$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: /K1nxMxsJ+ocF69lQclzwUYv59SANf07FkUGdqMIfeY= Subject key identifier: 4A:DE:DF:79:1A:40:96:7A:1A:71:2D:0E:10:66:48:07:F2:54:2F:61 Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 0175 Signing time: Sun 19 Oct 2025 06:29:34 +0000 Manifest this update: Sun 19 Oct 2025 06:29:34 +0000 Manifest next update: Sun 26 Oct 2025 06:29:34 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: A0HKiEdgA/Y/KWI9p4euiKjNMTb3hoUvAHtQkXAp7gw=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: Oct 19 06:29:34 2025 GMT Not After : Oct 26 06:29:34 2025 GMT Subject: CN=68f4854e-10c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:ac:d1:26:bd:a8:53:a0:62:75:25:37:36: 3c:a5:b4:9d:00:95:2e:ad:8e:cf:20:0f:da:de:7a: 56:1b:3a:18:74:57:ff:a1:10:65:2d:81:08:43:39: bd:ca:aa:f0:ec:f9:e4:39:a2:df:0c:89:32:79:d9: ed:cb:b6:65:56:4a:0d:b8:5d:65:9f:1e:56:f5:75: 9c:7a:34:81:7b:7f:cc:16:c3:35:a0:0c:ac:c9:81: 05:a2:d1:12:06:07:75:07:9b:46:c8:2a:5d:82:1d: b3:41:5c:58:c7:97:6a:70:dd:72:59:26:3d:9a:82: f4:38:ef:63:f1:00:86:6f:ad:cf:41:30:00:ab:47: 75:60:77:92:b2:e2:21:51:15:c0:c8:42:23:ad:2e: 32:0c:19:70:01:d8:3f:fe:83:cd:96:ad:40:e5:58: 8b:00:53:27:ce:9a:2b:95:1c:9c:8f:6c:08:b7:a9: dd:1c:50:5b:17:11:af:4e:42:a4:cd:6e:9b:77:ba: 8a:af:fe:ec:5e:25:9b:0d:e3:02:55:70:ab:30:0d: c9:4e:bf:03:b6:3d:d4:ad:8c:73:7e:b9:d7:d4:fa: e9:33:64:0d:a3:d1:33:8f:94:48:c7:dc:7a:78:3c: a0:8a:f8:0a:0c:d2:96:42:34:b0:56:bd:1a:67:91: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DE:DF:79:1A:40:96:7A:1A:71:2D:0E:10:66:48:07:F2:54:2F:61 X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:85:0b:fd:39:e2:bc:8b:33:03:f8:7f:28:42:53:27:cf:df: 84:4c:f2:e0:fe:3b:c5:b1:21:1d:db:54:6e:83:78:bc:3e:92: ee:00:c0:1c:d4:1f:6e:30:f7:6c:ab:b2:22:4b:eb:9e:5c:ff: 0d:17:bb:1e:20:ae:6e:f3:f4:6e:f5:79:ff:8e:ea:9f:2a:58: da:05:32:5d:64:54:4e:83:c1:64:88:55:f1:af:ee:82:ce:b4: b1:74:13:3f:44:c9:43:5a:24:d5:83:5b:f1:56:7c:b8:73:84: 05:a3:c4:ab:16:49:9c:80:27:52:bd:73:9d:a9:63:2c:18:bd: 2c:06:3b:ce:26:29:2f:66:1a:ec:66:b4:82:94:a1:fc:2d:ae: 61:c1:54:8c:e6:91:ac:d1:9e:0c:1b:79:55:96:b3:f4:3e:ee: 6a:7a:ca:73:a0:9d:96:db:9b:78:ea:11:e8:51:23:e4:65:e8: 89:e1:05:b0:d5:55:61:92:6f:d0:24:69:26:62:47:89:be:a6: 6e:da:5f:f9:26:29:de:2c:69:e9:ed:9e:8b:75:e0:5b:aa:d7: 1e:f8:95:81:9e:d5:38:ee:80:1a:46:85:f1:9c:82:56:fa:1c: 17:55:fd:d8:cc:64:43:4a:74:53:1c:0a:70:ea:f6:83:27:ee: 1a:23:77:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUxMDE5MDYyOTM0WhcNMjUxMDI2MDYyOTM0WjAYMRYwFAYD VQQDEw02OGY0ODU0ZS0xMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs2s0Sa9qFOgYnUlNzY8pbSdAJUurY7PIA/a3npWGzoYdFf/oRBlLYEIQzm9 yqrw7PnkOaLfDIkyednty7ZlVkoNuF1lnx5W9XWcejSBe3/MFsM1oAysyYEFotES Bgd1B5tGyCpdgh2zQVxYx5dqcN1yWSY9moL0OO9j8QCGb63PQTAAq0d1YHeSsuIh URXAyEIjrS4yDBlwAdg//oPNlq1A5ViLAFMnzporlRycj2wIt6ndHFBbFxGvTkKk zW6bd7qKr/7sXiWbDeMCVXCrMA3JTr8Dtj3UrYxzfrnX1PrpM2QNo9Ezj5RIx9x6 eDygivgKDNKWQjSwVr0aZ5EHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEre33ka QJZ6GnEtDhBmSAfyVC9hMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8hQv9OeK8izMD+H8oQlMnz9+ETPLg/jvFsSEd21Rug3i8PpLuAMAc 1B9uMPdsq7IiS+ueXP8NF7seIK5u8/Ru9Xn/juqfKljaBTJdZFROg8FkiFXxr+6C zrSxdBM/RMlDWiTVg1vxVny4c4QFo8SrFkmcgCdSvXOdqWMsGL0sBjvOJikvZhrs ZrSClKH8La5hwVSM5pGs0Z4MG3lVlrP0Pu5qespzoJ2W25t46hHoUSPkZeiJ4QWw 1VVhkm/QJGkmYkeJvqZu2l/5JineLGnp7Z6LdeBbqtce+JWBntU47oAaRoXxnIJW +hwXVf3YzGRDSnRTHApw6vaDJ+4aI3eV -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:09 2025 by rpki-client