$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: EKy/1+dHBfYt/w7XzRGfL1xF5JaQ6VZWCGMOSckikEQ= Subject key identifier: FB:18:3E:E5:06:5D:F0:A7:B9:D2:DD:DF:83:9E:6A:E5:A3:63:87:BE Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 62 Signing time: Sun 19 Oct 2025 10:26:30 +0000 Manifest this update: Sun 19 Oct 2025 10:26:30 +0000 Manifest next update: Sun 26 Oct 2025 10:26:30 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: sIT8SPaNs6zLdXEIyY9QV+Y0rf2Y3RK83v9zzPwy/to=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Oct 19 10:26:30 2025 GMT Not After : Oct 26 10:26:30 2025 GMT Subject: CN=68f4bcd6-f546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:50:14:25:5c:24:af:bc:88:00:e4:e7:f2: a3:0d:cb:85:97:ae:3a:b4:b8:ab:27:4a:18:96:c2: 7a:eb:db:dd:d4:3a:2a:9d:b2:e2:c9:56:ea:c2:a3: 3a:97:9e:73:ba:5d:b1:f7:60:fa:d4:05:1d:d4:e4: d5:00:c7:8c:1d:37:6c:8d:a1:5e:d3:0f:60:1a:d1: 26:98:fa:a2:17:44:38:c5:4e:11:76:2c:95:2b:2d: dd:9b:58:1b:82:b0:f9:eb:ca:ac:d5:ad:be:db:b1: 3c:ea:06:47:65:5f:d9:4a:6b:29:ed:0a:6a:f7:28: e6:aa:8d:19:c6:79:50:91:ca:70:0e:53:4b:b8:22: c4:82:60:f1:91:e9:02:ec:6b:d9:20:11:f9:0a:09: 8b:0d:f7:bf:92:62:41:02:fa:f5:ed:35:7d:ed:a5: e2:af:1d:86:ca:d3:3f:d8:95:1c:3f:e6:3a:0c:60: a3:96:31:f5:d4:24:e9:c1:9b:d2:c1:f2:ce:62:39: 3a:e3:9a:49:49:a2:a6:b0:e3:73:80:71:6a:9c:28: c8:cb:e7:48:c5:90:36:95:21:ed:86:be:a2:8f:2d: 32:17:94:ec:a5:7a:1c:e5:14:62:d8:d5:78:00:57: 56:7e:6b:11:21:a0:31:74:48:e3:f8:30:65:d2:4a: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:18:3E:E5:06:5D:F0:A7:B9:D2:DD:DF:83:9E:6A:E5:A3:63:87:BE X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ec:71:17:3d:9b:3f:96:c3:25:65:f0:c1:40:ef:7a:14:aa: c5:3e:3f:0e:75:29:99:66:d9:ba:66:5b:df:5e:6c:f0:2d:ba: 98:91:d5:8c:58:02:5e:c4:86:72:f8:4f:33:f5:ee:c3:46:b2: 81:73:d9:e4:c6:fe:88:6f:4b:76:0a:e8:3e:c5:bb:4b:91:d3: e9:1f:cd:24:c9:8b:94:e3:b1:f2:73:00:bd:db:16:d1:56:5c: 0d:40:6d:07:d7:a1:2c:10:55:78:98:eb:53:48:eb:82:70:fc: c6:2f:e1:50:d2:87:fe:23:1f:c1:bd:13:1f:7f:d9:78:ea:9c: e4:ae:4c:d0:d6:8b:00:9c:1a:8b:0e:c7:b0:ba:cf:4d:67:5a: d6:3e:38:7b:ba:d7:05:bc:e3:55:c2:39:42:49:a0:35:b3:89: 9b:ab:ca:59:41:62:e4:7c:92:4e:01:06:5b:a2:37:20:d7:6d: 9a:14:80:ce:6e:07:a0:16:68:6c:37:ea:ef:98:99:dc:db:b7: df:b5:86:85:4a:90:a7:5f:58:f2:19:25:03:d4:93:33:bd:4d: e8:6d:2c:4b:ef:b0:b1:e4:2f:9c:f5:ae:54:1c:28:e0:aa:9d: d1:b3:67:75:39:2c:c1:2e:bd:34:bd:f7:b9:dd:2e:99:7c:05: 6a:57:5b:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTEwMTkxMDI2MzBaFw0yNTEwMjYxMDI2MzBaMBgxFjAUBgNV BAMTDTY4ZjRiY2Q2LWY1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOmFAUJVwkr7yIAOTn8qMNy4WXrjq0uKsnShiWwnrr293UOiqdsuLJVurCozqX nnO6XbH3YPrUBR3U5NUAx4wdN2yNoV7TD2Aa0SaY+qIXRDjFThF2LJUrLd2bWBuC sPnryqzVrb7bsTzqBkdlX9lKayntCmr3KOaqjRnGeVCRynAOU0u4IsSCYPGR6QLs a9kgEfkKCYsN97+SYkEC+vXtNX3tpeKvHYbK0z/YlRw/5joMYKOWMfXUJOnBm9LB 8s5iOTrjmklJoqaw43OAcWqcKMjL50jFkDaVIe2GvqKPLTIXlOylehzlFGLY1XgA V1Z+axEhoDF0SOP4MGXSSrXRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+xg+5QZd 8Ke50t3fg55q5aNjh74wHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHLscRc9mz+WwyVl8MFA73oUqsU+Pw51KZlm2bpmW99ebPAtupiR1YxY Al7EhnL4TzP17sNGsoFz2eTG/ohvS3YK6D7Fu0uR0+kfzSTJi5TjsfJzAL3bFtFW XA1AbQfXoSwQVXiY61NI64Jw/MYv4VDSh/4jH8G9Ex9/2XjqnOSuTNDWiwCcGosO x7C6z01nWtY+OHu61wW841XCOUJJoDWziZuryllBYuR8kk4BBluiNyDXbZoUgM5u B6AWaGw36u+Ymdzbt9+1hoVKkKdfWPIZJQPUkzO9TehtLEvvsLHkL5z1rlQcKOCq ndGzZ3U5LMEuvTS997ndLpl8BWpXW/o= -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:11 2025 by rpki-client