$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: Hpx59T4P1hlraVmzwHZs+3SLluEuSzR9DV8clxmNTRc= Subject key identifier: 28:8F:10:D4:63:A8:C9:17:00:3A:78:4A:B0:B1:C5:BB:18:50:89:AA Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 02F1 Signing time: Sun 19 Oct 2025 03:22:50 +0000 Manifest this update: Sun 19 Oct 2025 03:22:50 +0000 Manifest next update: Sun 26 Oct 2025 03:22:50 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: zmRXL1ARDoxqFuIQ1cGx622ndN95FbiLyqYJKME3ZLU=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Oct 19 03:22:50 2025 GMT Not After : Oct 26 03:22:50 2025 GMT Subject: CN=68f4598a-fc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:7e:ad:30:17:46:f6:42:0b:00:47:89:86: 7d:56:3a:0c:ac:84:00:e6:0d:34:10:1f:69:f0:e4: 96:0d:c6:b5:b9:e3:72:0a:c1:04:70:63:b5:e7:c9: 1e:b2:eb:bc:df:a2:ad:ba:7e:ff:ba:ee:76:9c:d7: 44:70:bb:a0:e2:be:08:80:3d:c5:87:83:24:09:79: f7:9a:b4:b1:c6:0c:de:5b:4c:c4:93:87:74:b9:7c: 39:51:c1:5b:7d:0f:99:ec:4d:6b:b8:95:fa:ba:34: ae:a6:e9:c3:cb:93:c2:38:5e:1f:38:97:6e:fc:ea: 69:19:4f:b6:4b:91:1e:b1:3f:b7:7f:04:df:c9:10: 09:2a:18:4c:35:85:92:4b:f3:4e:80:13:b4:5a:2f: fe:6f:fe:b7:22:1b:9a:80:93:cc:35:d4:da:c3:72: c7:85:f2:a6:97:18:5c:91:ca:21:74:bb:ba:8b:63: 85:47:72:c7:01:9e:fb:91:bf:e0:2a:a9:f7:e6:6e: 05:a9:e7:7d:d1:d9:ab:c5:e8:7f:96:2d:68:26:00: de:42:6c:22:eb:7a:5c:42:00:52:e5:a2:6c:86:e2: 1c:45:ab:4d:0a:3c:41:c2:8a:ac:8f:a6:b7:d9:65: 58:1e:80:a9:4b:74:44:97:7f:66:7e:7b:02:d7:7c: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8F:10:D4:63:A8:C9:17:00:3A:78:4A:B0:B1:C5:BB:18:50:89:AA X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c7:37:c3:05:a7:2d:f8:ac:07:a7:3f:98:69:7c:49:09:8e: c5:4f:04:0d:c9:72:a4:e6:fd:e4:89:f5:79:eb:61:16:4b:91: f2:97:ec:d1:9a:a2:4d:70:25:af:1e:48:cd:5c:4a:aa:79:05: 09:35:b7:e9:7f:c0:b2:64:64:75:37:73:d1:6d:31:3f:30:29: 55:a4:06:d2:b0:f9:dd:d0:36:79:68:c0:ee:db:4d:58:2d:ea: 58:37:05:f5:37:5f:c3:93:ae:f3:e6:8b:04:88:66:f0:1b:fb: bf:be:a8:d8:f3:6a:17:cb:12:4f:17:3e:ea:38:ef:eb:15:b4: 9b:e9:1c:53:d2:bc:ba:d8:55:45:83:29:2f:e5:ca:75:92:2f: 16:e8:5b:b3:e3:97:f8:c9:48:1b:8d:ac:d2:3c:ea:a3:84:65: e8:23:f5:a7:f4:84:fc:16:c8:7f:09:63:c8:8b:84:d0:5f:97: 6a:af:d8:7f:94:a5:be:59:a8:f7:64:f1:6a:09:fb:16:1f:a7: b0:3d:74:eb:35:04:1e:c5:65:99:70:7f:99:49:69:ff:d2:35: 55:47:eb:7a:44:92:04:3d:ef:5a:e1:2a:66:39:05:d0:e4:1c: 08:30:54:3a:b4:c5:af:3a:af:ac:0e:96:9d:12:ed:c7:0e:8a: 7e:dd:56:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUxMDE5MDMyMjUwWhcNMjUxMDI2MDMyMjUwWjAYMRYwFAYD VQQDEw02OGY0NTk4YS1mYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKt+rTAXRvZCCwBHiYZ9VjoMrIQA5g00EB9p8OSWDca1ueNyCsEEcGO158ke suu836Ktun7/uu52nNdEcLug4r4IgD3Fh4MkCXn3mrSxxgzeW0zEk4d0uXw5UcFb fQ+Z7E1ruJX6ujSupunDy5PCOF4fOJdu/OppGU+2S5EesT+3fwTfyRAJKhhMNYWS S/NOgBO0Wi/+b/63IhuagJPMNdTaw3LHhfKmlxhckcohdLu6i2OFR3LHAZ77kb/g Kqn35m4Fqed90dmrxeh/li1oJgDeQmwi63pcQgBS5aJshuIcRatNCjxBwoqsj6a3 2WVYHoCpS3REl39mfnsC13xafQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiPENRj qMkXADp4SrCxxbsYUImqMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBixzfDBact+KwHpz+YaXxJCY7FTwQNyXKk5v3kifV562EWS5Hyl+zR mqJNcCWvHkjNXEqqeQUJNbfpf8CyZGR1N3PRbTE/MClVpAbSsPnd0DZ5aMDu201Y LepYNwX1N1/Dk67z5osEiGbwG/u/vqjY82oXyxJPFz7qOO/rFbSb6RxT0ry62FVF gykv5cp1ki8W6Fuz45f4yUgbjazSPOqjhGXoI/Wn9IT8Fsh/CWPIi4TQX5dqr9h/ lKW+Waj3ZPFqCfsWH6ewPXTrNQQexWWZcH+ZSWn/0jVVR+t6RJIEPe9a4SpmOQXQ 5BwIMFQ6tMWvOq+sDpadEu3HDop+3VYD -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:46 2025 by rpki-client