$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: 7u1mkVcccBcTnOH2vK/u1Ur0CWKOZGNit8+WINuP5uM= Subject key identifier: 4D:5A:D8:3D:E2:FE:9A:D8:4D:12:C8:F6:B9:E9:70:6A:A9:07:95:7F Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0541 Signing time: Sun 19 Oct 2025 01:18:31 +0000 Manifest this update: Sun 19 Oct 2025 01:18:31 +0000 Manifest next update: Sun 26 Oct 2025 01:18:31 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: YLPPkvos/KQuh1T0ImPhDUfhXiiPvMFkk/4/LBhBBlE=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: XSuhAhi3kRB8kUY+l+Kw6bn9CYFf3Y2Di14tTGA1/Oo=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: /zpbbyMm2w5Xcql5zfUtoN8iPAyG5aFUqVMvzNCSPuM=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: hn+qGaZCtkUKYopOyzVnHKxTxBxzaX/N9RY/bypGInA=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: 9/ZL4wqQ8ewDEJQ51uhQKwNXm0lUHqlJiXvD1GBeNxo=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: rrXHgzUdzEuReffPDCPuY00l4dzYtSiphjTni14sFbs=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 9x2G7s9XnkzB/aoRrwX0fPhCy+k2H2dG9FDGRVFamnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Oct 19 01:18:31 2025 GMT Not After : Oct 26 01:18:31 2025 GMT Subject: CN=68f43c67-4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:66:b9:94:93:44:cc:72:46:5b:3a:21:3d:25: b4:1f:ac:c8:69:2a:0a:3d:66:1d:41:15:45:61:15: ea:97:7e:7c:c4:88:2b:a9:b9:86:86:c9:ba:4d:82: 01:ed:63:b2:8e:da:7f:de:e0:44:c8:2e:ed:3e:e3: 2e:2a:ce:1d:32:3a:f9:1e:6f:67:de:0a:6b:91:e5: fc:59:cb:89:06:7a:b6:c9:c7:17:84:aa:f0:28:de: eb:98:b9:68:5d:ea:b7:8a:72:47:68:a2:e7:47:c2: 16:fa:bd:37:2a:ed:8a:63:2f:9e:d2:b0:c7:2b:50: 26:91:5a:21:b8:77:5d:3a:81:a9:b1:22:8d:24:42: 24:07:8b:c1:fb:42:37:a6:c8:6e:a4:72:18:b8:6d: ff:be:49:ba:7e:22:23:46:dd:33:1d:73:4c:2c:e3: 6a:fa:d8:39:c9:ad:c4:72:05:3d:48:10:f1:b3:9a: 44:8f:05:31:0d:12:6f:08:23:9d:4a:f0:cb:db:5d: 2a:c4:12:0a:88:9e:25:a9:50:2f:1a:98:82:a7:65: 57:8a:92:07:67:da:57:bf:dc:c8:8e:e8:e4:83:1e: d7:94:ef:08:3e:d7:68:67:4a:85:2b:99:6d:a4:65: d8:57:9e:c0:97:3a:41:2a:8f:08:36:f9:cb:84:fd: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5A:D8:3D:E2:FE:9A:D8:4D:12:C8:F6:B9:E9:70:6A:A9:07:95:7F X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:53:0d:6b:ee:3e:66:47:8e:25:de:d8:86:e7:0d:78:92:71: fb:81:d3:98:c3:05:52:c9:88:95:db:62:fa:20:dc:b2:be:4f: fa:95:57:6c:f1:cd:e5:35:f4:b2:8d:e5:94:32:43:a7:43:f5: f0:f2:30:67:ff:7d:42:6d:39:c3:0c:73:c1:ed:d4:a5:5c:06: 42:6f:4b:77:2a:3a:c7:2c:95:91:28:8e:65:c3:7e:5e:9e:cf: d7:65:57:a3:4f:5d:43:8c:5f:bb:46:d6:61:51:b5:6b:98:e1: 6f:43:02:cd:69:20:d5:a1:84:28:ce:64:a8:4f:ba:bb:3a:2f: ae:2c:9f:c9:5e:f9:75:d6:04:82:9f:aa:b9:e6:f3:b2:52:b9: d9:67:c8:b1:6c:61:17:04:6f:27:47:64:55:d5:4f:df:8b:7f: 3f:90:62:23:59:82:fc:08:90:42:a3:70:1f:10:b9:a2:4e:1d: cd:1c:9d:a4:9b:59:1c:09:01:94:05:70:07:6f:8d:17:b8:42: 2a:a6:7c:65:4e:b0:cc:7b:88:69:fd:71:38:cc:26:6f:78:2a: fa:c3:cd:d8:4c:b7:4f:26:01:2a:34:26:c3:83:ea:21:dd:5b: 32:20:0f:90:94:e8:f7:81:d6:2b:f0:4f:83:f1:0a:97:d1:1e: 8a:b6:d4:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUxMDE5MDExODMxWhcNMjUxMDI2MDExODMxWjAYMRYwFAYD VQQDEw02OGY0M2M2Ny00YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ma5lJNEzHJGWzohPSW0H6zIaSoKPWYdQRVFYRXql358xIgrqbmGhsm6TYIB 7WOyjtp/3uBEyC7tPuMuKs4dMjr5Hm9n3gprkeX8WcuJBnq2yccXhKrwKN7rmLlo Xeq3inJHaKLnR8IW+r03Ku2KYy+e0rDHK1AmkVohuHddOoGpsSKNJEIkB4vB+0I3 pshupHIYuG3/vkm6fiIjRt0zHXNMLONq+tg5ya3EcgU9SBDxs5pEjwUxDRJvCCOd SvDL210qxBIKiJ4lqVAvGpiCp2VXipIHZ9pXv9zIjujkgx7XlO8IPtdoZ0qFK5lt pGXYV57AlzpBKo8INvnLhP3ssQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1a2D3i /prYTRLI9rnpcGqpB5V/MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmUw1r7j5mR44l3tiG5w14knH7gdOYwwVSyYiV22L6INyyvk/6lVds 8c3lNfSyjeWUMkOnQ/Xw8jBn/31CbTnDDHPB7dSlXAZCb0t3KjrHLJWRKI5lw35e ns/XZVejT11DjF+7RtZhUbVrmOFvQwLNaSDVoYQozmSoT7q7Oi+uLJ/JXvl11gSC n6q55vOyUrnZZ8ixbGEXBG8nR2RV1U/fi38/kGIjWYL8CJBCo3AfELmiTh3NHJ2k m1kcCQGUBXAHb40XuEIqpnxlTrDMe4hp/XE4zCZveCr6w83YTLdPJgEqNCbDg+oh 3VsyIA+QlOj3gdYr8E+D8QqX0R6KttQn -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:51 2025 by rpki-client