$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: NzZ0vueElY+xcdm2Yzcmqg9k2UuJ39oIPYlG0NPw5fs= Subject key identifier: C7:3A:47:D2:D1:21:4E:C6:DE:AA:D3:BF:47:AE:7F:26:A8:7A:AD:A7 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 0153 Signing time: Sun 19 Oct 2025 06:52:22 +0000 Manifest this update: Sun 19 Oct 2025 06:52:21 +0000 Manifest next update: Sun 26 Oct 2025 06:52:21 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: zqVHhtieKVsfDLx+HPNOvFbAAl2t4hPvbgxGp3d6zqk=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Oct 19 06:52:21 2025 GMT Not After : Oct 26 06:52:21 2025 GMT Subject: CN=68f48aa6-ccdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:9f:b6:3e:cd:13:9a:3a:80:d6:ac:e3:37: 1c:44:e0:03:42:97:24:dd:47:7d:24:1c:50:a6:2d: fb:03:5a:64:70:61:79:0b:b6:ab:2a:9b:40:93:4e: 89:01:fb:d0:b1:54:3d:b1:27:45:67:53:80:c3:ee: ab:29:41:51:dc:da:1f:23:66:b8:52:70:cf:31:55: d4:7f:42:5b:12:3a:82:a1:09:b9:9a:4b:a9:d7:29: d1:f5:32:4d:96:6c:69:fa:30:b5:10:89:ab:e4:a7: 39:fc:d0:36:2d:79:97:a9:18:84:27:37:cf:b3:28: c7:f1:5e:00:9e:b1:6f:fa:1e:38:c9:1a:fd:9f:ed: f5:ab:4e:c1:f1:c9:6e:07:49:9c:e8:4e:e7:3f:e2: 65:a3:2e:f8:f6:49:02:80:40:e0:b1:c1:4d:ca:9f: 8b:cd:ad:de:1d:70:ee:33:1a:b1:09:3e:0a:3e:e0: 46:e9:61:04:18:c8:27:5d:da:b5:c4:5d:47:7c:d1: aa:a2:c2:b5:eb:9c:4e:53:60:f8:b9:b4:86:70:8d: 19:d2:11:e5:74:a2:81:87:6a:45:ba:9a:38:02:6c: 23:ff:0a:0d:c1:ba:f6:68:7a:3c:e0:29:64:29:55: 7b:b8:5c:93:ec:b1:96:f8:79:23:f1:62:d4:a5:bb: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:47:D2:D1:21:4E:C6:DE:AA:D3:BF:47:AE:7F:26:A8:7A:AD:A7 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1c:f9:fd:f2:d1:d5:17:d3:57:66:38:d8:46:ab:a9:01:89: ca:17:30:05:8f:f4:f7:51:fd:f7:a7:c7:28:0c:82:3c:e8:95: d8:17:58:24:39:e7:a5:dc:03:41:4d:ca:73:cc:ce:ee:43:84: 50:b7:a6:43:d7:10:8e:87:4d:43:d9:77:e9:0f:31:08:b9:5a: 73:54:6b:5c:94:d6:23:49:77:37:8a:43:eb:9a:81:fb:4f:6a: 5c:89:a2:d2:0b:b7:88:ba:53:e6:c9:92:e1:71:d7:91:ed:40: db:d8:95:e0:5f:92:07:f8:0b:61:b8:9a:51:85:a8:4d:29:5c: f7:91:a9:11:f8:dd:07:fe:90:65:53:15:bc:6c:55:f1:50:1a: c0:8f:64:16:25:dd:f8:7d:15:70:a0:35:66:f8:bd:c1:e1:c2: 82:79:ef:b3:e2:fb:b8:b9:c6:74:fb:1d:55:5d:06:74:e9:b9: 92:f6:45:81:9c:21:b0:bb:d8:6d:93:4c:2b:4d:1e:c8:0d:25: e5:53:84:40:a8:ad:89:b1:75:2b:03:33:af:09:bc:2a:68:a6: 31:27:0d:8a:a1:6f:90:07:5e:78:6a:f7:11:43:1f:a2:54:e4: a4:68:98:24:79:af:a2:8e:89:48:47:62:b9:27:bb:15:2e:9b: d3:e5:54:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUxMDE5MDY1MjIxWhcNMjUxMDI2MDY1MjIxWjAYMRYwFAYD VQQDEw02OGY0OGFhNi1jY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsiftj7NE5o6gNas4zccROADQpck3Ud9JBxQpi37A1pkcGF5C7arKptAk06J AfvQsVQ9sSdFZ1OAw+6rKUFR3NofI2a4UnDPMVXUf0JbEjqCoQm5mkup1ynR9TJN lmxp+jC1EImr5Kc5/NA2LXmXqRiEJzfPsyjH8V4AnrFv+h44yRr9n+31q07B8clu B0mc6E7nP+Jloy749kkCgEDgscFNyp+Lza3eHXDuMxqxCT4KPuBG6WEEGMgnXdq1 xF1HfNGqosK165xOU2D4ubSGcI0Z0hHldKKBh2pFupo4Amwj/woNwbr2aHo84Clk KVV7uFyT7LGW+Hkj8WLUpbuxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc6R9LR IU7G3qrTv0eufyaoeq2nMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6HPn98tHVF9NXZjjYRqupAYnKFzAFj/T3Uf33p8coDII86JXYF1gk Oeel3ANBTcpzzM7uQ4RQt6ZD1xCOh01D2XfpDzEIuVpzVGtclNYjSXc3ikPrmoH7 T2pciaLSC7eIulPmyZLhcdeR7UDb2JXgX5IH+AthuJpRhahNKVz3kakR+N0H/pBl UxW8bFXxUBrAj2QWJd34fRVwoDVm+L3B4cKCee+z4vu4ucZ0+x1VXQZ06bmS9kWB nCGwu9htk0wrTR7IDSXlU4RAqK2JsXUrAzOvCbwqaKYxJw2KoW+QB154avcRQx+i VOSkaJgkea+ijolIR2K5J7sVLpvT5VRD -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:34 2025 by rpki-client