$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json) Hash identifier: TW6t2CyPsTi3lO8LS4W5AgA1PUcoIIjhstzFXCYfNog= Subject key identifier: 50:99:D9:AD:F3:DD:61:5C:8F:8E:B0:E6:88:A1:A3:BF:8C:63:10:88 Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft Manifest number: 017E Signing time: Sat 18 Oct 2025 20:04:45 +0000 Manifest this update: Sat 18 Oct 2025 20:04:45 +0000 Manifest next update: Sat 25 Oct 2025 20:04:45 +0000 Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: FLlnKFoLtShnY3HgpqhUnjIoCfnpYqgUEzMA+eQggqE=) 2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Validity Not Before: Oct 18 20:04:45 2025 GMT Not After : Oct 25 20:04:45 2025 GMT Subject: CN=68f3f2dd-40ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:61:f1:48:14:29:1c:b9:7c:ed:92:d7:59: 6a:89:48:30:29:5e:98:50:05:c8:a1:bb:9d:57:a4: 5f:cf:ee:7d:7c:c0:96:ec:56:3f:35:65:81:90:6d: 2b:5f:92:94:03:17:6b:d8:cb:e8:e8:c1:31:1d:7f: 48:3f:3f:c8:03:f9:79:74:17:05:87:86:b1:13:1d: 39:27:dc:e0:02:9f:89:9b:ce:7b:9f:5f:22:c3:6c: 87:2d:0e:76:79:82:ad:a4:2c:97:5a:24:cf:68:5f: 68:c6:2e:eb:50:4a:15:e4:89:37:ab:0a:de:b1:ab: a4:43:20:64:18:e7:e1:e1:7e:e3:d6:0c:8f:f2:7a: f5:18:14:fd:5c:ab:4d:df:99:f2:44:27:5f:f6:42: 87:e6:54:f7:e7:24:30:e3:55:1f:1a:3b:59:20:5d: 82:c7:49:e7:d6:52:28:b0:4e:a4:16:28:ec:9a:3f: 01:06:a6:04:ca:bf:d1:40:21:6f:69:2f:19:87:64: 6d:a8:28:b4:7d:65:b6:66:23:d6:be:c4:4b:dd:a1: 5b:31:16:45:ca:8a:45:4a:a3:1c:41:01:d6:71:6b: f0:b3:dc:49:e0:0e:44:ec:4b:07:4c:d8:2a:64:db: 58:18:5b:4b:58:ab:21:84:dd:c8:0f:2e:17:34:55: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:99:D9:AD:F3:DD:61:5C:8F:8E:B0:E6:88:A1:A3:BF:8C:63:10:88 X509v3 Authority Key Identifier: keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d6:3e:60:83:bb:fd:f1:d7:78:ce:6a:2a:09:ae:b2:d4:53: 43:78:73:3f:0b:20:e3:47:50:c3:55:8c:c8:d5:5b:0e:e1:73: 24:75:87:7a:4d:c6:5c:07:67:36:8e:9a:bd:d1:e5:44:22:8e: 7c:ec:e2:28:f7:93:b1:af:bb:c5:f1:a4:76:b7:ad:ea:fb:4c: 75:11:46:b9:e1:18:52:cd:64:8f:96:24:c7:fa:4c:c0:6a:7f: 21:35:6e:03:20:35:2b:a0:7b:f4:08:ef:60:69:6e:fc:6a:75: 93:fb:77:9d:5f:2e:77:f8:40:d9:9a:b2:34:b6:ef:21:3f:b9: c2:46:37:04:79:0c:30:a3:2c:87:34:d8:0a:9f:75:9d:30:a2: a4:06:d3:5d:c4:48:20:a4:64:c0:b1:6a:1b:8a:7b:73:0f:57: 60:52:d3:f9:31:32:e9:ff:45:3b:2b:62:ff:52:72:6d:61:24: 34:f3:32:0e:88:01:31:1a:50:14:9e:b6:c7:7e:26:60:77:5a: c8:96:1b:19:66:5d:7f:74:67:c4:59:77:a0:5d:f5:76:c7:4c: f1:50:15:80:1b:17:5b:77:87:0e:51:20:00:ce:11:0e:6c:af: 03:8f:3a:c0:74:c4:48:57:98:72:40:bc:8e:22:1f:00:f3:4e: cc:6f:f0:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKEE0REVFRDk1OTNFNTkxMzAzQTlCMDM5ODA2MUZFOEVG NTE4NjY1Q0EwHhcNMjUxMDE4MjAwNDQ1WhcNMjUxMDI1MjAwNDQ1WjAYMRYwFAYD VQQDEw02OGYzZjJkZC00MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10Jh8UgUKRy5fO2S11lqiUgwKV6YUAXIobudV6Rfz+59fMCW7FY/NWWBkG0r X5KUAxdr2Mvo6MExHX9IPz/IA/l5dBcFh4axEx05J9zgAp+Jm857n18iw2yHLQ52 eYKtpCyXWiTPaF9oxi7rUEoV5Ik3qwresaukQyBkGOfh4X7j1gyP8nr1GBT9XKtN 35nyRCdf9kKH5lT35yQw41UfGjtZIF2Cx0nn1lIosE6kFijsmj8BBqYEyr/RQCFv aS8Zh2RtqCi0fWW2ZiPWvsRL3aFbMRZFyopFSqMcQQHWcWvws9xJ4A5E7EsHTNgq ZNtYGFtLWKshhN3IDy4XNFUcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCZ2a3z 3WFcj46w5oiho7+MYxCIMB8GA1UdIwQYMBaAFKTe7ZWT5ZEwOpsDmAYf6O9RhmXK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi8xODkxOTVBQzY4 MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtUQTZtd09ZQmhfbzcxR0da Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi8xODkxOTVBQzY4MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtU QTZtd09ZQmhfbzcxR0daY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG1j5gg7v98dd4zmoqCa6y1FNDeHM/CyDjR1DDVYzI1VsO4XMkdYd6 TcZcB2c2jpq90eVEIo587OIo95Oxr7vF8aR2t63q+0x1EUa54RhSzWSPliTH+kzA an8hNW4DIDUroHv0CO9gaW78anWT+3edXy53+EDZmrI0tu8hP7nCRjcEeQwwoyyH NNgKn3WdMKKkBtNdxEggpGTAsWobintzD1dgUtP5MTLp/0U7K2L/UnJtYSQ08zIO iAExGlAUnrbHfiZgd1rIlhsZZl1/dGfEWXegXfV2x0zxUBWAGxdbd4cOUSAAzhEO bK8DjzrAdMRIV5hyQLyOIh8A807Mb/AF -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:33 2025 by rpki-client