$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft File: r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json) Hash identifier: CgZZbBgH9h585am19R6wagoG/72tmF2rdfmTcp+Fp0k= Subject key identifier: 9F:86:B3:92:6D:73:9C:DC:A9:2E:03:93:00:11:C8:04:08:AB:8F:B3 Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Certificate serial: 0C07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft Manifest number: 0C00 Signing time: Sat 18 Oct 2025 19:37:15 +0000 Manifest this update: Sat 18 Oct 2025 19:37:14 +0000 Manifest next update: Sat 25 Oct 2025 19:37:14 +0000 Files and hashes: 1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: sPDTzyX1nCQ533xHHrJ+/VNXLtXqzzAuoyH7jEhagTk=) 2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: GOn5I83uJZSyXlxS2nqYANbi3ziYR8hFxpWIpKnwdbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3079 (0xc07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Validity Not Before: Oct 18 19:37:14 2025 GMT Not After : Oct 25 19:37:14 2025 GMT Subject: CN=68f3ec6a-2842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:f8:3b:5f:e8:a7:67:81:ca:9f:e6:ad:46: 59:73:94:40:4a:af:28:65:8a:fc:e9:b8:44:a0:8b: 82:a3:ae:13:39:f7:d6:f1:dc:ca:98:97:23:c9:6f: 34:11:0b:e4:64:17:81:f8:29:29:10:d0:41:7d:a5: 44:37:d4:0f:64:49:66:ee:76:d8:35:68:2b:6b:60: db:1a:f0:95:0a:06:14:3f:fe:31:4f:2e:93:63:b9: fc:ae:69:aa:8f:1d:34:a7:ee:27:60:c4:6b:cc:a1: 20:ec:ac:ff:98:3f:43:64:1d:e9:81:80:9c:6f:b2: 54:83:64:f6:aa:f5:fb:4e:d6:a2:b0:db:c9:d2:23: 7c:5c:dd:28:64:9a:89:f3:8e:65:e5:05:62:3d:d8: 92:5d:7c:63:26:19:67:7f:23:38:3b:91:72:ef:86: 32:03:5e:06:e0:33:7a:e9:fb:b0:2d:5e:50:23:45: ac:84:ef:aa:87:aa:3f:ed:ab:0d:26:f3:4d:1f:43: bb:a7:26:c1:bd:04:10:67:35:a9:c3:ff:2a:37:cc: 39:1e:6e:d0:e6:f4:98:4e:99:b2:b9:ba:4d:1b:ac: e2:c7:a4:d1:5b:ca:5c:58:a4:38:48:38:f8:ce:f7: 6e:40:4a:bf:4c:65:a1:ac:46:a1:6e:98:bc:3b:0e: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:B3:92:6D:73:9C:DC:A9:2E:03:93:00:11:C8:04:08:AB:8F:B3 X509v3 Authority Key Identifier: keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:7c:c0:a0:0a:f1:bc:d1:f4:c4:89:92:ae:d8:cf:9f:c9: 5f:95:5c:61:ae:c7:11:77:da:f4:db:50:69:07:a5:29:59:72: ac:8b:57:4b:46:ea:61:0e:d7:3c:17:05:df:55:b1:6b:c1:76: 01:33:03:ee:e4:74:f2:11:c6:3c:b4:dc:86:65:75:65:d4:38: 56:bb:c5:43:3e:60:6b:ae:13:9d:69:54:ce:d1:32:f6:f3:33: 7b:02:84:38:bf:c5:99:26:8b:ce:8a:4f:eb:c4:cb:92:7a:0e: 55:e0:55:df:46:bc:9a:57:a5:59:0c:a5:26:da:5a:f3:ee:17: 78:ef:d8:f6:ac:0d:45:32:32:64:22:b7:71:71:3e:16:e9:85: 50:66:20:ce:50:dd:c8:f8:d3:ef:8c:1a:0b:cb:56:84:6a:ba: 6d:1f:46:6b:cb:85:77:2f:fa:08:58:fd:a9:9b:14:20:c5:df: 5a:8d:16:70:aa:0b:7e:df:b3:d2:11:4d:0c:0a:0c:ac:99:68: 7e:dd:49:77:e6:52:25:4e:8c:8b:42:65:3e:da:19:44:81:90: 81:15:33:30:34:1e:79:82:a4:dc:e2:53:25:ea:e7:b7:4b:8e: 9b:7b:4a:e2:23:f4:3e:41:01:9a:14:e2:09:b0:f3:d6:82:f9: d1:85:e3:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyMEUxMTAvBgNVBAUTKEFGNkExOERCM0EwNzFFRjE4Q0NBNUJFOEIzNTQzM0RG NTQ0RjBGQjIwHhcNMjUxMDE4MTkzNzE0WhcNMjUxMDI1MTkzNzE0WjAYMRYwFAYD VQQDEw02OGYzZWM2YS0yODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsL4O1/op2eByp/mrUZZc5RASq8oZYr86bhEoIuCo64TOffW8dzKmJcjyW80 EQvkZBeB+CkpENBBfaVEN9QPZElm7nbYNWgra2DbGvCVCgYUP/4xTy6TY7n8rmmq jx00p+4nYMRrzKEg7Kz/mD9DZB3pgYCcb7JUg2T2qvX7TtaisNvJ0iN8XN0oZJqJ 845l5QViPdiSXXxjJhlnfyM4O5Fy74YyA14G4DN66fuwLV5QI0WshO+qh6o/7asN JvNNH0O7pybBvQQQZzWpw/8qN8w5Hm7Q5vSYTpmyubpNG6zix6TRW8pcWKQ4SDj4 zvduQEq/TGWhrEahbpi8Ow4EdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+Gs5Jt c5zcqS4DkwARyAQIq4+zMB8GA1UdIwQYMBaAFK9qGNs6Bx7xjMpb6LNUM99UTw+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTIwRS8yM0FBRDk4RTFG QzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2R015bHZvczFRejMxUlBE N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Iyb1kyem9ISHZHTXlsdm9zMVF6MzFSUEQ3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTIwRS8yM0FBRDk4RTFGQzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2 R015bHZvczFRejMxUlBEN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLnzAoArxvNH0xImSrtjPn8lflVxhrscRd9r021BpB6UpWXKsi1dL RuphDtc8FwXfVbFrwXYBMwPu5HTyEcY8tNyGZXVl1DhWu8VDPmBrrhOdaVTO0TL2 8zN7AoQ4v8WZJovOik/rxMuSeg5V4FXfRryaV6VZDKUm2lrz7hd479j2rA1FMjJk IrdxcT4W6YVQZiDOUN3I+NPvjBoLy1aEarptH0Zry4V3L/oIWP2pmxQgxd9ajRZw qgt+37PSEU0MCgysmWh+3Ul35lIlToyLQmU+2hlEgZCBFTMwNB55gqTc4lMl6ue3 S46be0riI/Q+QQGaFOIJsPPWgvnRheMl -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:36 2025 by rpki-client