$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json) Hash identifier: n028iA7L2XxjTa3xxi7XrBPGpoanATu9IENlz2xerXo= Subject key identifier: 6D:08:3A:F4:B0:36:6C:19:8E:10:26:FB:8B:99:A5:45:20:D2:58:66 Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Certificate serial: 1B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft Manifest number: 1B35 Signing time: Mon 20 Oct 2025 16:35:21 +0000 Manifest this update: Mon 20 Oct 2025 16:35:20 +0000 Manifest next update: Mon 27 Oct 2025 16:35:20 +0000 Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: OApu3Irht7CHzqt6VSQCP/uyLNPWdr85AKtT3kecTZw=) 2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6972 (0x1b3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Validity Not Before: Oct 20 16:35:20 2025 GMT Not After : Oct 27 16:35:20 2025 GMT Subject: CN=68f664c8-1eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:4d:2f:b8:eb:2b:e4:97:6d:1f:91:4f:9e: 9c:8d:4b:0a:06:ab:3f:e3:a5:9b:9a:35:a8:8d:98: dd:1f:c7:53:f3:02:45:60:f6:cf:97:da:ce:09:7e: a8:5d:9c:36:bf:b3:31:b6:86:4f:56:7c:72:d2:b8: 00:1b:0a:cf:b2:df:9b:46:aa:ac:e5:c7:75:53:a9: 55:97:fd:61:34:88:7b:c8:dc:b5:ef:fa:d8:1b:3c: 5a:54:56:13:bc:b0:3a:f2:10:d9:3a:36:e7:9d:3d: ff:b0:1c:28:74:3d:01:3c:fa:0a:39:71:9d:cc:5a: 37:aa:56:13:0a:89:92:bf:9a:6d:da:86:b3:a7:04: be:3e:e1:64:5c:4b:7e:c2:54:7d:df:78:79:a4:d4: e9:a4:dc:ee:b4:e2:5a:c8:72:16:ca:df:9b:5f:99: 80:f4:1f:96:43:2a:83:88:ad:f6:6a:b3:44:3c:c9: 18:80:2c:0a:d0:cc:ad:52:0b:d3:9b:df:99:1b:e3: c8:05:7a:f6:41:05:3e:42:fb:c4:31:23:38:59:7f: 21:2a:1c:8f:a0:1c:86:82:a8:5f:91:c1:ff:1b:02: 7c:dd:7d:6c:bd:5b:fd:ee:fa:2f:b3:43:b8:2c:5d: 95:2d:03:32:73:ed:7c:39:06:02:b1:60:b0:2d:49: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:3A:F4:B0:36:6C:19:8E:10:26:FB:8B:99:A5:45:20:D2:58:66 X509v3 Authority Key Identifier: keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:05:b3:2e:8e:50:de:42:ea:64:fd:af:9d:44:3c:d0:b7:37: 16:6c:11:d3:27:98:b1:da:40:13:e2:ce:04:54:e9:08:8e:f8: ae:36:5d:54:32:36:c4:45:52:b9:ef:c1:32:f2:21:3c:80:0a: 84:6c:1e:91:f4:85:dc:e4:3e:30:bb:e0:ad:53:39:db:bd:1d: 83:3f:12:f6:d4:95:f3:ee:d5:e2:6e:ea:12:82:2e:37:23:e8: 02:63:c8:33:27:b5:da:ee:59:54:17:9e:31:11:46:c9:00:8e: 04:2e:1a:57:bb:d7:cb:02:95:d6:5c:71:43:7e:18:2a:56:4e: ee:a1:f8:11:40:41:b6:5a:57:c2:5a:34:81:cd:d2:4e:07:f4: f2:dc:e5:35:e5:29:4c:98:86:a9:5f:b1:a8:16:cc:88:a1:cf: 57:5a:64:14:9c:91:8c:fe:b8:3a:4e:76:fc:8f:f4:5f:b2:5f: 94:32:12:61:65:da:fe:23:02:f9:1f:4f:1f:c9:2c:6b:7c:2b: 87:9c:fe:21:8e:c0:d5:34:74:19:62:ba:30:39:8c:e4:18:9d: 77:4f:0f:c6:51:de:cc:b5:55:98:83:93:c9:56:3b:36:1a:38: c7:a8:c1:35:f0:1c:bd:b9:b6:fd:b5:4f:f7:62:c3:c7:90:00: 83:80:32:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3RTA2QjQ4QUVD OTU1MUY2NUIwHhcNMjUxMDIwMTYzNTIwWhcNMjUxMDI3MTYzNTIwWjAYMRYwFAYD VQQDEw02OGY2NjRjOC0xZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cxNL7jrK+SXbR+RT56cjUsKBqs/46WbmjWojZjdH8dT8wJFYPbPl9rOCX6o XZw2v7MxtoZPVnxy0rgAGwrPst+bRqqs5cd1U6lVl/1hNIh7yNy17/rYGzxaVFYT vLA68hDZOjbnnT3/sBwodD0BPPoKOXGdzFo3qlYTComSv5pt2oazpwS+PuFkXEt+ wlR933h5pNTppNzutOJayHIWyt+bX5mA9B+WQyqDiK32arNEPMkYgCwK0MytUgvT m9+ZG+PIBXr2QQU+QvvEMSM4WX8hKhyPoByGgqhfkcH/GwJ83X1svVv97vovs0O4 LF2VLQMyc+18OQYCsWCwLUmDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0IOvSw NmwZjhAm+4uZpUUg0lhmMB8GA1UdIwQYMBaAFAuwQx9VCAN9/JL3fga0iuyVUfZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI1NS9CRTYyREM5RTIz MkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEzMzhrdmQtQnJTSzdKVlI5 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QkRIMVVJQTMzOGt2ZC1CclNLN0pWUjlscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEz MzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2BbMujlDeQupk/a+dRDzQtzcWbBHTJ5ix2kAT4s4EVOkIjviuNl1U MjbERVK578Ey8iE8gAqEbB6R9IXc5D4wu+CtUznbvR2DPxL21JXz7tXibuoSgi43 I+gCY8gzJ7Xa7llUF54xEUbJAI4ELhpXu9fLApXWXHFDfhgqVk7uofgRQEG2WlfC WjSBzdJOB/Ty3OU15SlMmIapX7GoFsyIoc9XWmQUnJGM/rg6Tnb8j/Rfsl+UMhJh Zdr+IwL5H08fySxrfCuHnP4hjsDVNHQZYrowOYzkGJ13Tw/GUd7MtVWYg5PJVjs2 GjjHqME18By9ubb9tU/3YsPHkACDgDJV -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:34 2025 by rpki-client