$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: 4AAG+z4id6Y2FxxNL/x/a+kWCAi9STfnMqGoBHdMD/Y= Subject key identifier: 14:F8:98:C1:0A:D7:5D:E6:BD:02:17:7E:52:BF:A6:EA:E2:D5:0B:84 Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 0C Signing time: Sun 19 Oct 2025 11:35:14 +0000 Manifest this update: Sun 19 Oct 2025 11:35:14 +0000 Manifest next update: Sun 26 Oct 2025 11:35:13 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: nsfovzHf0ZFC06MraFdGkt+ikaCuxX0STg6RgH1YByM=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: /OONPuUDLnHhTMEraEKTABbJUmrt5brSg9FbXWyrZbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Oct 19 11:35:14 2025 GMT Not After : Oct 26 11:35:13 2025 GMT Subject: CN=68f4ccf2-305b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:be:15:90:cb:33:8a:cb:7d:a5:d3:b1:4a: c6:37:d2:5b:47:af:76:8f:3c:cd:05:01:f1:26:2c: 6b:eb:bc:17:fb:4c:d4:82:69:42:cd:15:0c:9a:75: af:38:8c:3a:dc:78:af:64:46:70:7c:b9:e3:d5:16: 70:85:7f:cd:ea:42:d5:df:c3:62:fb:89:ae:ba:3e: 8a:00:16:8a:1f:e3:ff:ea:e7:7d:a4:49:58:78:79: 38:e7:bc:65:4e:e9:fb:e5:67:d3:67:6e:f8:0b:43: 43:c5:ff:f2:f1:38:cd:b9:de:06:36:f0:26:69:e4: 10:6c:06:27:4c:14:f2:78:7a:c8:4a:19:e8:b8:de: 56:71:4f:0b:1c:1d:61:21:00:c7:74:16:73:c0:3b: 74:db:80:35:b0:51:79:0e:f9:bf:a1:f8:22:81:60: d5:dc:b1:1d:f8:ff:77:a6:ba:03:7e:9a:7a:ad:76: b6:9a:4c:3d:45:f5:3f:d5:56:fb:d1:12:53:13:d6: 5b:fa:93:2a:1f:57:14:14:b1:b4:0d:6f:ab:a0:14: 31:f5:ca:b4:f1:b2:0d:63:f6:fa:5f:70:69:a7:ec: 9d:13:e9:0c:8f:a9:6f:35:87:f3:7b:41:a5:1a:60: 1f:b3:8a:17:b0:f5:ad:a1:45:fa:b3:0f:d5:9c:13: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F8:98:C1:0A:D7:5D:E6:BD:02:17:7E:52:BF:A6:EA:E2:D5:0B:84 X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:60:80:28:22:ca:d1:b5:f7:7c:a0:f6:01:29:9d:1b:6c:83: 07:80:4c:58:2a:eb:0f:5a:8a:80:50:28:39:a4:6f:53:3f:77: e8:9a:03:0d:f2:f0:e9:a9:b3:20:da:7b:5d:dc:f2:d5:5d:b0: 78:19:de:51:11:8d:b0:a0:d4:f1:a7:90:b3:2f:61:01:13:e1: 4d:35:6d:e5:cb:17:ba:b3:b3:f0:0c:73:a6:33:46:de:aa:67: e9:92:02:c6:5f:1a:37:b0:30:86:a6:f1:33:3a:8f:d5:8e:68: b8:15:f6:42:64:3a:fd:88:29:57:83:1d:17:35:9d:7b:5f:18: 07:55:3c:8e:d1:04:99:d8:c0:b4:b9:99:fd:31:21:66:32:68: cd:45:bf:21:b0:76:0b:1f:bd:c2:f8:50:9d:55:e8:8a:32:30: 9e:7a:c1:38:ba:79:8b:06:3c:d6:01:a0:cf:f8:30:6a:27:31: 85:59:dc:fe:50:e2:de:6d:c0:49:ef:f2:17:82:51:47:89:a5: 90:f4:9a:6f:59:64:74:fd:3b:bf:84:9e:df:2e:fd:08:8b:7b: ad:fb:45:53:06:5d:db:56:f4:5c:ed:6c:ff:68:f3:7b:67:32: ef:2f:55:f1:ea:28:78:88:6c:e4:50:06:18:cc:6d:82:9d:4f: 6c:27:15:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoNzQ1MDM2MDk3NDI5Q0MxQUM3NkM0Qzk5ODk4RDA2Rjgz RTA3NUMxMzAeFw0yNTEwMTkxMTM1MTRaFw0yNTEwMjYxMTM1MTNaMBgxFjAUBgNV BAMTDTY4ZjRjY2YyLTMwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8KL4VkMszist9pdOxSsY30ltHr3aPPM0FAfEmLGvrvBf7TNSCaULNFQyada84 jDrceK9kRnB8uePVFnCFf83qQtXfw2L7ia66PooAFoof4//q532kSVh4eTjnvGVO 6fvlZ9NnbvgLQ0PF//LxOM253gY28CZp5BBsBidMFPJ4eshKGei43lZxTwscHWEh AMd0FnPAO3TbgDWwUXkO+b+h+CKBYNXcsR34/3emugN+mnqtdraaTD1F9T/VVvvR ElMT1lv6kyofVxQUsbQNb6ugFDH1yrTxsg1j9vpfcGmn7J0T6QyPqW81h/N7QaUa YB+zihew9a2hRfqzD9WcE0+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFPiYwQrX Xea9Ahd+Ur+m6uLVC4QwHwYDVR0jBBgwFoAUdFA2CXQpzBrHbEyZiY0G+D4HXBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5L0ZGOTA5MjhDOUNG ODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEZBMkNYUXB6QnJIYkV5WmlZMEctRDRIWEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5L0ZGOTA5MjhDOUNGODExRjA4ODEyREUxRUM0RjlBRTAyL2RGQTJDWFFwekJy SGJFeVppWTBHLUQ0SFhCTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAVggCgiytG193yg9gEpnRtsgweATFgq6w9aioBQKDmkb1M/d+iaAw3y 8OmpsyDae13c8tVdsHgZ3lERjbCg1PGnkLMvYQET4U01beXLF7qzs/AMc6YzRt6q Z+mSAsZfGjewMIam8TM6j9WOaLgV9kJkOv2IKVeDHRc1nXtfGAdVPI7RBJnYwLS5 mf0xIWYyaM1FvyGwdgsfvcL4UJ1V6IoyMJ56wTi6eYsGPNYBoM/4MGonMYVZ3P5Q 4t5twEnv8heCUUeJpZD0mm9ZZHT9O7+Ent8u/QiLe637RVMGXdtW9FztbP9o83tn Mu8vVfHqKHiIbORQBhjMbYKdT2wnFXY= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:41 2025 by rpki-client