$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: 6s7aeLBR58onseZo7LHXP5vqdFWcdEjjUf/4QywX1Yc= Subject key identifier: 82:53:F4:50:0B:3B:AD:38:38:1F:52:78:68:EB:93:7C:35:41:58:65 Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 0824 Signing time: Sat 18 Oct 2025 22:00:52 +0000 Manifest this update: Sat 18 Oct 2025 22:00:52 +0000 Manifest next update: Sat 25 Oct 2025 22:00:52 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: IWUrfNOVTpGkCyQdPoAjVNINlF8c7BWWYUZD+FvRJ8Y=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: Cnzt8nEUwiu0miGE1kfWVJ8FBWxNmEwiLfuAjUQARAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: Oct 18 22:00:52 2025 GMT Not After : Oct 25 22:00:52 2025 GMT Subject: CN=68f40e14-a934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:92:aa:34:d1:57:f1:42:c5:13:36:ea:3f: c9:29:5b:03:bc:0f:5b:9d:26:92:35:84:1e:b5:82: 0f:d7:77:ee:51:74:21:06:3d:4b:c5:a4:6b:da:ec: 4b:f8:3d:4e:ec:40:51:8f:8d:38:7d:e6:ff:f8:e2: 21:f5:3a:1f:90:5e:9f:6b:4e:5e:98:35:92:6b:98: 49:36:4e:19:cd:73:09:71:9f:fd:20:f6:d9:56:80: 50:1d:90:3a:4c:7d:93:03:95:16:38:69:d6:70:bd: 1f:75:c5:e9:78:79:9d:00:f3:36:ad:db:31:e9:7a: 2f:5b:51:db:8a:52:fc:6d:dc:87:7a:c2:b7:05:18: ae:1d:16:a6:fc:62:34:e6:83:ba:fc:05:3b:cf:a5: 49:9a:6e:98:2b:fc:bb:43:86:e3:3f:26:3a:30:bc: 80:d4:f6:77:61:cc:9b:35:90:83:db:aa:7a:24:bb: e4:64:47:6a:c1:b2:66:a4:e2:94:bb:c5:b7:20:ca: 63:5c:ff:0d:08:f8:84:86:6b:75:8c:01:c6:eb:70: 2c:d7:60:e0:60:02:7c:e4:87:3d:3f:6a:a5:ee:d6: d2:c8:84:45:a6:48:6d:77:29:48:ed:6c:12:2c:ac: f3:70:f4:2a:f6:24:02:57:56:05:89:6e:20:a0:79: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:53:F4:50:0B:3B:AD:38:38:1F:52:78:68:EB:93:7C:35:41:58:65 X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fd:88:18:a2:de:e2:9f:df:25:0d:17:d1:4e:5f:ff:69:6d: 3a:eb:14:68:95:94:d2:3a:29:c8:24:52:a6:95:29:34:c0:3a: 32:35:b0:2b:76:61:b0:da:5d:c5:d0:18:32:85:bc:a8:21:26: e1:01:07:5a:4c:98:b7:20:3e:e9:c7:bb:fc:79:9c:d9:62:7c: e7:88:9e:d2:c9:ea:db:bf:7e:e0:03:07:36:43:28:b2:27:bc: 91:94:2a:30:82:c2:4d:f0:19:ae:ec:bf:e7:93:a4:a6:4d:51: 50:66:2b:d5:29:a5:42:61:02:30:eb:c2:b2:e1:15:18:a9:d0: 5d:0b:bc:e4:62:bb:0b:a6:64:13:ad:ef:d5:34:4a:29:f2:23: bb:70:a4:b5:1a:9a:9a:c4:bf:67:62:b0:77:2e:a2:76:27:3c: cf:fb:ab:6c:e0:dd:5b:a9:be:bd:a0:80:5d:c4:42:fd:8a:79: ae:98:fa:66:e9:6f:39:e1:25:40:dd:60:62:10:ba:f9:a3:ed: 32:3c:fe:77:58:4e:70:ef:34:e8:cf:fa:20:22:fd:6f:cc:b5: 59:49:b7:5e:ee:49:2c:37:9e:3d:e3:46:c4:9c:c3:51:f3:2b: a3:9b:71:a2:cf:18:b8:cc:ea:53:c9:cd:5f:f1:dc:bc:1b:2e: 2a:40:35:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjUxMDE4MjIwMDUyWhcNMjUxMDI1MjIwMDUyWjAYMRYwFAYD VQQDEw02OGY0MGUxNC1hOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VOSqjTRV/FCxRM26j/JKVsDvA9bnSaSNYQetYIP13fuUXQhBj1LxaRr2uxL +D1O7EBRj404feb/+OIh9TofkF6fa05emDWSa5hJNk4ZzXMJcZ/9IPbZVoBQHZA6 TH2TA5UWOGnWcL0fdcXpeHmdAPM2rdsx6XovW1HbilL8bdyHesK3BRiuHRam/GI0 5oO6/AU7z6VJmm6YK/y7Q4bjPyY6MLyA1PZ3YcybNZCD26p6JLvkZEdqwbJmpOKU u8W3IMpjXP8NCPiEhmt1jAHG63As12DgYAJ85Ic9P2ql7tbSyIRFpkhtdylI7WwS LKzzcPQq9iQCV1YFiW4goHlN9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJT9FAL O604OB9SeGjrk3w1QVhlMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1/YgYot7in98lDRfRTl//aW066xRolZTSOinIJFKmlSk0wDoyNbAr dmGw2l3F0BgyhbyoISbhAQdaTJi3ID7px7v8eZzZYnzniJ7Syerbv37gAwc2Qyiy J7yRlCowgsJN8Bmu7L/nk6SmTVFQZivVKaVCYQIw68Ky4RUYqdBdC7zkYrsLpmQT re/VNEop8iO7cKS1GpqaxL9nYrB3LqJ2JzzP+6ts4N1bqb69oIBdxEL9inmumPpm 6W854SVA3WBiELr5o+0yPP53WE5w7zToz/ogIv1vzLVZSbde7kksN54940bEnMNR 8yujm3Gizxi4zOpTyc1f8dy8Gy4qQDXQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:20 2025 by rpki-client