$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: nEjYOWWf22paZw2ElYyqQyBkzXJk7rYm2tYmkGR19VU= Subject key identifier: AF:13:82:17:31:F5:A6:E0:06:B7:BA:0B:85:43:D4:10:A2:05:A6:65 Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0B58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0B50 Signing time: Sat 18 Oct 2025 20:04:43 +0000 Manifest this update: Sat 18 Oct 2025 20:04:42 +0000 Manifest next update: Sat 25 Oct 2025 20:04:42 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: 89ScH8OUD0G5O6UTHLciUdx6dojilDF7aA/7OPd0SLI=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2904 (0xb58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Oct 18 20:04:42 2025 GMT Not After : Oct 25 20:04:42 2025 GMT Subject: CN=68f3f2db-7560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:7a:31:c8:7e:6a:54:f0:e3:56:88:8c:a9: d2:9c:50:40:43:ee:3a:46:0b:93:4b:84:d9:25:28: 48:64:71:52:76:6b:e9:b6:90:1b:9e:53:0e:60:e0: 45:91:12:f6:9d:89:4b:2b:0d:7e:ad:b9:b2:2e:fe: 80:58:63:aa:b3:89:a7:f8:98:81:17:5b:15:66:3e: 6b:21:0f:16:b7:59:5b:46:a6:53:f0:8e:c9:b5:d5: 8b:1f:33:59:a1:eb:cd:eb:26:8d:aa:36:fd:59:73: 61:ed:26:fe:8b:70:57:f7:a0:71:02:5f:3b:c4:11: 56:b0:ca:e1:9d:00:18:cc:e5:7c:53:74:8f:84:86: e0:98:06:7d:66:f1:38:8f:25:a9:85:2e:e4:19:3e: e9:e1:41:da:77:b9:25:57:85:86:37:26:f7:9a:f5: 48:62:a9:7d:fe:00:a0:fa:db:84:8b:64:23:98:8f: eb:bf:e0:2b:03:34:58:7c:52:fe:fc:69:16:28:3a: b6:23:43:cd:c5:19:a6:28:af:0a:00:d3:4f:23:02: d4:d9:10:d6:39:45:82:c5:ac:6c:41:4e:32:14:fd: 48:af:42:15:aa:33:d2:f4:dd:9a:db:5d:bb:90:93: 50:de:2c:ec:13:4d:10:a6:25:93:72:38:dd:4b:6e: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:13:82:17:31:F5:A6:E0:06:B7:BA:0B:85:43:D4:10:A2:05:A6:65 X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d7:07:2a:57:ca:7e:cf:58:72:91:3c:0d:e5:d7:94:6b:e7: 14:ca:ea:96:ca:60:0b:97:3c:f1:e4:c2:f0:7f:2d:6f:ca:3f: c2:91:ac:76:60:92:d5:e0:4d:da:fc:ae:2d:1f:61:38:2d:08: 23:fd:e2:87:65:d0:69:1b:d1:07:dd:54:01:53:ae:61:ca:4d: 76:23:9a:de:07:4b:c2:74:55:5e:09:f2:fa:d8:a4:b6:55:f7: aa:fc:cf:fd:23:91:27:2b:92:10:ce:93:3e:58:68:f3:08:8a: c5:87:13:38:9d:59:d1:b0:a2:6c:3c:e4:14:18:12:b7:10:20: 68:bf:54:9f:4e:c2:7f:ce:b5:ec:56:ff:f4:ac:58:ca:97:04: 80:fd:49:a0:c3:fc:83:24:68:c4:8d:62:14:71:2b:b7:f9:0c: 34:f0:33:91:d4:02:a1:4d:fb:59:c5:2e:03:f0:b4:ab:ac:0c: e5:eb:ef:8d:0b:f8:ae:e2:b5:9c:ef:14:b0:c5:5c:a6:64:c2: 61:ed:a8:f0:45:b8:0f:53:29:d7:5c:7c:38:17:ab:63:ff:b1: 19:76:c3:ec:8a:1a:d5:7f:a0:11:a2:88:05:a1:d2:9a:a2:8f: fa:b2:b0:de:dd:48:26:2c:a9:6f:2c:fb:9a:1d:27:f1:4e:9a: 61:74:f3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjUxMDE4MjAwNDQyWhcNMjUxMDI1MjAwNDQyWjAYMRYwFAYD VQQDEw02OGYzZjJkYi03NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOV6Mch+alTw41aIjKnSnFBAQ+46RguTS4TZJShIZHFSdmvptpAbnlMOYOBF kRL2nYlLKw1+rbmyLv6AWGOqs4mn+JiBF1sVZj5rIQ8Wt1lbRqZT8I7JtdWLHzNZ oevN6yaNqjb9WXNh7Sb+i3BX96BxAl87xBFWsMrhnQAYzOV8U3SPhIbgmAZ9ZvE4 jyWphS7kGT7p4UHad7klV4WGNyb3mvVIYql9/gCg+tuEi2QjmI/rv+ArAzRYfFL+ /GkWKDq2I0PNxRmmKK8KANNPIwLU2RDWOUWCxaxsQU4yFP1Ir0IVqjPS9N2a2127 kJNQ3izsE00QpiWTcjjdS27JrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8Tghcx 9abgBre6C4VD1BCiBaZlMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA81wcqV8p+z1hykTwN5deUa+cUyuqWymALlzzx5MLwfy1vyj/Ckax2 YJLV4E3a/K4tH2E4LQgj/eKHZdBpG9EH3VQBU65hyk12I5reB0vCdFVeCfL62KS2 Vfeq/M/9I5EnK5IQzpM+WGjzCIrFhxM4nVnRsKJsPOQUGBK3ECBov1SfTsJ/zrXs Vv/0rFjKlwSA/Umgw/yDJGjEjWIUcSu3+Qw08DOR1AKhTftZxS4D8LSrrAzl6++N C/iu4rWc7xSwxVymZMJh7ajwRbgPUynXXHw4F6tj/7EZdsPsihrVf6ARoogFodKa oo/6srDe3UgmLKlvLPuaHSfxTpphdPPg -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:11 2025 by rpki-client