$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: 2gE9MQ2lWHcwgTFZpZqerC66gzEeWbfC6QVhm787FYw= Subject key identifier: BC:A5:EB:4B:35:85:FC:E1:0A:F3:82:71:06:1D:83:E4:8E:E0:F6:7B Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: 0111 Signing time: Sun 19 Oct 2025 07:52:27 +0000 Manifest this update: Sun 19 Oct 2025 07:52:27 +0000 Manifest next update: Sun 26 Oct 2025 07:52:27 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: oNOV+/7tSozFDEqo2wtx+HGdo1QQIcHOJ8QrJdM1Pgc=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Oct 19 07:52:27 2025 GMT Not After : Oct 26 07:52:27 2025 GMT Subject: CN=68f498bb-3198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:aa:01:f1:4d:fc:a0:62:a1:dc:ff:e4:45: 40:ef:0d:43:d7:70:39:7b:fa:32:fb:69:72:d0:f7: 6d:b2:5e:5c:2d:9a:ff:a0:5a:7a:7d:77:4f:3b:61: 71:6b:76:5d:c9:88:96:1f:52:af:96:d4:1a:f8:09: 11:77:01:85:5c:f2:4c:97:66:8c:96:6f:ce:13:a1: 72:a6:11:69:87:5b:cd:b4:30:c1:12:37:eb:d9:cf: b5:d6:97:0e:99:44:cb:7a:1e:4c:64:3c:02:22:f0: e0:3b:48:c7:00:72:8c:9e:0f:1c:c7:06:8a:2e:78: 58:8d:f0:3c:62:40:0d:2e:5c:21:d9:12:15:d5:47: aa:24:95:19:7d:c3:d5:99:55:c4:8a:28:84:c0:5a: 83:f5:25:69:50:8a:49:61:35:61:2e:3e:0a:48:02: 65:3a:27:f2:12:6b:48:2d:9d:fa:cd:b0:e6:95:d7: 4f:c8:90:0c:be:6f:14:6e:89:e9:91:59:b4:ae:c2: 4a:56:96:16:02:d3:1a:77:7d:6f:41:b7:f0:cf:8a: a6:f5:43:a7:01:ed:0b:5b:ba:61:ca:55:4f:87:fd: 2b:aa:ce:71:b6:08:eb:50:31:58:d0:ff:30:3a:51: 5d:15:5b:f6:cf:2d:7b:d4:97:a7:4e:ad:e7:9b:82: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:EB:4B:35:85:FC:E1:0A:F3:82:71:06:1D:83:E4:8E:E0:F6:7B X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e1:a7:e7:1f:85:01:e3:36:b0:a3:39:c6:46:6e:50:38:71: 31:21:36:13:b0:29:a6:bc:2a:35:45:c8:55:a1:1b:62:c5:79: 8b:f7:ca:01:e4:c0:ff:c2:ab:ed:2e:24:18:7d:cf:96:98:cd: cf:76:d9:c9:5a:28:50:de:ed:15:46:e5:0e:07:b7:14:f7:21: 68:ba:b1:45:da:54:f4:5f:1c:a8:1a:f0:e2:23:86:6e:75:27: e9:11:3a:89:cb:25:7a:10:0c:3f:ea:b8:9b:ad:e6:5a:ca:67: 8f:00:b7:14:1a:d7:40:59:cf:3b:fc:96:9c:c0:8d:91:65:26: 1a:5e:18:44:65:16:60:8f:50:ab:81:9e:67:86:31:02:69:60: 11:63:a6:cf:1a:3c:31:13:d3:9c:19:f9:29:9f:d0:96:6c:d7: 58:cf:87:65:ec:2f:f0:08:08:76:2a:89:f0:11:cb:47:d2:19: a7:f1:a4:c7:82:c2:cd:52:e5:67:bd:7b:f8:ee:d4:dc:5f:a8: 0e:3c:e1:b4:95:41:a0:6e:5d:a8:1e:46:08:3f:c0:55:ce:8f: f1:93:4f:29:32:11:26:79:80:55:67:99:52:ed:24:25:06:02: f0:b9:30:54:df:e0:0b:5a:a5:10:bd:4e:47:9e:48:b3:ab:3d: 27:d3:74:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUxMDE5MDc1MjI3WhcNMjUxMDI2MDc1MjI3WjAYMRYwFAYD VQQDEw02OGY0OThiYi0zMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzymqAfFN/KBiodz/5EVA7w1D13A5e/oy+2ly0Pdtsl5cLZr/oFp6fXdPO2Fx a3ZdyYiWH1KvltQa+AkRdwGFXPJMl2aMlm/OE6FyphFph1vNtDDBEjfr2c+11pcO mUTLeh5MZDwCIvDgO0jHAHKMng8cxwaKLnhYjfA8YkANLlwh2RIV1UeqJJUZfcPV mVXEiiiEwFqD9SVpUIpJYTVhLj4KSAJlOifyEmtILZ36zbDmlddPyJAMvm8Ubonp kVm0rsJKVpYWAtMad31vQbfwz4qm9UOnAe0LW7phylVPh/0rqs5xtgjrUDFY0P8w OlFdFVv2zy171JenTq3nm4JBtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyl60s1 hfzhCvOCcQYdg+SO4PZ7MB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx4afnH4UB4zawoznGRm5QOHExITYTsCmmvCo1RchVoRtixXmL98oB 5MD/wqvtLiQYfc+WmM3PdtnJWihQ3u0VRuUOB7cU9yFourFF2lT0XxyoGvDiI4Zu dSfpETqJyyV6EAw/6ribreZaymePALcUGtdAWc87/JacwI2RZSYaXhhEZRZgj1Cr gZ5nhjECaWARY6bPGjwxE9OcGfkpn9CWbNdYz4dl7C/wCAh2KonwEctH0hmn8aTH gsLNUuVnvXv47tTcX6gOPOG0lUGgbl2oHkYIP8BVzo/xk08pMhEmeYBVZ5lS7SQl BgLwuTBU3+ALWqUQvU5Hnkizqz0n03TZ -----END CERTIFICATE-----Generated at Mon Oct 20 05:49:16 2025 by rpki-client