$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: ykQFnx3NPiIkjkCBxs7H0y/E71bV9FsQ2rrrGrpg6eE= Subject key identifier: 2B:CF:FF:74:6A:CC:2A:EB:57:B9:E2:CE:65:D3:E0:AF:6B:A3:AF:F6 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 021A Signing time: Sun 19 Oct 2025 04:28:09 +0000 Manifest this update: Sun 19 Oct 2025 04:28:08 +0000 Manifest next update: Sun 26 Oct 2025 04:28:08 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: 5vQrvIS6rzwx399rfn6vO1ffTrM5nwRSp04+n4NUDPE=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Oct 19 04:28:08 2025 GMT Not After : Oct 26 04:28:08 2025 GMT Subject: CN=68f468d8-fc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:a4:63:77:be:21:c9:7a:08:34:b7:43:ff: ce:94:e7:73:ae:5e:2f:64:60:ca:66:76:e2:bd:f2: 01:7f:50:a2:65:cf:1b:5b:7c:52:8a:a2:84:7a:9a: ce:e0:fb:f4:13:5e:15:30:d9:e7:7b:ed:83:52:bb: 9a:ec:e9:70:3a:34:1d:de:64:6f:4d:0a:b3:28:77: 45:2d:bf:69:3d:3b:4d:7e:6f:49:93:d3:0f:f5:33: 12:ba:8e:95:3d:5e:b0:88:07:44:8d:8d:7b:56:8d: 21:d1:22:28:5c:b2:dd:92:e2:ac:9d:14:92:fd:dc: 0a:0b:b1:78:35:c0:11:c4:c8:81:28:b1:32:9d:56: bf:69:0b:f2:25:d3:a2:0b:19:d1:6f:a4:35:02:77: f9:92:7e:8f:c7:63:19:43:cb:70:4d:82:84:6f:4d: dc:ca:67:de:54:82:26:ca:c5:4d:b1:99:4e:9b:c7: 39:ea:ef:1f:75:ce:7d:2e:67:7c:92:ac:05:7c:b5: 33:b7:0c:49:5b:ed:c9:9a:f9:dc:79:37:35:b8:b9: 61:b1:37:df:9c:4a:bf:a5:00:3d:73:08:af:38:12: 41:45:94:42:b0:78:80:e2:b4:4f:bf:f0:8c:10:bd: 9d:0f:4a:cc:5c:40:28:ee:11:39:b6:cc:93:d8:8e: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CF:FF:74:6A:CC:2A:EB:57:B9:E2:CE:65:D3:E0:AF:6B:A3:AF:F6 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:cb:fa:73:cd:ee:af:26:8e:f5:57:98:20:bd:87:a2:86:9a: 83:ee:c1:c2:ee:be:af:9f:ce:da:54:27:79:92:4f:78:4b:28: 34:4f:c5:44:73:6a:08:a4:c3:c7:b6:36:6f:c7:3d:80:88:d8: bb:3f:bc:64:ca:92:57:92:de:89:34:60:7a:c3:91:29:bc:da: 99:95:d0:0b:03:0c:1c:f3:1e:fa:3a:00:47:c1:9e:8d:15:9b: 43:10:d4:4c:00:1a:09:d8:2c:2c:8d:e3:55:1f:86:d9:78:ab: bf:fc:c2:4d:83:d5:98:be:1a:15:e5:6a:18:49:c5:c6:69:34: 53:f5:04:cf:58:68:2f:cb:08:9b:96:55:e3:03:30:65:f4:e3: f1:02:79:8f:d7:5f:90:75:13:b2:fb:0e:9a:56:3c:15:42:e8: bb:5a:57:ec:6a:94:54:3b:65:3c:f7:21:3d:7e:09:90:a3:fc: cb:a7:66:23:9e:67:3a:3e:93:52:3e:62:2e:4c:e7:46:3f:5c: 8d:f9:cb:ea:1b:af:4b:c7:a7:a8:76:a6:eb:d7:12:9d:ff:9f: 97:4f:10:7b:ee:08:b1:d0:86:6b:11:34:59:c4:25:b7:94:da: a7:38:67:ec:21:e5:e3:06:0a:2d:18:65:5b:7d:6c:2e:93:36: f8:7a:dc:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUxMDE5MDQyODA4WhcNMjUxMDI2MDQyODA4WjAYMRYwFAYD VQQDEw02OGY0NjhkOC1mYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufekY3e+Icl6CDS3Q//OlOdzrl4vZGDKZnbivfIBf1CiZc8bW3xSiqKEeprO 4Pv0E14VMNnne+2DUrua7OlwOjQd3mRvTQqzKHdFLb9pPTtNfm9Jk9MP9TMSuo6V PV6wiAdEjY17Vo0h0SIoXLLdkuKsnRSS/dwKC7F4NcARxMiBKLEynVa/aQvyJdOi CxnRb6Q1Anf5kn6Px2MZQ8twTYKEb03cymfeVIImysVNsZlOm8c56u8fdc59Lmd8 kqwFfLUztwxJW+3JmvnceTc1uLlhsTffnEq/pQA9cwivOBJBRZRCsHiA4rRPv/CM EL2dD0rMXEAo7hE5tsyT2I7B8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvP/3Rq zCrrV7nizmXT4K9ro6/2MB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmy/pzze6vJo71V5ggvYeihpqD7sHC7r6vn87aVCd5kk94Syg0T8VE c2oIpMPHtjZvxz2AiNi7P7xkypJXkt6JNGB6w5EpvNqZldALAwwc8x76OgBHwZ6N FZtDENRMABoJ2CwsjeNVH4bZeKu//MJNg9WYvhoV5WoYScXGaTRT9QTPWGgvywib llXjAzBl9OPxAnmP11+QdROy+w6aVjwVQui7WlfsapRUO2U89yE9fgmQo/zLp2Yj nmc6PpNSPmIuTOdGP1yN+cvqG69Lx6eodqbr1xKd/5+XTxB77gix0IZrETRZxCW3 lNqnOGfsIeXjBgotGGVbfWwukzb4etwZ -----END CERTIFICATE-----Generated at Mon Oct 20 15:09:31 2025 by rpki-client