$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: A9w7ojizzLQNc4VGdEYx3c+kw0PC1Cnw8wbfj0PH+Fo= Subject key identifier: B4:DE:43:72:8E:3F:39:1C:C4:61:45:06:28:46:6F:CE:67:0E:5F:90 Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 064D Signing time: Sun 19 Oct 2025 00:12:57 +0000 Manifest this update: Sun 19 Oct 2025 00:12:57 +0000 Manifest next update: Sun 26 Oct 2025 00:12:57 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: Xy0VOTcYdObPenw+2laBBQEvYO26SYbWsPNfKel4Z7E=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Oct 19 00:12:57 2025 GMT Not After : Oct 26 00:12:57 2025 GMT Subject: CN=68f42d09-0bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:d0:d5:f5:22:32:fe:2d:97:5d:66:29:62: f1:63:c4:fc:56:d5:3c:2b:7d:6b:bc:d6:10:da:3b: 3f:2f:7e:4d:ac:2d:0b:2b:1d:b6:7b:f3:2d:5f:f9: 38:f3:57:96:5b:c7:93:85:e9:8f:77:3b:77:d3:07: 9e:40:40:4d:de:14:cf:e9:44:6e:fb:45:3d:0f:1e: 9e:1e:43:71:d2:7d:5d:74:20:d2:4c:a7:30:e4:df: 2b:fb:3d:d0:76:23:17:a5:a5:25:a0:fb:5e:3e:fd: 68:3c:ee:78:41:cf:08:15:7d:d1:c1:99:00:87:fa: dc:05:f6:6a:3b:1e:97:35:1f:83:d9:8d:1b:73:76: 06:77:5f:cd:e9:4e:68:ad:97:d6:88:13:44:42:f7: 56:e6:b6:51:d8:f9:da:9c:c3:5d:6f:19:bb:2b:29: 09:ff:f6:f3:bf:bb:50:ac:8a:38:f0:70:88:2f:e1: a9:67:36:a3:49:4c:59:2f:cb:86:b3:a6:0d:7e:94: 90:9d:e1:44:b0:94:7a:8a:9e:74:f3:43:79:f8:61: 2d:30:54:c0:20:b4:78:9d:ee:45:79:69:e5:88:63: cc:37:97:39:e9:36:e7:b3:13:4d:77:57:22:7e:b2: c5:23:84:31:33:31:65:bb:d5:cb:76:87:a1:92:59: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DE:43:72:8E:3F:39:1C:C4:61:45:06:28:46:6F:CE:67:0E:5F:90 X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:58:1a:63:58:ce:d6:75:8c:aa:ed:2e:08:f4:4f:45:bd:1f: ef:cc:38:7a:2b:ab:e3:e1:6d:f1:84:52:a3:bc:ed:ca:66:3f: 22:00:c9:c9:54:d6:19:e7:43:f4:19:46:08:13:d9:68:b4:df: 91:d9:1e:d2:02:40:45:36:dd:d6:48:5b:0c:6a:9e:08:43:bd: 49:e1:54:62:24:d8:54:29:e8:36:e2:79:f4:26:14:44:b9:6e: 0d:20:10:ff:4e:47:5a:ba:ad:b9:83:60:c0:a0:b7:5a:61:28: 48:a6:ab:5d:f9:ed:ef:6a:9a:bc:d5:62:79:13:ad:c6:3b:6d: d4:54:b0:43:7b:33:f0:fa:ec:65:ee:3f:d9:c1:5a:95:58:55: d1:94:fc:94:47:85:fb:4b:80:f3:59:b6:03:1f:da:3b:fe:57: a4:bb:46:8a:c0:bc:2e:5c:e4:26:a1:cc:2b:4c:f6:3a:c2:b2: 18:06:87:62:56:9b:1a:4e:2a:d7:d5:74:50:46:78:fb:0f:8b: 79:10:d2:ea:cc:f0:ae:11:4d:48:f3:78:88:5e:89:50:a0:1d: 86:ca:88:46:ec:b1:69:b2:b8:22:b0:13:5d:0a:7e:2a:e8:2f: 45:ff:f8:f8:74:79:c9:83:cc:01:e5:8d:b9:ae:86:49:d1:c7: 0e:60:14:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUxMDE5MDAxMjU3WhcNMjUxMDI2MDAxMjU3WjAYMRYwFAYD VQQDEw02OGY0MmQwOS0wYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqS/Q1fUiMv4tl11mKWLxY8T8VtU8K31rvNYQ2js/L35NrC0LKx22e/MtX/k4 81eWW8eThemPdzt30weeQEBN3hTP6URu+0U9Dx6eHkNx0n1ddCDSTKcw5N8r+z3Q diMXpaUloPtePv1oPO54Qc8IFX3RwZkAh/rcBfZqOx6XNR+D2Y0bc3YGd1/N6U5o rZfWiBNEQvdW5rZR2PnanMNdbxm7KykJ//bzv7tQrIo48HCIL+GpZzajSUxZL8uG s6YNfpSQneFEsJR6ip5080N5+GEtMFTAILR4ne5FeWnliGPMN5c56TbnsxNNd1ci frLFI4QxMzFlu9XLdoehklkEzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTeQ3KO PzkcxGFFBihGb85nDl+QMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsWBpjWM7WdYyq7S4I9E9FvR/vzDh6K6vj4W3xhFKjvO3KZj8iAMnJ VNYZ50P0GUYIE9lotN+R2R7SAkBFNt3WSFsMap4IQ71J4VRiJNhUKeg24nn0JhRE uW4NIBD/Tkdauq25g2DAoLdaYShIpqtd+e3vapq81WJ5E63GO23UVLBDezPw+uxl 7j/ZwVqVWFXRlPyUR4X7S4DzWbYDH9o7/leku0aKwLwuXOQmocwrTPY6wrIYBodi VpsaTirX1XRQRnj7D4t5ENLqzPCuEU1I83iIXolQoB2GyohG7LFpsrgisBNdCn4q 6C9F//j4dHnJg8wB5Y25roZJ0ccOYBSh -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:52 2025 by rpki-client