$ rpki-client -vvvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: nTg8pIPXGswH12I0WCqMMoznvu8/GtOwdPnGa8Td6d4= Subject key identifier: 98:7A:BC:13:0C:0D:97:8C:75:3D:15:CC:0D:95:EE:C0:62:7E:A1:28 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 0418 Signing time: Wed 23 Sep 2026 00:03:22 +0000 Manifest this update: Wed 23 Sep 2026 00:03:21 +0000 Manifest next update: Wed 30 Sep 2026 00:03:21 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: dYFqaTWEPMLENaMVGRoIuESPYvCGPxDTZ7Vo5Hguw1w=) 2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Sep 23 00:03:21 2026 GMT Not After : Sep 30 00:03:21 2026 GMT Subject: CN=6ab31749-e710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:0b:b7:dd:c2:8d:30:ac:38:e8:53:cf:8a: a3:af:20:29:45:94:c8:a1:c7:5f:59:cf:7f:8f:ea: 06:9c:6c:7f:9b:65:40:34:26:1c:ce:d5:67:de:85: ab:ea:9e:75:56:1d:76:af:36:f3:81:87:92:d9:c3: 37:70:91:8c:25:eb:82:69:6c:a4:db:26:56:49:c9: 2b:8c:f4:ca:ce:07:45:4d:74:7d:d3:dd:bb:6f:34: 84:48:8e:23:64:2a:ae:92:b7:02:88:c6:fe:b8:04: a7:c9:c3:bb:31:b1:29:93:d6:cb:3b:16:6e:16:03: 4f:06:b3:97:23:f3:07:a8:4b:6e:76:31:38:4f:be: 20:07:44:69:5e:fa:35:b0:79:dd:11:c6:c2:27:87: e2:a7:80:cd:23:ff:ab:25:8f:5d:f5:53:e6:72:23: ab:8f:cb:6e:da:4c:8e:01:7f:2c:e6:af:35:3d:40: 47:e9:46:4e:35:f9:b0:82:82:77:99:6c:f1:2d:c9: 08:4d:1a:25:6c:6a:dc:d1:fb:fa:78:6b:5f:4f:2c: f4:22:6a:0e:e1:a4:b5:82:1b:60:aa:cd:a9:67:cc: ec:f0:1d:8b:ab:c2:ef:6c:6c:6a:cf:ca:3d:32:23: a3:8e:a4:89:79:88:f0:b5:27:14:08:66:55:06:62: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:BC:13:0C:0D:97:8C:75:3D:15:CC:0D:95:EE:C0:62:7E:A1:28 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1d:35:89:83:2e:07:6e:82:13:4e:e9:d5:c0:0c:42:ec:97: 74:2b:9f:1a:fa:c2:6c:47:b2:1a:76:e7:9a:08:73:e1:f0:bf: 1c:98:6e:91:20:ef:78:4a:f9:3c:0e:13:37:95:51:da:15:a6: 93:a5:e4:7b:1b:61:6d:2d:20:b8:6c:19:d5:6b:9a:b7:8c:73: c2:b4:88:26:5b:50:bb:0b:0e:13:8a:82:17:ea:00:6e:02:91: 8e:37:c1:80:16:8d:d8:99:b9:bd:4e:3e:f6:ee:2c:86:40:a4: 88:4a:1c:82:67:97:77:04:f2:53:70:9a:46:50:0f:f0:65:d8: 57:16:ca:d2:a1:52:0e:ca:cc:4e:ef:91:d9:96:8b:7e:71:12: 3b:7a:8f:98:09:97:63:09:9e:bf:0e:c8:46:26:db:56:77:0c: d3:f4:72:02:b5:7b:0c:50:26:7f:40:cc:ed:08:82:96:16:82: 97:5d:e1:53:94:17:ae:2b:bb:9c:b9:ce:14:1d:c6:f1:0a:d2: c4:06:2a:98:ca:1d:d4:7c:66:52:df:67:23:f7:27:ed:e3:72: 44:b5:1d:9a:31:3b:2c:85:6e:64:9c:80:4f:21:b1:7a:df:7a: 2b:0a:4f:8e:f8:2f:62:ab:be:81:40:fc:30:52:3d:ee:ff:9b: 26:73:9e:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwOTIzMDAwMzIxWhcNMjYwOTMwMDAwMzIxWjAYMRYwFAYD VQQDEw02YWIzMTc0OS1lNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzwLt93CjTCsOOhTz4qjryApRZTIocdfWc9/j+oGnGx/m2VANCYcztVn3oWr 6p51Vh12rzbzgYeS2cM3cJGMJeuCaWyk2yZWSckrjPTKzgdFTXR90927bzSESI4j ZCqukrcCiMb+uASnycO7MbEpk9bLOxZuFgNPBrOXI/MHqEtudjE4T74gB0RpXvo1 sHndEcbCJ4fip4DNI/+rJY9d9VPmciOrj8tu2kyOAX8s5q81PUBH6UZONfmwgoJ3 mWzxLckITRolbGrc0fv6eGtfTyz0ImoO4aS1ghtgqs2pZ8zs8B2Lq8LvbGxqz8o9 MiOjjqSJeYjwtScUCGZVBmKnJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJh6vBMM DZeMdT0VzA2V7sBifqEoMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVR01iYMuB26CE07p1cAMQuyXdCufGvrCbEeyGnbnmghz4fC/HJhukSDveEr5 PA4TN5VR2hWmk6XkexthbS0guGwZ1Wuat4xzwrSIJltQuwsOE4qCF+oAbgKRjjfB gBaN2Jm5vU4+9u4shkCkiEocgmeXdwTyU3CaRlAP8GXYVxbK0qFSDsrMTu+R2ZaL fnESO3qPmAmXYwmevw7IRibbVncM0/RyArV7DFAmf0DM7QiClhaCl13hU5QXriu7 nLnOFB3G8QrSxAYqmMod1HxmUt9nI/cn7eNyRLUdmjE7LIVuZJyATyGxet96KwpP jvgvYqu+gUD8MFI97v+bJnOeBw== -----END CERTIFICATE-----Generated at Thu Sep 24 14:33:13 2026 by rpki-client