$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: nkAOCdZ3UOM1MF2UcsJkkCjs2CYkeN6y2cA6tSEjYM4= Subject key identifier: C8:93:C7:83:FE:6D:72:A3:6F:A6:90:3A:86:9E:12:58:A7:5E:8E:8E Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E40 Signing time: Sat 18 Oct 2025 18:26:19 +0000 Manifest this update: Sat 18 Oct 2025 18:26:17 +0000 Manifest next update: Sat 25 Oct 2025 18:26:17 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: X5d6640ALSNUameyHSu/JkVStRffi2ikdf4W0NXvJeQ=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: ueAPuc77rri4PQKwtmMLByRiVZjsosToomd9waxslTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3662 (0xe4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Oct 18 18:26:17 2025 GMT Not After : Oct 25 18:26:17 2025 GMT Subject: CN=68f3dbca-5057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:e6:a5:9c:c4:e9:76:fc:82:e4:3c:e3:a7: f1:a1:64:e7:96:c9:93:41:4f:07:fc:c4:4a:12:88: cd:b6:42:d2:28:4b:e3:6b:41:cf:09:be:78:b6:51: 03:9e:eb:71:2f:d1:b5:a1:f8:1a:c8:02:c1:0d:fa: b5:62:8c:b7:4b:8e:a7:03:4d:c2:d6:da:65:bb:83: 83:ce:a3:b1:33:81:dc:41:29:38:6b:30:6f:98:1e: 57:c3:f6:fd:bb:28:55:2a:fd:e1:b7:8a:34:d6:01: 03:a0:36:e3:a9:4d:04:bd:20:d7:9a:82:a8:e2:8d: 78:e0:ae:98:e6:59:66:a3:5d:41:29:e0:b6:74:c4: 6d:4c:1c:05:d7:f0:19:75:42:cf:c4:a1:e3:dd:d1: 73:57:2b:41:f2:ff:ee:f5:76:0f:77:87:2b:af:78: d1:f6:22:53:24:e7:4a:f5:c2:5b:cc:ab:96:fa:2a: 26:e7:60:68:40:4e:f7:3d:df:29:82:9f:a5:83:17: b1:b6:1e:16:3d:7e:12:e2:d4:8e:87:e7:29:d0:6a: fb:e1:3e:24:5d:14:d8:dd:95:42:2e:1f:58:b3:20: cf:0a:b6:9c:84:50:cb:11:0e:3a:37:26:15:a9:d4: 4c:bf:3f:94:d5:84:5c:11:d7:9b:e1:ba:64:07:4b: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:93:C7:83:FE:6D:72:A3:6F:A6:90:3A:86:9E:12:58:A7:5E:8E:8E X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9e:c2:ae:0a:d0:5a:03:ba:41:dc:05:19:7c:db:38:ec:89: 04:fe:40:88:ca:c6:d3:b3:1b:18:f7:d7:5e:d6:4e:e6:99:ac: 10:20:f2:ef:f7:ae:bb:4b:ff:bc:83:99:56:10:a4:ba:d1:c5: 36:f4:27:41:48:80:6e:f6:b5:1b:b5:09:a7:67:f7:ba:f0:46: df:c8:62:4a:5d:b3:e5:26:83:9e:34:03:c0:a5:9a:f3:ac:23: 71:54:ad:66:89:0d:65:8c:71:23:af:0a:97:6c:b9:7a:62:5a: 13:68:1b:82:44:84:cc:e7:73:c3:d0:33:59:12:d4:f0:04:8f: 03:8a:c3:b5:10:57:5c:09:8a:76:5a:3e:b8:53:67:fb:c3:9e: b6:47:ab:3b:9e:dd:8a:55:87:1b:2e:67:51:99:b5:85:e3:3b: 0b:08:6b:2f:97:5b:43:bd:4f:9c:da:54:c9:1e:f2:ee:bd:2c: 1a:c9:f2:44:f6:32:9c:2e:3e:92:12:bd:5f:b7:96:af:50:f5: c7:ca:1e:a1:43:f6:25:5d:4d:ae:22:02:dd:a1:ac:b1:7f:b3: 14:4d:4c:33:00:83:0f:ef:f8:58:67:44:50:b9:99:26:8c:a0: 33:ad:4f:c2:a1:4d:97:90:73:c2:00:2f:85:6f:f0:8f:99:cd: db:61:ba:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUxMDE4MTgyNjE3WhcNMjUxMDI1MTgyNjE3WjAYMRYwFAYD VQQDEw02OGYzZGJjYS01MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqfmpZzE6Xb8guQ846fxoWTnlsmTQU8H/MRKEojNtkLSKEvja0HPCb54tlED nutxL9G1ofgayALBDfq1Yoy3S46nA03C1tplu4ODzqOxM4HcQSk4azBvmB5Xw/b9 uyhVKv3ht4o01gEDoDbjqU0EvSDXmoKo4o144K6Y5llmo11BKeC2dMRtTBwF1/AZ dULPxKHj3dFzVytB8v/u9XYPd4crr3jR9iJTJOdK9cJbzKuW+iom52BoQE73Pd8p gp+lgxexth4WPX4S4tSOh+cp0Gr74T4kXRTY3ZVCLh9YsyDPCrachFDLEQ46NyYV qdRMvz+U1YRcEdeb4bpkB0s32QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiTx4P+ bXKjb6aQOoaeElinXo6OMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBnsKuCtBaA7pB3AUZfNs47IkE/kCIysbTsxsY99de1k7mmawQIPLv 9667S/+8g5lWEKS60cU29CdBSIBu9rUbtQmnZ/e68EbfyGJKXbPlJoOeNAPApZrz rCNxVK1miQ1ljHEjrwqXbLl6YloTaBuCRITM53PD0DNZEtTwBI8DisO1EFdcCYp2 Wj64U2f7w562R6s7nt2KVYcbLmdRmbWF4zsLCGsvl1tDvU+c2lTJHvLuvSwayfJE 9jKcLj6SEr1ft5avUPXHyh6hQ/YlXU2uIgLdoayxf7MUTUwzAIMP7/hYZ0RQuZkm jKAzrU/CoU2XkHPCAC+Fb/CPmc3bYbpb -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:02 2025 by rpki-client