$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft File: bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json) Hash identifier: brcWEzTttE97KUhfAbF5OFTBO9+TbR7qNw156LuHuI4= Subject key identifier: 8E:D4:1C:2A:F2:C5:E5:7E:0B:2F:99:A1:02:CC:CD:08:D9:DA:4D:2D Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Certificate serial: 19B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft Manifest number: 1963 Signing time: Sat 18 Oct 2025 16:49:08 +0000 Manifest this update: Sat 18 Oct 2025 16:49:07 +0000 Manifest next update: Sat 25 Oct 2025 16:49:07 +0000 Files and hashes: 1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: MQG775e5ymsrGsVH/cpeggXZEwbDX/Hk0hBc476EmIg=) 2: 7AF2C29C50C811F09EF54B31C4F9AE02.roa (hash: jG3cUbtm554H7AD3dhUJ+NzhtzlcaiTkqkxRj23wG2c=) 3: 682214D6505711F08AA6EA60C4F9AE02.roa (hash: GMifjOan9zjfGsumgJ0TL9VR/xphZ6U6tm6+SoHoHZc=) 4: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (hash: dceLhAn5ElbChEaUwf/DaqfinbRbtnjApELgjG/plvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6583 (0x19b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Validity Not Before: Oct 18 16:49:07 2025 GMT Not After : Oct 25 16:49:07 2025 GMT Subject: CN=68f3c504-9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:cf:8d:40:b8:b0:b6:da:00:9a:03:f7:05: ca:e4:a8:3d:46:43:b2:ff:4b:79:23:8e:d3:3b:1b: d4:54:c3:4b:8d:81:35:79:13:d2:58:59:92:0a:12: ed:75:a4:2d:9b:5d:e1:d9:bf:f3:5b:ef:39:37:23: 63:94:9a:f8:3a:69:b0:b1:01:09:f1:ca:c4:ef:09: c7:b0:b7:be:fe:f9:0e:25:7a:0d:47:d1:73:b3:35: 3d:61:05:24:46:aa:aa:6c:63:41:72:ae:1f:bb:47: ce:be:df:79:31:02:a5:e4:97:ec:52:5b:df:b0:b1: 64:75:07:a2:ae:0a:79:82:a2:13:7b:74:c5:9b:d1: 45:f0:1d:78:5e:3f:2e:00:fc:fe:3e:e1:40:52:c7: 9b:96:af:bd:85:e0:ab:ca:d8:0b:2c:5a:02:07:ef: 76:09:9f:6f:0c:5d:66:c6:71:b0:35:2e:0e:2d:71: e0:ee:79:49:3d:5f:a6:3f:af:bc:54:c7:ab:89:97: c4:c4:0b:e1:98:a1:d7:f1:93:d6:80:e3:75:34:4e: 18:4e:bb:be:6d:4c:2b:36:82:02:a8:c7:dc:35:cb: dc:11:fa:55:32:6c:1f:ce:b2:38:35:a0:fc:86:80: e9:2f:07:bd:06:ec:aa:d8:98:43:f7:04:7e:75:09: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:1C:2A:F2:C5:E5:7E:0B:2F:99:A1:02:CC:CD:08:D9:DA:4D:2D X509v3 Authority Key Identifier: keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d8:00:24:51:62:15:b2:27:d1:fb:da:a5:88:4a:57:2a:1f: 33:22:c3:5b:35:49:c8:d9:bc:d8:f3:89:fe:a0:d6:46:6d:77: 32:de:a1:4d:1a:46:6b:e9:13:f9:1f:c2:f4:cc:6f:e1:45:dc: 73:2e:2a:d3:2e:26:7d:60:a3:62:bc:c3:79:b5:5a:7f:6d:70: a7:ab:55:ca:40:04:b0:89:23:07:65:36:f5:ad:bf:64:d4:34: 86:66:bf:dc:42:3f:6d:57:16:7a:16:be:02:11:5f:ea:24:49: 21:d1:f2:b6:08:e4:fb:14:27:9f:cc:14:ce:ab:5e:d3:22:35: d2:f9:21:53:a0:a2:0c:ed:88:55:cb:b2:33:0e:8e:46:1f:86: c1:50:af:79:dc:77:8d:12:5f:08:e6:a5:d0:28:ba:63:45:21: 9b:62:d3:80:fc:27:43:6c:7d:70:1b:9d:0f:2c:a1:64:29:83: de:2f:29:2e:cb:39:a5:ac:58:08:6f:d2:ca:53:d0:bc:6b:10: 7f:4f:e2:e0:5a:c6:16:37:78:4f:4e:4c:3b:d6:cb:94:cd:c2: 16:1b:aa:34:b3:1f:96:79:09:a1:b7:fc:6e:d2:2b:aa:87:e0: fb:99:bb:ad:57:98:88:41:cd:64:d5:dc:be:cb:e8:82:d4:4d: a2:be:56:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz NTA5MUI1NEEwHhcNMjUxMDE4MTY0OTA3WhcNMjUxMDI1MTY0OTA3WjAYMRYwFAYD VQQDEw02OGYzYzUwNC05OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T3PjUC4sLbaAJoD9wXK5Kg9RkOy/0t5I47TOxvUVMNLjYE1eRPSWFmSChLt daQtm13h2b/zW+85NyNjlJr4OmmwsQEJ8crE7wnHsLe+/vkOJXoNR9FzszU9YQUk RqqqbGNBcq4fu0fOvt95MQKl5JfsUlvfsLFkdQeirgp5gqITe3TFm9FF8B14Xj8u APz+PuFAUseblq+9heCrytgLLFoCB+92CZ9vDF1mxnGwNS4OLXHg7nlJPV+mP6+8 VMeriZfExAvhmKHX8ZPWgON1NE4YTru+bUwrNoICqMfcNcvcEfpVMmwfzrI4NaD8 hoDpLwe9Buyq2JhD9wR+dQnBZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7UHCry xeV+Cy+ZoQLMzQjZ2k0tMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMxOS84NjhERDY1NjhDMjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5o V2J5eGpyYmVoaWMxQ1J0VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2AAkUWIVsifR+9qliEpXKh8zIsNbNUnI2bzY84n+oNZGbXcy3qFN GkZr6RP5H8L0zG/hRdxzLirTLiZ9YKNivMN5tVp/bXCnq1XKQASwiSMHZTb1rb9k 1DSGZr/cQj9tVxZ6Fr4CEV/qJEkh0fK2COT7FCefzBTOq17TIjXS+SFToKIM7YhV y7IzDo5GH4bBUK953HeNEl8I5qXQKLpjRSGbYtOA/CdDbH1wG50PLKFkKYPeLyku yzmlrFgIb9LKU9C8axB/T+LgWsYWN3hPTkw71suUzcIWG6o0sx+WeQmht/xu0iuq h+D7mbutV5iIQc1k1dy+y+iC1E2ivlb8 -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:25 2025 by rpki-client