$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: xcTyfIrkxPc/yWqFtFMGPtHUgJISEUkPvg5HRB36NzU= Subject key identifier: 79:14:FD:A4:F8:ED:E9:BF:FD:6C:32:76:E5:91:F3:5A:23:1C:68:6F Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1C1C Signing time: Sat 18 Oct 2025 16:33:29 +0000 Manifest this update: Sat 18 Oct 2025 16:33:29 +0000 Manifest next update: Sat 25 Oct 2025 16:33:29 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: grd0JNpOG324GdjJRCvGCPsEfy0MFPNugsi91m+/hwM=) 2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=) 3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=) 4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7230 (0x1c3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Oct 18 16:33:29 2025 GMT Not After : Oct 25 16:33:29 2025 GMT Subject: CN=68f3c159-a5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:51:91:4b:c8:bb:14:9e:70:3b:11:2c:13: 93:2f:07:c8:fa:58:ad:36:49:98:1d:cb:79:51:27: c5:41:c0:c7:ec:e7:ed:a8:dd:7b:17:32:9d:13:f7: 52:f7:be:ba:7e:d9:6c:9b:f7:68:f8:5f:fa:41:2e: 67:a7:73:7d:e1:19:27:54:c4:7b:33:cd:9b:67:93: 69:da:8a:8c:ae:18:f7:75:66:f4:d9:03:87:02:7d: 74:a7:47:cd:34:2b:27:4b:25:42:73:aa:80:1c:18: 23:a7:85:2a:49:73:06:c7:5b:f8:74:ae:b5:fe:a5: 78:33:91:df:a8:02:e9:1f:6c:83:94:93:4c:14:8b: 52:7a:4f:b4:80:73:61:cc:bb:b2:d5:a5:3a:c3:cd: 36:37:52:8d:1b:b0:0a:ab:f1:c0:14:5c:1e:7e:c8: e8:75:64:65:f1:e3:2a:93:a7:17:20:19:47:be:1c: 75:ec:70:f5:c7:67:5a:06:bf:5b:73:38:7e:f0:98: 32:cf:4c:ff:de:4f:d4:82:78:d0:82:05:90:27:5e: 16:dd:ac:da:e9:54:59:ad:fd:a2:d3:f2:fa:cb:02: 4a:01:82:23:c1:8b:49:45:e0:52:86:41:e8:de:e6: 92:c6:e4:74:94:b9:cb:6b:43:51:d5:40:9b:43:95: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:14:FD:A4:F8:ED:E9:BF:FD:6C:32:76:E5:91:F3:5A:23:1C:68:6F X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:ee:a3:22:a2:4b:26:dc:e5:60:15:9d:60:e1:6c:07:e8:63: 36:bf:1b:17:b4:e3:82:41:7e:0c:74:61:7a:ee:94:8d:e3:ca: 5b:aa:69:88:d0:9b:7e:58:c3:a9:41:49:24:a6:f4:04:24:9c: 8d:00:ba:f4:f5:61:38:12:b7:0e:05:2f:58:8e:9c:3c:05:42: b8:17:2f:be:af:5c:ed:54:5e:06:28:17:dc:46:97:1d:38:e1: 80:56:30:8b:f6:02:e0:a0:83:eb:06:1e:03:6c:72:e9:4a:37: 8c:43:8b:f1:1a:67:cf:3b:1d:99:99:3b:37:0c:8b:4a:25:c8: a4:14:3f:42:0e:01:35:19:e1:ea:8b:8a:0b:40:c2:a8:fa:bd: 00:c0:c1:08:68:58:03:2c:ad:18:c6:9b:c7:8c:60:ac:37:f2: ed:e8:01:70:37:f4:3c:8b:aa:76:37:9c:f6:9e:aa:c1:67:90: 65:88:d1:77:02:1b:e0:09:23:75:92:7b:42:a0:dc:66:33:f9: 28:ed:ec:0c:e6:6b:26:2a:a8:7a:3b:9f:67:cd:50:f3:d1:76: 6f:84:ea:e0:18:44:0c:d3:f3:b9:42:3b:55:02:82:ad:73:9d: ba:f9:09:48:7d:e9:5c:2c:28:3d:71:0c:aa:81:c4:8d:27:e5: 5e:34:d6:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjUxMDE4MTYzMzI5WhcNMjUxMDI1MTYzMzI5WjAYMRYwFAYD VQQDEw02OGYzYzE1OS1hNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyepRkUvIuxSecDsRLBOTLwfI+litNkmYHct5USfFQcDH7OftqN17FzKdE/dS 9766ftlsm/do+F/6QS5np3N94RknVMR7M82bZ5Np2oqMrhj3dWb02QOHAn10p0fN NCsnSyVCc6qAHBgjp4UqSXMGx1v4dK61/qV4M5HfqALpH2yDlJNMFItSek+0gHNh zLuy1aU6w802N1KNG7AKq/HAFFwefsjodWRl8eMqk6cXIBlHvhx17HD1x2daBr9b czh+8Jgyz0z/3k/UgnjQggWQJ14W3aza6VRZrf2i0/L6ywJKAYIjwYtJReBShkHo 3uaSxuR0lLnLa0NR1UCbQ5V+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkU/aT4 7em//WwyduWR81ojHGhvMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC47qMioksm3OVgFZ1g4WwH6GM2vxsXtOOCQX4MdGF67pSN48pbqmmI 0Jt+WMOpQUkkpvQEJJyNALr09WE4ErcOBS9Yjpw8BUK4Fy++r1ztVF4GKBfcRpcd OOGAVjCL9gLgoIPrBh4DbHLpSjeMQ4vxGmfPOx2ZmTs3DItKJcikFD9CDgE1GeHq i4oLQMKo+r0AwMEIaFgDLK0YxpvHjGCsN/Lt6AFwN/Q8i6p2N5z2nqrBZ5BliNF3 AhvgCSN1kntCoNxmM/ko7ewM5msmKqh6O59nzVDz0XZvhOrgGEQM0/O5QjtVAoKt c526+QlIfelcLCg9cQyqgcSNJ+VeNNak -----END CERTIFICATE-----Generated at Mon Oct 20 00:31:29 2025 by rpki-client