$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: L8WflIYpexgYnkBZdbqHm/rPtJFT/Zm8rljcMLfUmV4= Subject key identifier: DA:32:D3:B4:FD:25:C1:F6:D4:B6:D2:8D:7F:B3:AB:24:EB:13:CD:23 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0820 Signing time: Sat 18 Oct 2025 22:06:38 +0000 Manifest this update: Sat 18 Oct 2025 22:06:37 +0000 Manifest next update: Sat 25 Oct 2025 22:06:37 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: /w1EGjzjCs0OaPGudft4Jbi6Sh7QCQUj+fYUzDMhq8o=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: qjMMlEqEvaBO7XAFYzvleISXKC2IIZdSXJalJOe7pw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Oct 18 22:06:37 2025 GMT Not After : Oct 25 22:06:37 2025 GMT Subject: CN=68f40f6e-cbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:29:eb:84:72:30:84:15:53:e3:f6:dd:37: 22:c9:33:a6:9c:9a:9d:a1:e8:80:91:fb:1d:37:b8: 4f:08:f7:34:40:8e:22:d6:88:e6:69:82:1b:6e:77: d3:b3:93:18:ef:86:84:84:47:86:4b:8b:45:bf:db: a1:ff:ca:90:87:c8:1f:6f:19:0f:2a:d0:bc:a5:3b: 47:e5:26:80:18:40:00:27:2e:31:a0:60:34:22:32: 30:d0:77:09:ae:5d:73:e6:f5:af:67:29:15:d7:8e: ca:40:b6:e2:9a:65:f9:08:32:df:2d:34:2f:07:48: f5:10:e7:f8:6e:6b:df:04:c7:d7:4b:9f:ff:c2:7e: 25:b9:a8:2a:b2:cc:a8:4b:f0:b5:fa:dc:5b:a2:d9: fd:3e:ad:4e:26:4e:7c:3d:c3:30:52:30:52:e3:3b: d5:80:19:58:f4:a9:4f:73:a2:fe:dc:3a:1d:9b:b9: e9:23:91:5b:b5:08:e5:f7:3c:f1:9e:5c:b5:25:b7: eb:2d:34:e6:ac:7c:9d:ec:a2:c2:de:21:0d:13:fe: 93:24:08:68:89:b3:6b:33:06:0b:9d:6c:cf:8f:cb: ac:86:85:7c:23:6c:c0:ee:0d:b6:cd:c0:6c:04:9d: 17:18:e5:bb:62:9f:64:2d:1f:a1:9f:82:71:c8:dd: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:32:D3:B4:FD:25:C1:F6:D4:B6:D2:8D:7F:B3:AB:24:EB:13:CD:23 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:42:cd:2b:19:04:fb:62:fa:43:a8:9d:9e:46:27:e2:31:6b: 9a:ae:05:c8:06:fc:f5:11:e5:36:17:37:83:d0:12:b1:7b:51: e4:f3:d8:9a:9e:df:ba:6d:f2:35:1c:1c:dd:00:bd:96:2d:f5: 66:56:5b:c0:65:14:83:f2:71:92:6b:05:7d:b0:bd:81:f0:1d: cb:8c:3e:ff:e0:29:d2:1d:17:ee:4a:c1:31:fb:6f:a2:0a:7d: a0:5e:58:db:bf:a9:b7:cf:ab:7a:13:98:62:80:c7:fa:bc:cd: 8f:d9:2b:b3:d7:9c:d2:28:6c:9d:76:26:f5:63:7c:23:4e:34: d6:68:b4:d8:b5:3b:d2:65:29:5b:f9:4c:27:68:fe:60:bd:24: c8:1f:0d:16:8b:8f:00:b7:a0:e9:87:cc:bd:b2:bd:ee:88:db: 5c:2b:20:4e:c9:b9:2b:14:22:cc:22:ec:09:f9:bd:b7:65:f6: 15:79:4f:a1:a3:59:6d:f1:9a:82:c0:fb:ee:c8:aa:a0:e8:bc: 32:8e:27:c0:58:93:c1:2e:60:26:86:fd:37:70:e4:87:7d:0e: a0:de:55:75:9e:cb:f6:56:7f:63:6b:dd:de:5a:42:b7:e0:0c: c3:ae:36:48:55:fd:13:ad:98:f1:dc:25:6d:a5:4a:8a:bf:1c: cf:4c:2e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUxMDE4MjIwNjM3WhcNMjUxMDI1MjIwNjM3WjAYMRYwFAYD VQQDEw02OGY0MGY2ZS1jYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfkp64RyMIQVU+P23TciyTOmnJqdoeiAkfsdN7hPCPc0QI4i1ojmaYIbbnfT s5MY74aEhEeGS4tFv9uh/8qQh8gfbxkPKtC8pTtH5SaAGEAAJy4xoGA0IjIw0HcJ rl1z5vWvZykV147KQLbimmX5CDLfLTQvB0j1EOf4bmvfBMfXS5//wn4luagqssyo S/C1+txbotn9Pq1OJk58PcMwUjBS4zvVgBlY9KlPc6L+3Dodm7npI5FbtQjl9zzx nly1JbfrLTTmrHyd7KLC3iENE/6TJAhoibNrMwYLnWzPj8ushoV8I2zA7g22zcBs BJ0XGOW7Yp9kLR+hn4JxyN25KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoy07T9 JcH21LbSjX+zqyTrE80jMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Qs0rGQT7YvpDqJ2eRifiMWuargXIBvz1EeU2FzeD0BKxe1Hk89ia nt+6bfI1HBzdAL2WLfVmVlvAZRSD8nGSawV9sL2B8B3LjD7/4CnSHRfuSsEx+2+i Cn2gXljbv6m3z6t6E5higMf6vM2P2Suz15zSKGyddib1Y3wjTjTWaLTYtTvSZSlb +UwnaP5gvSTIHw0Wi48At6Dph8y9sr3uiNtcKyBOybkrFCLMIuwJ+b23ZfYVeU+h o1lt8ZqCwPvuyKqg6LwyjifAWJPBLmAmhv03cOSHfQ6g3lV1nsv2Vn9ja93eWkK3 4AzDrjZIVf0TrZjx3CVtpUqKvxzPTC5H -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:24 2025 by rpki-client