$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: tnHdFgSkWZqvknXlChFzxbH6jvWbTW4q7mDQskTtzIk= Subject key identifier: 87:BA:19:9D:A0:3D:E5:51:23:53:57:36:15:A2:F0:A2:38:AC:DE:AA Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: F5 Signing time: Sun 19 Oct 2025 08:11:18 +0000 Manifest this update: Sun 19 Oct 2025 08:11:17 +0000 Manifest next update: Sun 26 Oct 2025 08:11:17 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: dPqnvmUin6ccCsB9QEdZF0h7pA/7VnkqDQkXbeLrQtk=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Oct 19 08:11:17 2025 GMT Not After : Oct 26 08:11:17 2025 GMT Subject: CN=68f49d25-3c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:f6:9a:05:94:8f:5e:40:4f:8f:02:dc:9e: c4:06:d4:d5:29:8a:18:84:ff:6d:a2:2c:60:3f:4e: 18:ad:85:dc:d5:b8:4c:7b:f2:68:42:85:e4:91:72: 72:bf:ca:a4:4f:56:ba:06:95:3c:1a:e2:3a:47:7f: 1c:74:f4:80:97:16:15:d6:d8:51:49:8b:1a:6d:40: 0c:a7:5a:89:37:13:ef:a3:e5:7e:3f:8a:17:6b:7b: 6d:6e:47:03:7e:4c:bc:0a:33:58:93:4e:f6:80:c8: a6:1d:f0:aa:dc:06:a2:85:a1:d6:4e:81:a9:c9:aa: a2:f2:66:0f:98:94:a7:54:b0:3f:0c:d8:5b:97:c8: b1:dc:63:d7:cd:eb:7f:a4:bf:72:26:58:0c:5f:b4: 40:bd:5d:8e:30:81:90:b0:6d:f8:e8:13:83:6a:83: 2a:a9:81:2c:10:6b:a3:35:8c:16:04:93:83:86:b0: cd:59:18:76:66:2f:18:b2:f8:7a:c6:2a:d1:09:d6: ec:de:84:b3:9c:ec:54:ef:53:77:df:50:41:99:01: df:bf:11:a9:a7:e7:50:44:bd:9a:99:6f:22:d0:dc: 21:32:e7:e5:23:54:d2:d9:ed:c0:19:08:17:d4:16: 14:c0:54:17:65:9d:92:5d:5d:1c:ce:34:85:4c:20: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:19:9D:A0:3D:E5:51:23:53:57:36:15:A2:F0:A2:38:AC:DE:AA X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:33:30:19:e1:b3:fa:90:13:bf:3f:62:8a:ce:33:aa:45: 8c:bc:bc:b6:cc:b6:31:89:37:99:0b:bc:c9:c4:c5:b5:5c:d9: 2d:ff:2d:08:d2:4b:55:b3:3a:5b:9f:04:9d:27:36:e2:8b:8b: 19:08:d4:14:cc:17:79:e3:ec:4f:69:b4:9d:42:ff:eb:2b:4f: c3:01:e1:59:c3:37:c2:6b:99:ae:ca:87:41:3e:66:45:d6:5e: 96:cf:e8:22:d3:2d:f6:48:b2:a5:28:c5:60:a4:09:3e:04:10: dc:29:80:d1:c7:b2:12:89:4a:4d:cb:4d:b0:e6:a3:67:ec:92: 8a:08:76:29:cc:8d:08:e7:2a:17:64:6a:4e:c8:a3:1d:e3:ca: 20:cd:ce:14:5f:d7:1e:9b:5f:21:27:ac:b7:fb:82:c9:5e:a3: 54:18:fa:c0:4b:38:a2:6d:bc:e7:4e:4d:75:40:a9:bc:ce:d2: a8:d5:1d:de:b6:e0:05:07:31:19:75:a5:ce:29:d3:d1:f4:b9: 10:b2:2d:eb:fa:e9:af:99:64:d8:de:9d:01:7e:72:9e:b9:f0: 7b:79:91:88:a5:f6:b2:e9:21:8b:d2:0f:f4:80:eb:2a:db:ca: 23:3b:b7:53:0f:16:ad:f2:f0:96:9e:9d:a7:29:b1:5d:f1:83: c7:79:58:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUxMDE5MDgxMTE3WhcNMjUxMDI2MDgxMTE3WjAYMRYwFAYD VQQDEw02OGY0OWQyNS0zYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0z2mgWUj15AT48C3J7EBtTVKYoYhP9toixgP04YrYXc1bhMe/JoQoXkkXJy v8qkT1a6BpU8GuI6R38cdPSAlxYV1thRSYsabUAMp1qJNxPvo+V+P4oXa3ttbkcD fky8CjNYk072gMimHfCq3AaihaHWToGpyaqi8mYPmJSnVLA/DNhbl8ix3GPXzet/ pL9yJlgMX7RAvV2OMIGQsG346BODaoMqqYEsEGujNYwWBJODhrDNWRh2Zi8Ysvh6 xirRCdbs3oSznOxU71N331BBmQHfvxGpp+dQRL2amW8i0NwhMuflI1TS2e3AGQgX 1BYUwFQXZZ2SXV0czjSFTCCuLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe6GZ2g PeVRI1NXNhWi8KI4rN6qMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGKjMwGeGz+pATvz9iis4zqkWMvLy2zLYxiTeZC7zJxMW1XNkt/y0I 0ktVszpbnwSdJzbii4sZCNQUzBd54+xPabSdQv/rK0/DAeFZwzfCa5muyodBPmZF 1l6Wz+gi0y32SLKlKMVgpAk+BBDcKYDRx7ISiUpNy02w5qNn7JKKCHYpzI0I5yoX ZGpOyKMd48ogzc4UX9cem18hJ6y3+4LJXqNUGPrASziibbznTk11QKm8ztKo1R3e tuAFBzEZdaXOKdPR9LkQsi3r+umvmWTY3p0BfnKeufB7eZGIpfay6SGL0g/0gOsq 28ojO7dTDxat8vCWnp2nKbFd8YPHeVhE -----END CERTIFICATE-----Generated at Mon Oct 20 16:59:57 2025 by rpki-client