$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json) Hash identifier: K0gNDMvth4m81PUqwBHL8jWJ3PDkPItjt3N+uO5MetE= Subject key identifier: B2:6E:98:E2:75:AF:B0:CE:25:EF:89:D7:A2:EA:F8:3B:23:36:97:4B Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft Manifest number: E2 Signing time: Sun 19 Oct 2025 08:30:22 +0000 Manifest this update: Sun 19 Oct 2025 08:30:21 +0000 Manifest next update: Sun 26 Oct 2025 08:30:21 +0000 Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: 6s0n2ve3+EmSPZ2lZN2x7yGXwrBO0UGJfm7l71O9AJ4=) 2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: U+YpJjsdpIii+x7KSl554lHw0RtKScpC+wz0GcX2Ss0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Validity Not Before: Oct 19 08:30:21 2025 GMT Not After : Oct 26 08:30:21 2025 GMT Subject: CN=68f4a19d-39a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b4:6f:a6:f6:6e:d9:d5:7c:27:3a:06:c5:0e: 4e:6e:a4:18:be:d8:81:3f:e3:dd:eb:4c:6a:bd:34: 60:18:f5:55:7a:b5:65:56:c8:4d:00:23:b1:ea:dd: 41:7d:85:49:0a:82:66:56:dc:ba:d4:c6:58:21:ab: b3:e3:9b:4b:3c:e1:ca:d8:b8:47:9a:c7:1d:68:d7: b8:a5:2d:ea:a8:5f:97:19:22:42:78:01:52:fd:c4: 49:5a:3c:67:ff:8e:c3:d2:c9:a4:46:8d:b3:aa:72: d6:5c:f9:10:a6:4e:73:e1:af:c8:53:fc:0a:e8:11: 04:16:01:ff:6e:23:43:5d:2d:06:9b:ef:d1:f3:e8: dc:c5:ba:25:36:14:2c:a3:a1:bc:10:53:96:61:e3: ed:5f:83:57:12:6e:64:b5:7d:b1:8b:b7:b0:59:50: 14:c8:a0:56:60:78:d5:b8:5d:fe:7e:96:97:d9:69: f8:81:18:fe:f0:44:87:66:96:92:4e:91:00:64:68: ee:d2:bf:f1:7c:0d:e0:fb:b1:88:bb:29:a6:18:3d: 32:a8:a7:5d:c1:34:da:f8:2e:54:e9:74:28:ee:12: d0:f6:a6:42:d7:d2:a9:5e:9b:11:b9:e5:68:1e:8c: 96:b3:88:ca:2f:46:c9:ad:e6:bc:87:b6:8b:e0:f8: 03:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6E:98:E2:75:AF:B0:CE:25:EF:89:D7:A2:EA:F8:3B:23:36:97:4B X509v3 Authority Key Identifier: keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e4:1f:79:08:0a:5d:30:a1:a1:7a:b3:32:f2:99:af:39:c7: 3c:76:d5:14:28:7b:70:55:f0:11:53:81:6c:19:c0:b5:f2:e6: cf:49:eb:f5:cf:7c:90:32:bb:be:44:8d:05:91:44:92:8f:44: ab:a3:c1:4c:ef:12:14:6c:d9:08:06:44:d1:ef:a7:ad:e6:3f: ae:32:ba:ac:bf:0d:85:2f:02:2e:e9:01:bc:7c:5c:6e:78:1c: 40:68:0b:7d:ef:b4:03:59:9a:24:77:8d:73:52:2b:3b:35:e9: 0d:e6:11:a7:65:27:d5:6d:6d:d8:86:41:be:7b:3d:cd:7d:2f: 01:3c:4a:25:a3:b8:16:f3:e1:fa:70:5c:e4:04:a7:f8:09:13: d7:6c:af:aa:c8:21:97:76:78:71:2b:a1:e1:22:d7:9a:3e:e7: 8c:f9:ae:7a:34:94:2a:b0:cf:9f:c9:c9:a4:d9:ca:04:a5:dd: 23:08:22:30:55:df:85:bd:4d:2e:09:d0:9d:1d:0a:e9:bd:14: f9:f5:65:8c:1f:6f:92:37:29:98:69:61:37:99:a9:81:e9:de: 2f:92:f1:61:a9:42:57:67:a8:c4:3d:c8:33:cb:cf:9b:0a:a9: 4a:f7:bc:5a:cf:1c:36:08:47:05:13:78:ed:da:17:11:08:a4: 85:e9:78:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5 NUNERUZFMjMwHhcNMjUxMDE5MDgzMDIxWhcNMjUxMDI2MDgzMDIxWjAYMRYwFAYD VQQDEw02OGY0YTE5ZC0zOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rRvpvZu2dV8JzoGxQ5ObqQYvtiBP+Pd60xqvTRgGPVVerVlVshNACOx6t1B fYVJCoJmVty61MZYIauz45tLPOHK2LhHmscdaNe4pS3qqF+XGSJCeAFS/cRJWjxn /47D0smkRo2zqnLWXPkQpk5z4a/IU/wK6BEEFgH/biNDXS0Gm+/R8+jcxbolNhQs o6G8EFOWYePtX4NXEm5ktX2xi7ewWVAUyKBWYHjVuF3+fpaX2Wn4gRj+8ESHZpaS TpEAZGju0r/xfA3g+7GIuymmGD0yqKddwTTa+C5U6XQo7hLQ9qZC19KpXpsRueVo HoyWs4jKL0bJrea8h7aL4PgDPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJumOJ1 r7DOJe+J16Lq+DsjNpdLMB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4 ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC15B95CApdMKGherMy8pmvOcc8dtUUKHtwVfARU4FsGcC18ubPSev1 z3yQMru+RI0FkUSSj0Sro8FM7xIUbNkIBkTR76et5j+uMrqsvw2FLwIu6QG8fFxu eBxAaAt977QDWZokd41zUis7NekN5hGnZSfVbW3YhkG+ez3NfS8BPEolo7gW8+H6 cFzkBKf4CRPXbK+qyCGXdnhxK6HhIteaPueM+a56NJQqsM+fycmk2coEpd0jCCIw Vd+FvU0uCdCdHQrpvRT59WWMH2+SNymYaWE3mamB6d4vkvFhqUJXZ6jEPcgzy8+b CqlK97xazxw2CEcFE3jt2hcRCKSF6XiE -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:51 2025 by rpki-client