$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: Ln/DVcuHTrDRS/cV4OI7prTEl8YdFf+awITsSwUFvyI= Subject key identifier: B0:82:DB:40:E9:7D:9E:81:7A:C6:E0:7B:D9:D9:28:96:E7:5E:C3:CE Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 1F Signing time: Sun 19 Oct 2025 05:15:40 +0000 Manifest this update: Sun 19 Oct 2025 05:15:39 +0000 Manifest next update: Sun 26 Oct 2025 05:15:39 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: Dbb578obk8AkcMvQCbtZ4jIqyqFnMWlmL9kh8epirxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Oct 19 05:15:39 2025 GMT Not After : Oct 26 05:15:39 2025 GMT Subject: CN=68f473fb-beb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:f0:f6:b7:4e:0c:79:71:81:37:52:28:81: 08:2e:97:d1:b7:34:70:d7:25:10:bb:ce:91:9d:33: 21:a6:c5:88:1e:12:a1:fb:cf:c2:21:9c:34:5b:eb: d2:76:e0:55:a7:78:56:af:55:1b:42:df:e4:0b:d2: 2b:22:33:9b:fe:32:9c:e0:c4:d0:e4:88:76:88:1c: 5c:1b:1e:c1:16:7a:3b:ed:54:00:c7:75:6a:86:c0: f4:da:fb:0b:9e:53:6f:26:73:5f:6b:0c:8f:0b:3d: 2d:8f:21:51:07:9d:75:c4:bd:58:07:22:92:03:6e: c4:91:78:bc:39:b9:e3:e1:e6:cd:be:19:a0:88:80: 7a:a4:2a:54:33:84:8c:40:80:07:6d:98:d0:68:38: ca:59:41:54:10:5f:9d:1a:7d:f1:ec:7c:66:98:da: d1:35:2f:a8:70:7a:de:f0:d2:6a:1d:de:84:82:03: bf:6b:26:01:df:25:12:51:d0:3e:52:8c:78:ba:e6: ff:a3:2a:4b:c2:e2:4f:5c:53:a6:d2:aa:01:12:d7: 9f:9d:c4:d5:4e:6e:66:c3:d9:af:54:4a:46:42:0d: 70:94:83:0c:22:29:3a:42:ba:20:5c:d3:b8:a0:0f: c7:e6:e7:6f:38:ec:64:3c:4a:33:05:28:72:22:ce: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:82:DB:40:E9:7D:9E:81:7A:C6:E0:7B:D9:D9:28:96:E7:5E:C3:CE X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:8e:ac:2f:9d:8a:8e:75:02:93:6a:5c:f8:ea:22:b5:df:69: 36:7a:f1:77:6d:6a:c6:6f:a1:ed:e4:f9:67:ea:70:89:68:51: c5:11:30:64:ea:44:74:15:63:a1:93:8a:8d:23:26:52:8e:fb: a4:85:dc:49:1d:f5:4d:85:5a:93:79:1f:74:34:36:44:e9:ac: 1d:2d:12:98:24:cd:d2:a9:f7:0b:ac:02:54:05:81:f7:1d:b9: b1:15:be:2f:ee:0a:52:e7:05:6f:66:a9:ee:ae:05:fd:dc:17: 3c:fd:bc:ab:b8:e0:34:e7:9c:90:53:f4:3d:0f:e3:a7:e1:74: a1:72:1e:97:9d:20:2f:63:10:38:9f:41:83:d1:2a:13:b7:a9: 2e:71:9e:36:2c:aa:c5:ea:2b:e1:e2:f6:ea:1c:d7:88:32:fb: 0e:d2:70:93:e2:44:a0:31:c9:17:c6:16:d4:47:44:d4:82:4a: 18:ae:92:33:b0:2c:07:16:31:5a:9c:7e:21:91:19:29:75:38: 54:93:73:d7:e3:ed:3c:0d:0f:fb:73:20:59:15:9c:d0:e7:58: 94:ce:c8:74:67:a6:4c:ef:46:c8:0b:fd:d9:5f:dd:70:54:69: 2a:7d:24:9e:35:25:04:94:e6:c2:94:53:a3:3e:d9:2e:81:7d: 02:c2:ab:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMDI0RDhGMTVBQTM5NzcyMTc1ODgzQTJFREMxNjUwMTRF MTkyOEExQTAeFw0yNTEwMTkwNTE1MzlaFw0yNTEwMjYwNTE1MzlaMBgxFjAUBgNV BAMTDTY4ZjQ3M2ZiLWJlYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfQPD2t04MeXGBN1IogQgul9G3NHDXJRC7zpGdMyGmxYgeEqH7z8IhnDRb69J2 4FWneFavVRtC3+QL0isiM5v+MpzgxNDkiHaIHFwbHsEWejvtVADHdWqGwPTa+wue U28mc19rDI8LPS2PIVEHnXXEvVgHIpIDbsSReLw5uePh5s2+GaCIgHqkKlQzhIxA gAdtmNBoOMpZQVQQX50affHsfGaY2tE1L6hwet7w0mod3oSCA79rJgHfJRJR0D5S jHi65v+jKkvC4k9cU6bSqgES15+dxNVObmbD2a9USkZCDXCUgwwiKTpCuiBc07ig D8fm52847GQ8SjMFKHIizma3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsILbQOl9 noF6xuB72dkoludew84wHwYDVR0jBBgwFoAUAk2PFao5dyF1iDou3BZQFOGSihow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRBMTJBMzNDODJG NDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2lo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvQWsyUEZhbzVkeUYxaURvdTNCWlFGT0dTaWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NTIwLzRBMTJBMzNDODJGNDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlG MWlEb3UzQlpRRk9HU2loby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEKOrC+dio51ApNqXPjqIrXfaTZ68XdtasZvoe3k+WfqcIloUcURMGTq RHQVY6GTio0jJlKO+6SF3Ekd9U2FWpN5H3Q0NkTprB0tEpgkzdKp9wusAlQFgfcd ubEVvi/uClLnBW9mqe6uBf3cFzz9vKu44DTnnJBT9D0P46fhdKFyHpedIC9jEDif QYPRKhO3qS5xnjYsqsXqK+Hi9uoc14gy+w7ScJPiRKAxyRfGFtRHRNSCShiukjOw LAcWMVqcfiGRGSl1OFSTc9fj7TwND/tzIFkVnNDnWJTOyHRnpkzvRsgL/dlf3XBU aSp9JJ41JQSU5sKUU6M+2S6BfQLCqz4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:54:35 2025 by rpki-client