$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: SgRLa55cNCtOfHSD8JQbFbTrgA/7q79igq/t0DUfzSU= Subject key identifier: 96:B5:E8:E4:22:6E:F4:65:F7:78:89:CE:93:B4:D2:66:97:A2:6F:CA Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 0986 Signing time: Sat 18 Oct 2025 21:08:27 +0000 Manifest this update: Sat 18 Oct 2025 21:08:26 +0000 Manifest next update: Sat 25 Oct 2025 21:08:26 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 8o7VKSbGzD9h8+CjXJQObj5IqNb8VODgwAsgICaRNps=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Oct 18 21:08:26 2025 GMT Not After : Oct 25 21:08:26 2025 GMT Subject: CN=68f401ca-13af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:39:7f:c6:22:94:e2:a9:f6:31:00:97:a5: 16:9a:db:35:e6:ab:36:01:88:96:32:b3:f1:d8:3b: 75:3d:e9:59:9a:97:13:6a:d8:7d:87:5a:d8:d9:1e: cc:2d:f4:bc:96:39:b5:c0:f4:77:e3:1b:85:69:eb: 98:04:7e:58:37:d3:be:54:18:98:92:c6:76:d7:44: 53:ab:2b:8c:d8:ee:a9:a7:da:ad:dd:d4:2d:3e:30: 06:da:e4:99:4b:4b:8a:1f:76:f2:e6:fc:fe:35:8b: 7f:8d:6c:75:46:0b:63:f2:52:a1:a4:01:3e:b0:dd: cf:e4:6f:ae:cd:54:9e:21:05:92:9a:1c:16:84:03: 75:78:72:49:63:6b:e7:4b:41:c2:01:ec:46:1e:45: 4c:15:a2:f1:19:88:8f:4f:f6:ba:36:7f:79:28:b1: c2:d0:2c:be:0a:10:d7:28:43:c7:e5:4c:97:c1:11: d0:20:2d:02:8c:68:88:c2:f4:ad:5b:1a:dd:42:ec: 19:51:2f:33:a0:31:b1:47:94:6b:90:fd:8b:14:62: d4:66:cd:40:44:0a:08:3f:d4:ee:c0:8b:f7:f2:bf: c1:39:7f:fe:d7:f8:bf:11:b5:13:b4:fc:51:39:2a: 3b:73:86:88:b0:36:64:4e:bc:d2:47:78:4d:87:53: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B5:E8:E4:22:6E:F4:65:F7:78:89:CE:93:B4:D2:66:97:A2:6F:CA X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:10:16:f6:3d:94:da:ec:fd:aa:91:96:87:87:0b:d4:8f:96: 48:dd:86:fd:01:c9:2a:05:de:90:9c:02:f5:5e:09:95:d6:70: 28:40:ca:92:6e:ae:73:51:01:91:32:32:55:a1:4c:de:ba:66: 9b:51:63:7b:b6:5d:2e:5c:fd:34:df:25:5f:b8:89:a1:96:76: 47:04:46:20:ad:40:bd:cb:37:c0:8e:5d:fe:fc:94:a8:3a:1f: ea:4d:16:67:00:b8:8a:08:98:5e:a8:8f:b1:6f:e1:a8:87:d4: 10:78:c1:7a:84:7c:7a:e6:76:27:cc:a8:27:79:4a:2b:6f:ff: dd:cc:ee:73:a7:56:e6:a1:bc:26:a4:b5:0b:c6:11:49:6e:34: 9a:64:8a:1c:8e:ea:4e:7a:59:8c:60:71:6d:2d:e1:30:41:96: 04:1e:dc:90:7c:5a:3f:7c:5d:53:0c:9b:33:3a:d6:49:98:06: a2:8b:48:38:5a:7e:dd:40:ac:de:61:33:80:36:29:86:9b:1c: 2f:16:e9:31:82:14:7b:f1:4a:09:7f:b6:f9:c7:12:19:46:15: 5f:9e:74:3a:f8:dc:5d:1b:66:be:80:5a:dc:69:03:82:8a:fe: 7c:dc:15:f7:25:66:e4:87:0a:a3:0b:3d:1b:32:ea:39:08:22: aa:51:3a:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUxMDE4MjEwODI2WhcNMjUxMDI1MjEwODI2WjAYMRYwFAYD VQQDEw02OGY0MDFjYS0xM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqs5f8YilOKp9jEAl6UWmts15qs2AYiWMrPx2Dt1PelZmpcTath9h1rY2R7M LfS8ljm1wPR34xuFaeuYBH5YN9O+VBiYksZ210RTqyuM2O6pp9qt3dQtPjAG2uSZ S0uKH3by5vz+NYt/jWx1Rgtj8lKhpAE+sN3P5G+uzVSeIQWSmhwWhAN1eHJJY2vn S0HCAexGHkVMFaLxGYiPT/a6Nn95KLHC0Cy+ChDXKEPH5UyXwRHQIC0CjGiIwvSt WxrdQuwZUS8zoDGxR5RrkP2LFGLUZs1ARAoIP9TuwIv38r/BOX/+1/i/EbUTtPxR OSo7c4aIsDZkTrzSR3hNh1NNQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa16OQi bvRl93iJzpO00maXom/KMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyEBb2PZTa7P2qkZaHhwvUj5ZI3Yb9AckqBd6QnAL1XgmV1nAoQMqS bq5zUQGRMjJVoUzeumabUWN7tl0uXP003yVfuImhlnZHBEYgrUC9yzfAjl3+/JSo Oh/qTRZnALiKCJheqI+xb+Goh9QQeMF6hHx65nYnzKgneUorb//dzO5zp1bmobwm pLULxhFJbjSaZIocjupOelmMYHFtLeEwQZYEHtyQfFo/fF1TDJszOtZJmAaii0g4 Wn7dQKzeYTOANimGmxwvFukxghR78UoJf7b5xxIZRhVfnnQ6+NxdG2a+gFrcaQOC iv583BX3JWbkhwqjCz0bMuo5CCKqUTpJ -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:52 2025 by rpki-client