$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: am9dI57q6w1Gm4PX9/pg0HNpGIYbWlkZTKfvxyv8L3M= Subject key identifier: AD:41:8E:00:56:BF:E9:47:72:40:27:BE:F2:02:08:47:7E:B7:4D:D5 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 019E Signing time: Sun 19 Oct 2025 05:53:09 +0000 Manifest this update: Sun 19 Oct 2025 05:53:09 +0000 Manifest next update: Sun 26 Oct 2025 05:53:09 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: FOtzT+lR8jAXrk3bc1KN1pq13NoztwhdKfwHQMaYpo8=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: z9EaBOoQtdVuIHEm9IdKFd2T44FBt8oNShj0hBUX4to=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: mPLM8pUe2jYc/yGUmyUlykE/dN1LWPP09wTlH7B34ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Oct 19 05:53:09 2025 GMT Not After : Oct 26 05:53:09 2025 GMT Subject: CN=68f47cc5-f111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:e1:5a:c7:7e:5e:68:44:f5:13:22:0d:58: e2:4b:4d:55:35:c8:dc:81:aa:e8:96:c3:7b:e7:9c: 4b:bf:f5:d1:69:ac:dc:05:4d:7e:4c:c0:b2:93:02: b3:9a:a7:f9:9a:ae:84:9b:67:85:5f:63:9c:cf:30: 37:3a:24:0e:15:02:d3:80:19:1d:bf:ba:c7:a2:5d: 2f:8a:c6:d3:5e:9b:cc:2c:64:3a:85:49:4a:a6:03: 84:07:12:da:61:b9:dd:6b:30:03:e3:88:c9:c7:92: 87:29:1d:98:15:90:c0:f2:14:08:2e:bb:b5:57:71: 12:81:89:5c:bf:eb:ab:cd:d7:9d:74:e3:ff:52:a1: af:53:3e:35:55:71:db:3b:e8:05:41:60:ca:35:a5: 56:52:40:63:fa:e2:86:d8:be:bf:44:74:d0:e7:50: 51:4b:6f:f2:fa:4c:60:f8:bb:a6:73:19:fb:a3:92: 46:6d:d9:86:9a:75:b3:0b:c9:63:75:cb:bd:e8:43: 53:cd:5f:13:21:c7:52:69:41:92:d3:c9:7a:09:20: 7e:60:55:4d:02:11:22:7a:b4:f6:54:5b:bc:62:0f: 13:0e:78:46:dc:d8:6f:f1:57:bb:57:6c:1c:9b:db: 47:2d:2b:b2:66:8f:bc:3c:94:02:30:e9:7d:61:3e: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:8E:00:56:BF:E9:47:72:40:27:BE:F2:02:08:47:7E:B7:4D:D5 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6f:8c:5d:13:b2:b5:e9:a8:db:23:d9:39:4c:eb:0a:79:71: a6:ec:3e:bc:44:70:0e:1b:69:ab:1d:34:7a:b0:45:f3:d9:1a: 06:8b:59:5b:84:15:09:8a:7d:a7:db:1a:ba:c5:81:e4:e4:0b: b3:98:c0:31:d0:6a:3b:e8:7f:4f:89:98:fe:72:14:a3:63:13: ad:15:67:04:58:ea:7b:0c:28:35:d7:04:31:0f:7b:ab:f3:b9: 4f:2f:6c:fd:c8:79:7b:5f:27:1f:4d:f2:31:7b:4c:fc:ee:f7: e1:8f:35:d6:70:51:8f:76:2a:23:c2:aa:69:42:11:fa:64:15: d9:68:05:a8:c5:39:16:0c:4d:03:86:b8:8e:cf:7a:4d:0a:29: 55:47:14:06:98:4a:74:14:cc:4c:15:15:39:8b:1a:3b:79:fd: fb:cc:3c:94:07:b9:9a:3e:5e:ed:a4:6f:c7:1e:bb:fd:ea:82: 87:52:fd:ed:a8:04:e0:ab:24:61:1d:21:5c:1e:87:da:8e:ba: e5:28:10:78:aa:d6:07:b3:ec:51:6d:67:b1:74:de:8f:3c:4a: 13:b3:f0:d0:6d:ba:17:0d:00:8c:92:1d:ff:92:df:ae:05:29: 40:a3:0d:8a:36:5f:fa:1c:48:4c:32:5b:f0:b6:4d:91:c1:0a: c3:39:e5:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUxMDE5MDU1MzA5WhcNMjUxMDI2MDU1MzA5WjAYMRYwFAYD VQQDEw02OGY0N2NjNS1mMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19jhWsd+XmhE9RMiDVjiS01VNcjcgarolsN755xLv/XRaazcBU1+TMCykwKz mqf5mq6Em2eFX2OczzA3OiQOFQLTgBkdv7rHol0visbTXpvMLGQ6hUlKpgOEBxLa YbndazAD44jJx5KHKR2YFZDA8hQILru1V3ESgYlcv+urzdeddOP/UqGvUz41VXHb O+gFQWDKNaVWUkBj+uKG2L6/RHTQ51BRS2/y+kxg+Lumcxn7o5JGbdmGmnWzC8lj dcu96ENTzV8TIcdSaUGS08l6CSB+YFVNAhEierT2VFu8Yg8TDnhG3Nhv8Ve7V2wc m9tHLSuyZo+8PJQCMOl9YT6JQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1BjgBW v+lHckAnvvICCEd+t03VMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPb4xdE7K16ajbI9k5TOsKeXGm7D68RHAOG2mrHTR6sEXz2RoGi1lb hBUJin2n2xq6xYHk5AuzmMAx0Go76H9PiZj+chSjYxOtFWcEWOp7DCg11wQxD3ur 87lPL2z9yHl7XycfTfIxe0z87vfhjzXWcFGPdiojwqppQhH6ZBXZaAWoxTkWDE0D hriOz3pNCilVRxQGmEp0FMxMFRU5ixo7ef37zDyUB7maPl7tpG/HHrv96oKHUv3t qATgqyRhHSFcHofajrrlKBB4qtYHs+xRbWexdN6PPEoTs/DQbboXDQCMkh3/kt+u BSlAow2KNl/6HEhMMlvwtk2RwQrDOeXl -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:05 2025 by rpki-client