$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: 6UmAfifr0nu7Cgsm/CPibmrcDxQwuLgdaD4fR7LMouI= Subject key identifier: 0D:0F:6C:36:E8:E3:C2:68:CF:5B:D9:8D:6A:2D:4A:76:42:40:04:EB Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 136E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1364 Signing time: Mon 20 Oct 2025 17:24:39 +0000 Manifest this update: Mon 20 Oct 2025 17:24:38 +0000 Manifest next update: Mon 27 Oct 2025 17:24:38 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: EyB/DkL7rqKaxBa8yq93d400KE9Q8lk9HnXxmrbo8Io=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4974 (0x136e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Oct 20 17:24:38 2025 GMT Not After : Oct 27 17:24:38 2025 GMT Subject: CN=68f67056-af88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:45:28:68:9c:f2:47:3f:ec:29:ba:49:ac:f8: 86:81:49:ed:80:e6:fc:12:bd:b0:57:2b:8d:c4:7a: 1f:9a:af:d6:42:36:6e:0d:f9:6b:51:07:b3:08:dd: bf:99:55:53:97:2f:26:e0:36:0a:22:0a:cc:56:6f: 83:b9:49:83:e8:a5:76:62:16:5e:07:42:0b:23:04: 34:f5:26:80:e1:79:56:71:6e:e8:82:16:8b:7b:55: 09:0a:97:b1:cf:31:05:42:5b:8c:97:cc:9e:02:78: e0:cc:fa:09:7d:5b:12:73:a1:d6:44:54:32:69:c1: f7:29:2f:07:15:3c:26:83:14:f8:7f:e7:7e:4e:f3: dc:74:85:06:d1:7b:be:0a:ad:6e:ea:aa:82:f0:a2: b3:2f:92:e5:45:f3:fc:d9:f5:0c:2e:54:61:52:85: 39:bf:a1:db:3b:68:51:e9:2e:67:72:d3:4d:58:3a: 1c:ed:01:b3:1c:56:3f:4d:f2:05:a1:a9:0f:93:7f: d4:af:b6:a9:5b:95:25:e5:1d:75:ab:41:3d:2d:1f: 9f:a9:28:6c:d9:56:73:c5:20:6f:91:7e:cf:47:9b: 89:38:81:ad:18:48:90:24:5f:c7:33:7f:24:d1:2a: 20:49:a0:38:d7:4e:2f:43:81:cb:3f:d1:af:d4:fd: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0F:6C:36:E8:E3:C2:68:CF:5B:D9:8D:6A:2D:4A:76:42:40:04:EB X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:84:bc:d8:4f:40:f9:97:a6:03:79:aa:42:15:56:26:74:86: 0c:eb:62:fd:43:de:cd:b0:e5:a7:ab:8a:76:71:0b:ed:c0:ca: cd:dd:89:e8:23:27:7f:31:6e:ad:83:27:5e:7a:17:be:2f:36: d4:e5:b3:bb:13:cb:69:34:15:4e:b9:fb:25:76:56:6f:f3:04: 36:f4:d9:bb:89:23:25:8d:27:ce:87:b1:fa:09:11:4b:81:f5: b8:a7:37:22:21:26:ac:e7:db:e1:a3:71:d7:08:0e:83:21:0b: 09:b7:27:92:d0:13:f1:c4:3f:e5:c3:e8:20:62:b1:94:24:e5: 8b:f4:88:44:12:cf:81:79:b9:b4:b3:8e:22:b7:05:23:1d:9f: 06:2b:cf:80:42:f1:33:f2:ed:6b:0e:49:02:d0:6d:28:ca:b3: 00:59:d7:dd:66:17:64:ec:3b:5c:9d:61:92:50:2c:3f:a1:bb: c8:3c:0f:6f:5c:15:2d:67:79:8c:40:d8:f8:c2:79:cb:15:8a: 33:d0:e0:66:95:21:d5:54:ec:a0:aa:58:14:13:c2:7c:9c:38: 51:b9:58:fe:d5:70:dc:e2:14:3d:e8:e5:34:91:7c:02:53:43: d0:e0:5b:1f:0d:6d:cf:1e:61:e9:94:73:ef:ea:77:bb:c6:ac: 3e:77:99:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUxMDIwMTcyNDM4WhcNMjUxMDI3MTcyNDM4WjAYMRYwFAYD VQQDEw02OGY2NzA1Ni1hZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UUoaJzyRz/sKbpJrPiGgUntgOb8Er2wVyuNxHofmq/WQjZuDflrUQezCN2/ mVVTly8m4DYKIgrMVm+DuUmD6KV2YhZeB0ILIwQ09SaA4XlWcW7oghaLe1UJCpex zzEFQluMl8yeAnjgzPoJfVsSc6HWRFQyacH3KS8HFTwmgxT4f+d+TvPcdIUG0Xu+ Cq1u6qqC8KKzL5LlRfP82fUMLlRhUoU5v6HbO2hR6S5nctNNWDoc7QGzHFY/TfIF oakPk3/Ur7apW5Ul5R11q0E9LR+fqShs2VZzxSBvkX7PR5uJOIGtGEiQJF/HM38k 0SogSaA4104vQ4HLP9Gv1P2zQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0PbDbo 48Joz1vZjWotSnZCQATrMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAthLzYT0D5l6YDeapCFVYmdIYM62L9Q97NsOWnq4p2cQvtwMrN3Yno Iyd/MW6tgydeehe+LzbU5bO7E8tpNBVOufsldlZv8wQ29Nm7iSMljSfOh7H6CRFL gfW4pzciISas59vho3HXCA6DIQsJtyeS0BPxxD/lw+ggYrGUJOWL9IhEEs+Bebm0 s44itwUjHZ8GK8+AQvEz8u1rDkkC0G0oyrMAWdfdZhdk7DtcnWGSUCw/obvIPA9v XBUtZ3mMQNj4wnnLFYoz0OBmlSHVVOygqlgUE8J8nDhRuVj+1XDc4hQ96OU0kXwC U0PQ4FsfDW3PHmHplHPv6ne7xqw+d5l1 -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:04 2025 by rpki-client