$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: OzW/8Dj9UjXSmyWMGDiU1hKfe8cLB6ZCsImo9MTNZ/Q= Subject key identifier: 17:D6:05:7E:C4:A7:3B:D0:46:C8:A6:47:8C:49:B6:A7:85:50:FB:B6 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 7F Signing time: Sun 19 Oct 2025 10:00:56 +0000 Manifest this update: Sun 19 Oct 2025 10:00:55 +0000 Manifest next update: Sun 26 Oct 2025 10:00:55 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 2ykuGqESHfFxUUHqSsyD0dN1OFdjhGeUWTsldiP4340=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Oct 19 10:00:55 2025 GMT Not After : Oct 26 10:00:55 2025 GMT Subject: CN=68f4b6d7-2b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:9f:80:cd:1a:36:e6:2d:db:e3:c1:86:78: 31:a9:fe:32:cf:9c:fb:42:5c:50:dd:ec:03:92:02: 49:c5:31:9e:92:b9:62:73:51:26:72:cc:a4:b5:b4: c4:4a:f9:16:ff:a1:76:f0:f7:8b:d2:c9:6e:52:9b: 70:53:93:47:fc:44:34:c8:e3:a7:23:17:fe:94:5d: 2d:f9:35:91:3e:ed:74:0f:12:9c:ef:37:40:80:f2: 67:65:82:6a:ec:ad:17:63:35:67:f3:d8:ca:b9:e7: fb:9c:c3:14:a2:5e:5a:26:e1:7b:fd:ec:76:c9:b0: ea:58:db:5f:fd:4a:6e:bd:4a:f9:70:14:cc:78:bd: 48:d9:0d:3e:a9:d4:43:6a:51:69:f2:f0:e8:23:b4: 6a:2f:49:d8:97:fe:b7:73:dc:39:fb:68:c1:ce:6b: 4d:b8:14:41:dc:87:e9:ec:10:d3:6d:48:ba:5a:61: c3:ac:7a:8b:ec:5a:b8:ac:aa:4f:ab:fb:df:f7:de: e0:6d:29:cb:62:16:01:63:a7:c9:73:c3:14:52:75: f6:69:b3:d1:16:cc:cd:cf:e2:34:e6:84:c9:98:7a: af:ca:d8:b8:4b:06:54:0e:32:25:f4:1d:a0:fb:38: 0f:2f:c1:1e:b2:01:fa:90:a9:60:00:8c:65:7c:db: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:05:7E:C4:A7:3B:D0:46:C8:A6:47:8C:49:B6:A7:85:50:FB:B6 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c7:f5:b7:ba:52:0c:84:62:ab:af:22:6c:c7:c6:23:69:0d: 54:b6:90:a5:bf:90:f8:62:21:44:cc:37:77:e2:94:5a:81:2a: e1:09:3e:19:78:65:12:f1:1a:c7:a1:82:0c:49:2a:28:8d:43: 9b:f1:a3:06:cf:e4:3c:3d:48:28:ee:ae:63:ee:6a:27:8e:c7: b2:9d:58:73:05:49:7a:90:d9:e2:91:22:22:a3:0c:03:0a:36: 2b:de:02:cb:d5:95:aa:31:42:24:82:1f:6a:f5:a4:69:bd:ae: 0e:4f:34:1c:f9:56:9f:04:4f:d4:dd:44:9c:a5:99:3d:35:1a: 16:9a:66:23:e4:e4:14:57:56:a3:41:21:30:71:ed:63:e9:7e: cb:7d:85:6e:60:39:1c:6c:46:9e:8e:cc:2f:52:15:d3:7f:d9: 09:cd:3c:ed:2c:f6:dc:f1:f7:e7:dc:5b:e7:a1:97:f0:e6:78: 6e:9e:52:d4:d6:43:ef:16:5e:d7:cf:cd:76:14:7d:b6:99:cb: 01:f2:1e:51:31:33:0c:6f:75:87:ae:a1:32:23:26:d2:88:b0: b9:e4:35:e0:06:81:6a:6b:e1:6e:c7:96:ad:ec:a1:0b:6e:d2: be:a9:8e:e6:1d:da:e3:22:7b:00:8d:82:17:61:b5:0b:30:a2: 7d:d7:b4:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI3NTkxMTAvBgNVBAUTKEZCNEI2ODNGQkE0REI2QUMxQTVBQzUwODgwN0ZDN0VB NDk2QzVFQzUwHhcNMjUxMDE5MTAwMDU1WhcNMjUxMDI2MTAwMDU1WjAYMRYwFAYD VQQDEw02OGY0YjZkNy0yYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMqfgM0aNuYt2+PBhngxqf4yz5z7QlxQ3ewDkgJJxTGekrlic1EmcsyktbTE SvkW/6F28PeL0sluUptwU5NH/EQ0yOOnIxf+lF0t+TWRPu10DxKc7zdAgPJnZYJq 7K0XYzVn89jKuef7nMMUol5aJuF7/ex2ybDqWNtf/UpuvUr5cBTMeL1I2Q0+qdRD alFp8vDoI7RqL0nYl/63c9w5+2jBzmtNuBRB3Ifp7BDTbUi6WmHDrHqL7Fq4rKpP q/vf997gbSnLYhYBY6fJc8MUUnX2abPRFszNz+I05oTJmHqvyti4SwZUDjIl9B2g +zgPL8EesgH6kKlgAIxlfNsLcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfWBX7E pzvQRsimR4xJtqeFUPu2MB8GA1UdIwQYMBaAFPtLaD+6TbasGlrFCIB/x+pJbF7F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qjc1OS82OUMzQkVFNkVC NjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRxd2FXc1VJZ0hfSDZrbHNY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qjc1OS82OUMzQkVFNkVCNjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRx d2FXc1VJZ0hfSDZrbHNYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwx/W3ulIMhGKrryJsx8YjaQ1UtpClv5D4YiFEzDd34pRagSrhCT4Z eGUS8RrHoYIMSSoojUOb8aMGz+Q8PUgo7q5j7monjseynVhzBUl6kNnikSIiowwD CjYr3gLL1ZWqMUIkgh9q9aRpva4OTzQc+VafBE/U3UScpZk9NRoWmmYj5OQUV1aj QSEwce1j6X7LfYVuYDkcbEaejswvUhXTf9kJzTztLPbc8ffn3FvnoZfw5nhunlLU 1kPvFl7Xz812FH22mcsB8h5RMTMMb3WHrqEyIybSiLC55DXgBoFqa+Fux5at7KEL btK+qY7mHdrjInsAjYIXYbULMKJ917QU -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:39 2025 by rpki-client