Not After : Oct 26 09:52:34 2025 GMT Subject: CN=68f4b4e3-df79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:fb:ab:1b:e4:12:45:54:3d:be:4b:16:1d: 40:07:93:aa:fe:ba:30:6f:84:86:21:6e:df:f9:ac: b2:d3:09:56:66:7c:e0:45:66:98:ca:1b:04:f9:89: 70:55:cf:3a:a0:ff:da:ff:da:60:54:65:76:81:2a: fb:04:8c:46:77:f7:6e:78:03:28:c9:52:7e:2f:eb: ca:14:6a:5c:be:58:52:29:06:f2:ba:29:83:f4:3a: 54:f5:09:ec:cb:69:d3:31:b7:09:7c:4a:ad:13:9f: 86:88:6d:c3:aa:60:41:12:c2:30:83:c8:47:2e:87: bd:30:28:cc:e4:b8:6d:79:10:fe:d7:2d:8c:f5:9c: 82:5e:28:54:f7:fa:5d:17:cb:20:ff:4a:b4:25:14: d7:86:33:5f:76:e3:f2:be:b0:16:f3:ce:19:10:dc: b9:c6:d4:fb:6a:2a:98:b7:e6:8e:62:7c:52:22:27: b1:15:0e:ea:2f:73:31:44:53:5d:3a:97:d1:89:80: d4:04:d4:d5:87:d6:67:e2:6c:be:7d:62:1b:ee:44: e9:70:d4:2e:9b:2d:c3:84:c1:9f:e7:9c:41:4d:bf: c4:e5:f4:b6:11:75:49:ee:89:eb:35:04:d7:e3:80: 27:c4:3e:2a:bb:52:42:f0:b3:1c:97:02:e6:c9:ba: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:24:B2:E3:A4:74:9E:80:9D:23:D1:25:74:05:B1:5A:B3:1A:B1:CF X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f2:5c:b2:f1:ee:48:4d:6a:0e:d2:1c:72:00:61:66:ba:ec: 21:51:bd:b4:ed:02:d3:ed:6f:31:81:d5:a5:35:2c:c4:db:5a: 75:06:eb:57:cb:c9:ba:75:e8:53:ce:88:84:cf:71:9d:4d:ab: f5:7d:8d:91:e6:fe:0d:fd:3d:2e:e2:5d:10:e3:7a:34:79:0b: 9b:7b:18:20:59:2e:32:9a:ce:fd:0f:a0:5d:ed:dd:ea:23:3b: ef:fc:7d:b2:64:93:90:c6:17:d7:24:9b:46:64:6c:22:f5:de: 11:4c:1a:4c:20:f0:fb:25:e5:75:ce:78:4e:8d:58:5b:7b:6c: ab:d9:ee:db:39:28:d3:0a:a7:cd:80:42:80:b7:4a:f9:f3:96: fd:34:e2:ce:9e:f6:57:93:e0:06:ee:37:30:85:00:e0:61:05: eb:9f:ed:3d:bb:0a:ef:ec:49:8b:cd:95:fd:40:f5:d5:79:bf: bb:cd:2a:06:d1:56:bf:14:c6:a5:21:99:b9:12:80:63:71:1c: 68:31:6d:8f:f0:ab:11:b2:4a:4f:32:6b:3e:00:ae:96:34:76: fb:f5:99:c3:c2:3e:c7:35:50:8b:d3:eb:09:8e:d7:b2:85:43: 5f:9f:16:30:9b:48:ac:4d:9b:c9:4b:40:03:e2:ea:34:c4:95: 99:b5:ea:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRFM0QxMTAvBgNVBAUTKDY5MTgxQ0Y0NTFGOEIzRkVDNjRGQzgyOThCNTIyRDQ4 OENBNUM5RTYwHhcNMjUxMDE5MDk1MjM0WhcNMjUxMDI2MDk1MjM0WjAYMRYwFAYD VQQDEw02OGY0YjRlMy1kZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma/7qxvkEkVUPb5LFh1AB5Oq/rowb4SGIW7f+ayy0wlWZnzgRWaYyhsE+Ylw Vc86oP/a/9pgVGV2gSr7BIxGd/dueAMoyVJ+L+vKFGpcvlhSKQbyuimD9DpU9Qns y2nTMbcJfEqtE5+GiG3DqmBBEsIwg8hHLoe9MCjM5LhteRD+1y2M9ZyCXihU9/pd F8sg/0q0JRTXhjNfduPyvrAW884ZENy5xtT7aiqYt+aOYnxSIiexFQ7qL3MxRFNd OpfRiYDUBNTVh9Zn4my+fWIb7kTpcNQumy3DhMGf55xBTb/E5fS2EXVJ7onrNQTX 44AnxD4qu1JC8LMclwLmybqqKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYksuOk dJ6AnSPRJXQFsVqzGrHPMB8GA1UdIwQYMBaAFGkYHPRR+LP+xk/IKYtSLUiMpcnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REUzRC9GRDFFNDU1MERF NjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNfN0dUOGdwaTFJdFNJeWx5 ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHllWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNf N0dUOGdwaTFJdFNJeWx5ZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn8lyy8e5ITWoO0hxyAGFmuuwhUb207QLT7W8xgdWlNSzE21p1ButX y8m6dehTzoiEz3GdTav1fY2R5v4N/T0u4l0Q43o0eQubexggWS4yms79D6Bd7d3q Izvv/H2yZJOQxhfXJJtGZGwi9d4RTBpMIPD7JeV1znhOjVhbe2yr2e7bOSjTCqfN gEKAt0r585b9NOLOnvZXk+AG7jcwhQDgYQXrn+09uwrv7EmLzZX9QPXVeb+7zSoG 0Va/FMalIZm5EoBjcRxoMW2P8KsRskpPMms+AK6WNHb79ZnDwj7HNVCL0+sJjtey hUNfnxYwm0isTZvJS0AD4uo0xJWZteoS -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:08 2025 by rpki-client