$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft File: fCyheDCTqbmvjuRX2glIgkIVJQs.mft (raw, json) Hash identifier: qOBXjqPPKKkyfP7Cik+4sAusUtbogCsWx4N+cqQ9M6o= Subject key identifier: C7:E9:1E:4D:07:B6:08:2A:18:83:C3:59:BC:19:34:6E:4B:EE:E1:6C Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B Certificate issuer: /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 11:11:53 +0000 Manifest this update: Sun 19 Oct 2025 11:11:53 +0000 Manifest next update: Sun 26 Oct 2025 11:11:53 +0000 Files and hashes: 1: fCyheDCTqbmvjuRX2glIgkIVJQs.crl (hash: 7KMLToyh7+myIHBG5ZEsvlrKe6r2KOPbrbWHww3Z8Qk=) 2: B1B36E8A691911F08409AD61C4F9AE02.roa (hash: MstGvfkW4GBYfFu6ex+YssVwSg/+x1eym31kTHP8Xuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B Validity Not Before: Oct 19 11:11:53 2025 GMT Not After : Oct 26 11:11:53 2025 GMT Subject: CN=68f4c779-c9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:e6:12:07:5d:9a:36:02:4c:c9:96:67:b6: 26:3d:de:b3:2a:f7:9c:86:92:97:4f:9a:da:65:b6: ce:03:a7:47:b6:c4:8a:00:bd:91:ee:bb:b1:fe:2a: 79:6c:58:bd:bc:ba:85:46:ff:ab:70:0b:02:dc:4a: 2d:26:82:27:fa:8b:ce:8c:a7:34:aa:0d:d0:73:1e: 5a:01:88:a9:85:4f:5b:1c:f2:74:cb:e2:02:ad:64: 57:79:63:be:b4:90:35:90:0b:83:96:e9:32:7b:a8: 65:bd:d6:26:d2:eb:89:78:bf:a2:07:22:a8:c3:fe: f4:8d:9a:36:bf:e4:3a:9e:bf:8c:6e:91:de:7f:43: 0e:66:6e:5e:ec:58:18:93:35:5a:83:e3:c6:9c:a6: be:19:90:ac:b4:62:c8:2c:c7:83:5e:0e:3d:3f:01: 3e:f4:5a:1d:3c:f5:8e:27:50:3a:8c:8a:dc:7f:41: e5:ae:52:b0:72:38:37:31:42:b0:6f:50:c7:44:c6: ea:86:f7:eb:9c:9f:cf:8d:3b:33:ec:7c:93:07:d0: 42:1b:43:78:18:59:e1:c0:c7:06:af:e8:ec:9e:0c: 3f:1c:80:38:13:be:c9:bf:b8:79:f8:e3:31:d6:6a: b7:cc:46:5f:72:2a:ac:1b:16:bc:8a:53:24:7f:28: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E9:1E:4D:07:B6:08:2A:18:83:C3:59:BC:19:34:6E:4B:EE:E1:6C X509v3 Authority Key Identifier: keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:27:83:0f:4d:9e:08:9e:4d:8a:78:ff:db:5b:1a:33:e5: ff:b2:fe:12:29:e2:67:45:5a:50:93:5a:56:5d:17:83:8e:0b: cd:19:7c:d6:ce:53:0f:63:59:97:18:15:c8:11:d4:ae:9e:57: 40:df:25:0e:dd:ff:f1:1b:1e:49:1a:cc:e9:32:b3:24:93:f9: f1:f3:20:26:09:e8:c0:da:c0:e7:32:6f:56:39:11:cc:a7:51: 24:b2:78:51:2e:a9:b3:bc:43:9d:8c:8d:5a:90:13:d6:ca:5f: df:b0:4a:93:83:32:9b:02:be:68:f5:85:3e:13:af:1d:2c:c7: 2d:ce:d0:da:e8:84:c9:32:7f:3b:a7:d1:4e:6d:a9:14:6c:c7: d7:ae:07:f9:89:41:18:e3:a0:14:54:d6:46:28:0a:43:4a:eb: 5d:29:64:25:a5:31:b5:6e:3b:1c:3e:74:23:f7:e0:28:02:be: d4:0c:54:c3:c4:ca:85:54:f0:4e:71:43:65:50:44:60:8d:91: cf:78:e8:cf:57:df:d2:0b:11:e2:cf:41:c4:ad:cb:9f:82:f0: 61:e3:08:ed:bb:3b:f4:28:57:87:ee:a9:f1:d0:8c:6a:32:d4: c1:bd:d8:23:f5:b1:d9:e5:aa:53:ab:42:59:22:ac:cd:60:f9: bf:c1:5d:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoN0MyQ0ExNzgzMDkzQTlCOUFGOEVFNDU3REEwOTQ4ODI0 MjE1MjUwQjAeFw0yNTEwMTkxMTExNTNaFw0yNTEwMjYxMTExNTNaMBgxFjAUBgNV BAMTDTY4ZjRjNzc5LWM5Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC28eYSB12aNgJMyZZntiY93rMq95yGkpdPmtplts4Dp0e2xIoAvZHuu7H+Knls WL28uoVG/6twCwLcSi0mgif6i86MpzSqDdBzHloBiKmFT1sc8nTL4gKtZFd5Y760 kDWQC4OW6TJ7qGW91ibS64l4v6IHIqjD/vSNmja/5Dqev4xukd5/Qw5mbl7sWBiT NVqD48acpr4ZkKy0Ysgsx4NeDj0/AT70Wh089Y4nUDqMitx/QeWuUrByODcxQrBv UMdExuqG9+ucn8+NOzPsfJMH0EIbQ3gYWeHAxwav6OyeDD8cgDgTvsm/uHn44zHW arfMRl9yKqwbFryKUyR/KE7rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx+keTQe2 CCoYg8NZvBk0bkvu4WwwHwYDVR0jBBgwFoAUfCyheDCTqbmvjuRX2glIgkIVJQsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0YyOTY2Njg4Njkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL2ZDeWhlRENUcWJtdmp1UlgyZ2xJZ2tJVkpR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZkN5aGVEQ1RxYm12anVSWDJnbElna0lWSlFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0YyOTY2Njg4NjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL2ZDeWhlRENUcWJt dmp1UlgyZ2xJZ2tJVkpRcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCiJ4MPTZ4Ink2KeP/bWxoz5f+y/hIp4mdFWlCTWlZdF4OOC80ZfNbO Uw9jWZcYFcgR1K6eV0DfJQ7d//EbHkkazOkysyST+fHzICYJ6MDawOcyb1Y5Ecyn USSyeFEuqbO8Q52MjVqQE9bKX9+wSpODMpsCvmj1hT4Trx0sxy3O0NrohMkyfzun 0U5tqRRsx9euB/mJQRjjoBRU1kYoCkNK610pZCWlMbVuOxw+dCP34CgCvtQMVMPE yoVU8E5xQ2VQRGCNkc946M9X39ILEeLPQcSty5+C8GHjCO27O/QoV4fuqfHQjGoy 1MG92CP1sdnlqlOrQlkirM1g+b/BXS0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:35 2025 by rpki-client