$ rpki-client -vvf rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft File: SkhXfqTVPPBfDXTKwBD2q8QVI48.mft (raw, json) Hash identifier: DsICeiQezvPkUcMXN6AKtIGRLL/HBhyW1ZQ4+CPNkfY= Subject key identifier: 96:61:FB:23:30:C3:6C:87:53:E6:C9:5F:D1:DA:9D:74:6B:0F:86:95 Authority key identifier: 4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F Certificate issuer: /CN=A918C519/serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft Manifest number: 28 Signing time: Sun 19 Oct 2025 11:15:18 +0000 Manifest this update: Sun 19 Oct 2025 11:15:17 +0000 Manifest next update: Sun 26 Oct 2025 11:15:17 +0000 Files and hashes: 1: SkhXfqTVPPBfDXTKwBD2q8QVI48.crl (hash: WLe6rV3Vic8+df5/KtHauL46QmU+/So4F6AHUalQcrQ=) 2: 19BCD4A0728211F081B6E982C4F9AE02.roa (hash: J1KdVLZmGzND3g5GpPJl+STwOF3mvFB15MfnfwB4gJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F Validity Not Before: Oct 19 11:15:17 2025 GMT Not After : Oct 26 11:15:17 2025 GMT Subject: CN=68f4c845-6e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:a5:fa:1e:54:30:d3:88:b6:db:8c:01:b1: 4e:51:77:df:0e:b6:d9:7a:d8:52:09:26:8c:5c:25: 91:cc:b7:e6:e1:34:9a:b3:9e:a7:77:17:bd:9a:1e: 55:6e:b5:9c:31:2f:30:c9:39:89:ad:34:a5:88:a8: 5e:d3:2c:dd:78:c2:45:b3:92:1f:45:f8:ac:26:ed: 03:e9:90:cd:7a:dd:a3:c9:48:c7:15:9d:e5:70:0c: e4:7e:95:2c:f5:36:9b:3e:d0:4d:9c:37:53:22:33: 5a:e9:6e:03:d5:50:22:e6:8c:23:2f:b1:a7:40:56: b7:08:17:d2:4a:67:4d:2e:07:e1:95:99:99:c9:6f: 5d:21:35:6c:55:6a:b7:bc:eb:ea:9e:8a:2a:34:da: fb:5e:32:2c:2b:9b:92:90:a6:48:f8:b5:9e:c1:ad: ae:55:e7:95:8d:42:a5:cc:bf:d1:d5:28:01:9c:bd: 35:ae:55:8a:61:19:b2:a1:d0:d2:c8:56:f7:6c:4d: 91:b6:16:5f:fc:9d:94:fb:d6:69:09:fb:90:28:a6: 4f:42:3b:c6:8e:ac:b2:a9:87:36:a2:46:26:cb:4d: a2:2a:c0:18:c0:b8:82:2c:c3:bd:2b:a8:30:a9:99: cd:e5:65:39:f0:72:92:29:0b:5c:f8:3e:6f:ac:c6: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:FB:23:30:C3:6C:87:53:E6:C9:5F:D1:DA:9D:74:6B:0F:86:95 X509v3 Authority Key Identifier: keyid:4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:bb:7c:75:f3:82:1d:8a:53:10:2b:23:20:4a:5e:2f:94: 85:e4:de:13:a6:1b:17:cc:50:79:80:72:af:d3:5c:a3:ce:b5: 11:23:0b:59:36:50:cb:41:95:b3:d3:88:40:ed:97:e0:35:69: 68:54:17:44:9f:2c:ca:ed:40:31:56:80:f8:b0:a8:b1:8a:31: 3b:21:fb:e7:f1:a2:3f:88:a3:8e:1d:37:74:0c:01:39:74:81: 9c:9c:ce:0c:66:3d:3b:62:d7:7a:5d:1d:d0:b9:67:d8:e0:02: ca:23:2b:45:08:21:92:f8:9c:51:01:ac:3f:c4:fc:9f:4e:1c: 91:da:27:3c:a7:73:2b:ca:b7:ce:2f:6a:a5:32:c4:c1:28:af: 9e:e5:ef:28:13:04:29:19:b7:7d:0d:81:5d:62:0d:d9:e8:23: 83:98:7b:bd:01:65:27:52:20:1b:91:84:e4:1e:ac:4c:58:b0: 1d:00:c6:d7:7c:b8:2a:c6:95:f4:08:8f:4c:e3:7b:c3:6a:f2: 7b:a8:8a:8f:e8:af:63:df:e6:07:5d:ce:0d:f4:3c:dc:d3:aa: e3:9e:f7:ef:1d:99:75:8a:ce:44:7f:63:5f:84:1a:42:a6:48: 92:da:2a:64:29:87:18:12:24:bb:ce:68:73:52:5e:d9:0a:8f: b1:9a:af:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzUxOTExMC8GA1UEBRMoNEE0ODU3N0VBNEQ1M0NGMDVGMEQ3NENBQzAxMEY2QUJD NDE1MjM4RjAeFw0yNTEwMTkxMTE1MTdaFw0yNTEwMjYxMTE1MTdaMBgxFjAUBgNV BAMTDTY4ZjRjODQ1LTZlMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUyKX6HlQw04i224wBsU5Rd98Ottl62FIJJoxcJZHMt+bhNJqznqd3F72aHlVu tZwxLzDJOYmtNKWIqF7TLN14wkWzkh9F+Kwm7QPpkM163aPJSMcVneVwDOR+lSz1 Nps+0E2cN1MiM1rpbgPVUCLmjCMvsadAVrcIF9JKZ00uB+GVmZnJb10hNWxVare8 6+qeiio02vteMiwrm5KQpkj4tZ7Bra5V55WNQqXMv9HVKAGcvTWuVYphGbKh0NLI VvdsTZG2Fl/8nZT71mkJ+5Aopk9CO8aOrLKphzaiRibLTaIqwBjAuIIsw70rqDCp mc3lZTnwcpIpC1z4Pm+sxilrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlmH7IzDD bIdT5slf0dqddGsPhpUwHwYDVR0jBBgwFoAUSkhXfqTVPPBfDXTKwBD2q8QVI48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNTE5LzRGMDMwOEYyNzI4 MDExRjA5QUFERkE3Q0M0RjlBRTAyL1NraFhmcVRWUFBCZkRYVEt3QkQycThRVkk0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2toWGZxVFZQUEJmRFhUS3dCRDJxOFFWSTQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD NTE5LzRGMDMwOEYyNzI4MDExRjA5QUFERkE3Q0M0RjlBRTAyL1NraFhmcVRWUFBC ZkRYVEt3QkQycThRVkk0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRou3x184IdilMQKyMgSl4vlIXk3hOmGxfMUHmAcq/TXKPOtREjC1k2 UMtBlbPTiEDtl+A1aWhUF0SfLMrtQDFWgPiwqLGKMTsh++fxoj+Io44dN3QMATl0 gZyczgxmPTti13pdHdC5Z9jgAsojK0UIIZL4nFEBrD/E/J9OHJHaJzyncyvKt84v aqUyxMEor57l7ygTBCkZt30NgV1iDdnoI4OYe70BZSdSIBuRhOQerExYsB0Axtd8 uCrGlfQIj0zje8Nq8nuoio/or2Pf5gddzg30PNzTquOe9+8dmXWKzkR/Y1+EGkKm SJLaKmQphxgSJLvOaHNSXtkKj7Gar2I= -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:42 2025 by rpki-client