$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: +Szk/XomT8HBwkGtH5FA/yuSdIRKlJUHDGYfhNhMTyw= Subject key identifier: 67:44:CC:61:7B:58:9C:A3:AF:2B:0B:BA:36:11:C9:06:7D:BA:F2:03 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 047A Signing time: Sun 19 Oct 2025 01:59:26 +0000 Manifest this update: Sun 19 Oct 2025 01:59:25 +0000 Manifest next update: Sun 26 Oct 2025 01:59:25 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: Vf5Rr1uvT12MICuW6kQk5yEr35kh0zoF8QLDUUQsMjM=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Oct 19 01:59:25 2025 GMT Not After : Oct 26 01:59:25 2025 GMT Subject: CN=68f445fe-97cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:43:ef:d1:48:a2:18:56:0c:40:04:c0:4d: db:0f:f1:cf:df:4b:63:92:7f:29:71:2a:ec:ee:03: b2:fb:8c:8e:dd:b9:9f:1a:9e:f8:07:7e:90:8f:3b: 8e:fa:f4:56:8e:d1:d0:42:52:60:95:41:c9:db:48: 12:fd:46:c6:e5:99:9e:6f:58:69:b0:59:c5:e6:58: 6e:9a:96:d4:c0:fe:32:7a:c9:01:56:f7:3e:a8:c1: c7:65:2d:a6:65:6f:3c:26:82:b1:eb:e4:ea:0a:5f: 6d:30:6a:b8:ff:fb:22:52:1b:89:2b:31:cc:93:a4: 23:3b:db:18:fd:a9:80:2e:2e:2d:c1:c8:3d:74:d7: 7c:15:3d:9c:8f:e8:bf:4e:8d:59:d4:0d:11:0e:98: 34:e3:9f:87:2c:ce:08:d9:2f:97:93:37:88:ce:de: 63:78:b7:04:21:ed:ea:5c:f3:0d:71:11:85:ad:52: 43:d5:a6:34:56:26:df:b6:0f:68:4e:cc:99:92:72: 80:47:9e:9f:4c:1a:9e:3c:d4:6b:4b:22:7d:5d:63: cf:28:83:a3:19:46:ae:60:d4:97:84:10:f5:16:0c: d2:f7:8a:c1:0e:b5:58:5b:7a:47:e5:e2:e0:46:e7: 63:d4:84:0c:fe:69:fc:a3:c3:ba:66:ad:8a:63:ac: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:44:CC:61:7B:58:9C:A3:AF:2B:0B:BA:36:11:C9:06:7D:BA:F2:03 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7e:9c:01:82:98:a0:82:68:f9:c3:d1:a2:23:e3:61:06:94: c5:b3:d7:a6:dc:93:e4:bb:13:8c:8d:71:9b:90:a0:a2:39:33: 9d:65:56:18:16:66:1d:fd:ee:6a:2a:64:6c:be:2a:0c:58:de: 48:04:5b:d0:02:a1:10:b0:60:a9:6a:15:99:c3:59:c7:8b:ec: 8b:82:0e:4f:5d:65:10:78:2a:8a:5b:90:cd:76:c1:5e:fa:4c: ec:d5:85:5c:01:bc:8f:4d:28:e8:4a:80:91:50:6e:66:81:75: 8a:3d:04:6a:5f:08:c6:5e:92:f5:63:0b:16:6c:5e:20:a3:94: 1a:11:22:ec:c4:11:66:a3:d9:4e:ee:14:7d:53:af:89:0e:a5: c9:db:f4:ac:ae:39:14:19:11:59:5b:3e:f0:f1:73:f0:b6:b8: 70:cf:d8:63:cd:5d:c2:fc:95:02:40:b8:7b:8c:5b:47:4a:ba: 22:cf:43:ec:22:41:b4:ac:fb:35:5a:5e:92:fb:b2:33:e2:69: 63:40:ed:a2:c1:27:ff:de:7f:70:d9:13:8c:f1:cd:be:a8:7a: aa:bf:39:f0:14:3f:e7:d8:6a:48:36:c8:e8:9c:4a:a8:62:be: a6:0a:45:ec:d4:54:5f:7e:81:87:a2:17:4e:11:a6:38:ba:a0: 54:90:21:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUxMDE5MDE1OTI1WhcNMjUxMDI2MDE1OTI1WjAYMRYwFAYD VQQDEw02OGY0NDVmZS05N2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDhD79FIohhWDEAEwE3bD/HP30tjkn8pcSrs7gOy+4yO3bmfGp74B36QjzuO +vRWjtHQQlJglUHJ20gS/UbG5Zmeb1hpsFnF5lhumpbUwP4yeskBVvc+qMHHZS2m ZW88JoKx6+TqCl9tMGq4//siUhuJKzHMk6QjO9sY/amALi4twcg9dNd8FT2cj+i/ To1Z1A0RDpg045+HLM4I2S+XkzeIzt5jeLcEIe3qXPMNcRGFrVJD1aY0Vibftg9o TsyZknKAR56fTBqePNRrSyJ9XWPPKIOjGUauYNSXhBD1FgzS94rBDrVYW3pH5eLg Rudj1IQM/mn8o8O6Zq2KY6z4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdEzGF7 WJyjrysLujYRyQZ9uvIDMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNfpwBgpiggmj5w9GiI+NhBpTFs9em3JPkuxOMjXGbkKCiOTOdZVYY FmYd/e5qKmRsvioMWN5IBFvQAqEQsGCpahWZw1nHi+yLgg5PXWUQeCqKW5DNdsFe +kzs1YVcAbyPTSjoSoCRUG5mgXWKPQRqXwjGXpL1YwsWbF4go5QaESLsxBFmo9lO 7hR9U6+JDqXJ2/SsrjkUGRFZWz7w8XPwtrhwz9hjzV3C/JUCQLh7jFtHSroiz0Ps IkG0rPs1Wl6S+7Iz4mljQO2iwSf/3n9w2ROM8c2+qHqqvznwFD/n2GpINsjonEqo Yr6mCkXs1FRffoGHohdOEaY4uqBUkCE/ -----END CERTIFICATE-----Generated at Tue Oct 21 02:33:59 2025 by rpki-client