$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: Dx7ShPHmg9dipbPFnws47MLTgQ6WnhW3pon1W814h8A= Subject key identifier: 08:D0:0B:31:7E:DD:ED:16:68:E9:3B:33:6B:93:0D:B2:77:AA:EB:73 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0C75 Signing time: Sat 18 Oct 2025 19:14:17 +0000 Manifest this update: Sat 18 Oct 2025 19:14:16 +0000 Manifest next update: Sat 25 Oct 2025 19:14:16 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: uJCFSzSGMVTxT9xF1az73pKRHtFGN35lVkDP5LSO7nI=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: bP4mtdPcC9gJRT9cgoHrxBppsqMyFJRwGR6OCAipZzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Oct 18 19:14:16 2025 GMT Not After : Oct 25 19:14:16 2025 GMT Subject: CN=68f3e708-9303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:8b:50:f8:d5:64:4e:76:9b:4c:d4:a3:ae: 26:28:9a:71:c4:09:89:05:bb:1f:f5:8c:64:c7:ab: 24:95:1f:61:ae:ee:ba:ad:71:03:95:fb:37:1c:0a: 91:0b:9a:d0:8c:cf:75:8e:aa:83:4e:4e:dd:86:b5: 8e:26:57:63:a5:b3:1c:43:d5:28:a8:f8:54:89:57: de:e6:a5:45:06:0d:a2:a6:6a:5e:2a:a5:fa:47:46: 91:d4:cc:e9:dc:4b:ed:9f:96:d0:39:55:6a:b5:79: 4d:cd:f0:2c:db:7a:01:90:9a:81:a2:6f:51:51:bb: 3b:f2:21:27:85:45:77:23:e8:6e:b7:e9:2b:47:1c: 52:b6:6d:30:ff:6c:e1:85:3d:b3:07:90:ef:08:d2: 59:7e:20:df:45:bd:20:cf:43:7d:c5:42:b8:02:b6: 4c:90:e4:23:1e:48:6c:89:83:53:54:46:dd:88:b1: 81:4a:8a:9b:a3:de:54:20:f1:80:6d:a6:3c:48:81: 94:19:c9:93:ce:55:1d:db:98:1b:85:13:47:f4:c2: fc:73:ad:09:5c:c8:70:1f:84:d7:2d:5b:d4:12:b1: 81:59:d0:58:3c:40:bb:cf:26:70:8b:86:e3:4f:55: 63:62:cd:83:eb:39:6b:98:ba:6d:cb:df:6f:81:9f: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:0B:31:7E:DD:ED:16:68:E9:3B:33:6B:93:0D:B2:77:AA:EB:73 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:05:21:1a:74:01:6e:ee:d3:5a:e9:5d:16:53:2c:21:fa:1c: 64:78:41:8e:22:83:46:21:70:a0:13:dc:d5:aa:a4:f0:c6:bb: 5a:70:b0:ec:80:bb:fe:67:64:8c:ca:b8:74:d7:e6:54:bb:71: a1:54:fb:24:ed:b8:2a:cb:4c:76:83:b2:a1:e0:d4:5f:68:0b: 21:42:c5:b8:ca:91:39:3b:97:31:30:08:99:03:86:67:04:bf: 02:a8:8d:a8:0b:8e:d4:ed:66:3a:b9:d6:04:9d:66:13:98:b4: 37:ee:55:35:ff:19:d4:3b:6f:de:42:99:19:ca:74:9f:2e:84: df:e3:0b:b6:35:cb:ef:7a:e3:d1:08:f8:02:6a:77:c1:c2:76: d2:da:02:15:05:d9:7c:bf:82:cb:2c:21:18:89:5f:b4:24:1f: c6:3b:aa:8c:ba:9c:dd:91:d2:ff:ee:26:cb:59:1d:05:dc:f1: e7:1a:73:b8:bb:95:be:03:f0:aa:33:c8:a2:6c:06:94:41:8e: dc:66:0f:99:4c:a4:01:a4:64:0b:7c:44:78:23:ce:99:2b:e4: b1:06:a4:63:c8:f7:80:8f:bd:d8:33:61:62:53:3a:2f:d3:2b: b4:b0:23:41:7d:a0:aa:c4:28:97:53:16:5f:df:a5:56:8f:2e: dc:ba:f8:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUxMDE4MTkxNDE2WhcNMjUxMDI1MTkxNDE2WjAYMRYwFAYD VQQDEw02OGYzZTcwOC05MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjuLUPjVZE52m0zUo64mKJpxxAmJBbsf9Yxkx6sklR9hru66rXEDlfs3HAqR C5rQjM91jqqDTk7dhrWOJldjpbMcQ9UoqPhUiVfe5qVFBg2ipmpeKqX6R0aR1Mzp 3Evtn5bQOVVqtXlNzfAs23oBkJqBom9RUbs78iEnhUV3I+hut+krRxxStm0w/2zh hT2zB5DvCNJZfiDfRb0gz0N9xUK4ArZMkOQjHkhsiYNTVEbdiLGBSoqbo95UIPGA baY8SIGUGcmTzlUd25gbhRNH9ML8c60JXMhwH4TXLVvUErGBWdBYPEC7zyZwi4bj T1VjYs2D6zlrmLpty99vgZ+FjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjQCzF+ 3e0WaOk7M2uTDbJ3qutzMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNBSEadAFu7tNa6V0WUywh+hxkeEGOIoNGIXCgE9zVqqTwxrtacLDs gLv+Z2SMyrh01+ZUu3GhVPsk7bgqy0x2g7Kh4NRfaAshQsW4ypE5O5cxMAiZA4Zn BL8CqI2oC47U7WY6udYEnWYTmLQ37lU1/xnUO2/eQpkZynSfLoTf4wu2NcvveuPR CPgCanfBwnbS2gIVBdl8v4LLLCEYiV+0JB/GO6qMupzdkdL/7ibLWR0F3PHnGnO4 u5W+A/CqM8iibAaUQY7cZg+ZTKQBpGQLfER4I86ZK+SxBqRjyPeAj73YM2FiUzov 0yu0sCNBfaCqxCiXUxZf36VWjy7cuvhp -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:54 2025 by rpki-client