$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: V2bLPYnwBJoGaIWcqxtZdcnW66AXye0ddUHo4mRbSqM= Subject key identifier: 98:0E:FC:B3:4A:65:8E:D3:09:C0:1C:FB:95:A6:73:15:45:11:58:57 Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 067A Signing time: Sat 18 Oct 2025 23:59:34 +0000 Manifest this update: Sat 18 Oct 2025 23:59:33 +0000 Manifest next update: Sat 25 Oct 2025 23:59:33 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: poccbBCdaBctKP3YSwtWEsg6GhW0eVkTPeq7lwQiUhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: Oct 18 23:59:33 2025 GMT Not After : Oct 25 23:59:33 2025 GMT Subject: CN=68f429e5-6fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6e:a1:4d:4e:95:23:c0:ef:4f:c8:82:03:c7: 32:4b:26:a1:38:ab:08:16:1a:f4:ed:2b:f8:aa:4a: 41:7c:8f:bd:3b:a7:f4:cd:ab:80:c6:62:e8:73:4d: bc:62:12:ac:85:50:dd:99:cb:1e:e6:0a:b5:96:64: 8b:d4:59:40:ae:dd:70:e9:f6:b9:6d:f2:26:8f:ac: 04:74:31:04:9f:a4:70:4a:96:8d:c2:19:18:94:19: 07:15:e1:11:11:fc:b6:61:20:7e:bf:f0:2c:e1:49: ca:a0:c2:38:aa:22:8f:4d:b7:36:cc:ab:b3:ea:d2: 2a:57:d3:a6:88:97:32:68:8b:76:2e:70:3f:42:34: ff:8f:60:23:b9:a2:4d:dc:1c:fb:db:ee:b6:6a:55: 0d:59:bb:42:1a:e2:86:8b:fc:ec:32:cb:11:9e:56: 19:00:4e:af:61:52:86:f1:e9:80:bb:04:fa:ec:0d: 0e:96:2c:22:ce:bf:f9:c3:70:ae:e8:36:7a:ff:f6: 75:2b:2c:0b:2d:8f:10:11:17:ac:6d:b6:46:91:09: 4b:5a:c5:6d:54:d4:0e:36:5b:af:fc:ad:fe:58:49: 47:58:7f:65:47:95:58:74:51:b5:d7:ce:9e:9c:fb: 4a:3e:a9:04:cb:1f:f0:a2:fd:21:f1:b4:ec:cc:76: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0E:FC:B3:4A:65:8E:D3:09:C0:1C:FB:95:A6:73:15:45:11:58:57 X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:58:1c:d7:27:58:0f:ef:fb:e3:7a:94:dd:3d:4d:06:d7:65: c2:6a:90:60:ae:30:10:8a:ab:c8:6c:45:e5:e2:cf:a7:cd:01: 2f:fc:4d:4f:71:39:ca:8e:cc:45:fc:2d:a9:f3:3a:ed:90:01: 22:6f:7f:96:34:88:29:d5:dd:e4:b9:59:21:85:85:b2:2e:a7: 7c:ca:2e:1d:b0:2e:1e:d6:1a:61:a0:5d:d2:67:d4:56:ce:78: 78:61:a5:f0:78:76:58:19:ef:24:67:64:1e:74:ee:bf:0e:d8: 31:db:cf:f3:55:25:65:c6:23:76:4b:71:d4:4d:e3:60:47:8f: 55:51:5e:4c:2a:86:e8:bd:03:58:2d:da:90:ef:ab:e0:a4:26: 77:40:7a:fb:80:59:cb:5d:6b:4a:00:ac:8c:2a:41:d1:ba:40: cf:da:b9:fe:d8:3b:6e:cd:79:36:ec:d0:b7:d6:ae:48:ae:07: 51:6b:98:84:ed:93:b0:3b:b4:f4:21:b3:d2:4e:a6:a7:77:b1: dc:f1:89:1e:38:a6:9b:b6:b6:b9:9b:b4:e0:09:9e:bd:60:59: 67:49:0a:24:2b:5d:15:2f:dd:dd:b0:5d:03:17:4e:c4:d8:d7: 3b:f9:26:5d:8c:02:08:93:a9:d3:b8:85:9d:b2:89:78:70:25: 29:ac:d4:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUxMDE4MjM1OTMzWhcNMjUxMDI1MjM1OTMzWjAYMRYwFAYD VQQDEw02OGY0MjllNS02ZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA826hTU6VI8DvT8iCA8cySyahOKsIFhr07Sv4qkpBfI+9O6f0zauAxmLoc028 YhKshVDdmcse5gq1lmSL1FlArt1w6fa5bfImj6wEdDEEn6RwSpaNwhkYlBkHFeER Efy2YSB+v/As4UnKoMI4qiKPTbc2zKuz6tIqV9OmiJcyaIt2LnA/QjT/j2AjuaJN 3Bz72+62alUNWbtCGuKGi/zsMssRnlYZAE6vYVKG8emAuwT67A0Oliwizr/5w3Cu 6DZ6//Z1KywLLY8QEResbbZGkQlLWsVtVNQONluv/K3+WElHWH9lR5VYdFG1186e nPtKPqkEyx/wov0h8bTszHabWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgO/LNK ZY7TCcAc+5WmcxVFEVhXMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBWBzXJ1gP7/vjepTdPU0G12XCapBgrjAQiqvIbEXl4s+nzQEv/E1P cTnKjsxF/C2p8zrtkAEib3+WNIgp1d3kuVkhhYWyLqd8yi4dsC4e1hphoF3SZ9RW znh4YaXweHZYGe8kZ2QedO6/Dtgx28/zVSVlxiN2S3HUTeNgR49VUV5MKobovQNY LdqQ76vgpCZ3QHr7gFnLXWtKAKyMKkHRukDP2rn+2DtuzXk27NC31q5IrgdRa5iE 7ZOwO7T0IbPSTqand7Hc8YkeOKabtra5m7TgCZ69YFlnSQokK10VL93dsF0DF07E 2Nc7+SZdjAIIk6nTuIWdsol4cCUprNTu -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:14 2025 by rpki-client