$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: 7mssnCeXbo8Jkxpw5YRnZh9Od7wiFv2Yg8+BtF7F70M= Subject key identifier: 26:86:29:A0:D9:04:FB:2B:11:ED:A8:80:9A:37:23:24:8E:D0:63:18 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: A4 Signing time: Sun 19 Oct 2025 09:32:10 +0000 Manifest this update: Sun 19 Oct 2025 09:32:09 +0000 Manifest next update: Sun 26 Oct 2025 09:32:09 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: +5IFwiP+wh3ezU88+Q5nKFNUgENXlqsI43FqlHpk2eI=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: HSb6XjCDD/PrExNgC4kkLXSRksHnMNuj8kokihkx5ZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Oct 19 09:32:09 2025 GMT Not After : Oct 26 09:32:09 2025 GMT Subject: CN=68f4b019-362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:dd:dc:6d:85:4b:e0:03:5e:c1:9f:66:63: 19:cd:e2:cc:d3:30:8b:ef:cb:a1:8f:6f:0f:66:00: 9b:59:13:e0:34:a2:99:7d:f0:ab:a0:26:57:3b:16: 97:d3:ed:83:12:4d:c7:8b:12:4a:12:95:1c:cb:0d: 01:30:10:b8:fc:ab:aa:11:51:81:c5:46:d4:94:49: ce:88:17:fa:8f:47:e3:47:38:72:ac:1b:0f:ed:c3: bb:67:04:ce:99:99:7e:b1:81:7b:68:a4:12:b5:16: 3c:1d:89:89:56:83:55:d9:9d:c9:60:de:c0:0b:65: 40:1f:19:2b:40:be:58:8d:59:8f:71:39:55:3b:c9: ef:cd:be:85:0c:3f:99:b4:4c:16:4c:53:2f:f8:31: a9:9e:3c:72:56:4c:b0:fa:e2:f9:ac:33:d4:d1:6c: 2a:f6:55:a0:1d:23:9b:37:9d:f2:db:b0:72:4f:f3: 7e:49:ff:f3:1c:f2:2f:07:31:a0:4d:39:4a:53:32: d6:54:1c:2e:b9:9b:a9:6e:e5:36:03:f4:03:a2:d0: cb:4c:c7:7c:e3:9c:28:61:86:6a:eb:43:71:74:b7: 6b:ec:13:da:9c:73:0d:66:74:c0:8d:d7:62:12:c5: 52:1c:6f:dd:01:93:aa:06:4a:9e:34:57:81:a4:0b: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:29:A0:D9:04:FB:2B:11:ED:A8:80:9A:37:23:24:8E:D0:63:18 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7e:1b:2a:d3:7f:e3:6f:d4:48:71:d7:35:fa:f4:48:29:62: 89:1b:d9:b1:68:82:51:0a:c2:5c:86:79:c1:0b:64:5e:1c:13: d3:e9:a8:d2:b4:63:5b:23:d7:f4:36:15:dc:7c:68:00:f7:b5: 5d:ed:b8:39:0c:3a:28:07:e3:93:d6:6b:0e:f8:22:d9:f9:b5: 58:92:51:cb:51:bf:39:dd:c6:d2:90:1b:78:4a:8e:4a:52:5f: e2:f0:5a:3e:74:03:50:f6:bc:1f:0e:07:bb:c7:04:35:19:da: f5:a3:42:e0:a4:c4:67:05:3e:ae:92:ef:0d:56:0d:cb:9a:03: 63:ab:77:6a:4d:e9:59:5f:dd:61:e9:e2:1d:b3:19:56:7f:9b: 6f:4c:48:77:3e:db:1d:ad:47:5f:f8:92:07:1f:c3:ec:d7:b3: a5:3b:bc:97:95:9e:e9:fa:9f:05:e9:30:94:40:b5:08:92:aa: 74:0b:cd:6e:44:a8:f4:45:42:4a:18:9a:e4:db:18:78:00:be: 8d:3e:eb:93:ab:ea:b5:7e:14:d9:f6:e1:f8:93:a7:0e:46:75: 32:16:9c:6a:cb:89:68:77:38:9a:95:ad:a1:d9:76:e0:8b:f1: 15:9b:45:57:24:f8:91:74:3e:2c:ff:1b:71:e0:9f:25:27:56: d9:8e:46:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjUxMDE5MDkzMjA5WhcNMjUxMDI2MDkzMjA5WjAYMRYwFAYD VQQDEw02OGY0YjAxOS0zNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2Xd3G2FS+ADXsGfZmMZzeLM0zCL78uhj28PZgCbWRPgNKKZffCroCZXOxaX 0+2DEk3HixJKEpUcyw0BMBC4/KuqEVGBxUbUlEnOiBf6j0fjRzhyrBsP7cO7ZwTO mZl+sYF7aKQStRY8HYmJVoNV2Z3JYN7AC2VAHxkrQL5YjVmPcTlVO8nvzb6FDD+Z tEwWTFMv+DGpnjxyVkyw+uL5rDPU0Wwq9lWgHSObN53y27ByT/N+Sf/zHPIvBzGg TTlKUzLWVBwuuZupbuU2A/QDotDLTMd845woYYZq60NxdLdr7BPanHMNZnTAjddi EsVSHG/dAZOqBkqeNFeBpAv7zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaGKaDZ BPsrEe2ogJo3IySO0GMYMB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKfhsq03/jb9RIcdc1+vRIKWKJG9mxaIJRCsJchnnBC2ReHBPT6ajS tGNbI9f0NhXcfGgA97Vd7bg5DDooB+OT1msO+CLZ+bVYklHLUb853cbSkBt4So5K Ul/i8Fo+dANQ9rwfDge7xwQ1Gdr1o0LgpMRnBT6uku8NVg3LmgNjq3dqTelZX91h 6eIdsxlWf5tvTEh3PtsdrUdf+JIHH8Ps17OlO7yXlZ7p+p8F6TCUQLUIkqp0C81u RKj0RUJKGJrk2xh4AL6NPuuTq+q1fhTZ9uH4k6cORnUyFpxqy4lodziala2h2Xbg i/EVm0VXJPiRdD4s/xtx4J8lJ1bZjkbm -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:09 2025 by rpki-client