$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: q50+VpCWgUbH5lNsrWT7kVC4rjIgh805CTH2FqXyK+k= Subject key identifier: CA:22:C7:1A:16:F7:57:BC:01:29:26:04:7E:3F:47:91:6E:70:67:D9 Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 08A3 Signing time: Sat 18 Oct 2025 21:40:20 +0000 Manifest this update: Sat 18 Oct 2025 21:40:20 +0000 Manifest next update: Sat 25 Oct 2025 21:40:20 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: SokKig6zuqyJZ5AF/vGP+wt7VzNf2TKSJaKteVWovmQ=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: p0a0nQBisH4VKwtpLEiKDNLpUVAu9yIvpOIZZoB51RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Oct 18 21:40:20 2025 GMT Not After : Oct 25 21:40:20 2025 GMT Subject: CN=68f40944-a38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:2c:da:b1:17:5f:7d:7d:13:b6:de:39:87: 82:92:df:ee:da:b9:30:4d:ae:8c:73:2f:66:81:35: 9e:70:14:e5:0c:ca:0c:26:3e:f3:46:e8:ac:93:81: 77:2f:84:97:47:7b:82:fe:82:e0:6a:3a:4d:75:83: 94:5f:34:b8:ad:a0:9f:d8:87:c2:8f:12:ef:97:24: 65:e0:14:7f:ac:0a:6f:9a:68:46:9f:00:4b:3c:c1: f4:49:a6:6d:dd:ed:58:3f:d9:64:35:f4:ae:9d:f6: 0e:d6:9a:72:05:bb:1f:b0:92:b4:6e:29:d4:7a:03: 68:79:54:49:36:4d:76:93:2b:4d:b0:9b:7e:6d:78: ee:83:40:df:f5:ee:55:18:6d:dc:2c:6e:f3:5c:2e: e8:51:94:c7:a0:79:64:b9:a3:60:46:b6:35:82:fb: 00:86:80:d7:2b:8f:d1:cb:5b:23:55:7c:8a:95:6c: 9a:8c:d5:d9:d4:8f:f2:90:47:49:a2:87:c9:ca:8d: 18:15:74:b4:95:94:b1:85:92:64:48:9e:5f:6d:97: 6c:a7:f7:6b:6d:4c:8a:04:f1:c5:e2:da:e9:ad:e2: 86:3e:93:42:fb:04:83:32:ad:e9:74:7a:21:d0:0e: 07:64:f2:f4:eb:cd:ce:78:b5:22:a0:1d:2e:17:cb: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:C7:1A:16:F7:57:BC:01:29:26:04:7E:3F:47:91:6E:70:67:D9 X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e7:80:38:06:8f:de:b4:d5:7f:68:bf:52:4f:c0:d5:63:99: 4a:8f:e1:59:eb:fd:6b:48:cf:46:4e:01:ce:7c:b3:51:16:ab: 87:a2:36:8e:45:1d:9a:08:3c:2f:84:34:70:f0:2c:6a:b6:a3: 13:a4:d8:91:55:84:b6:9d:ce:f6:02:a3:1f:0c:b8:ca:39:59: b0:9c:cb:a2:26:a1:c6:9b:50:ae:0a:ce:76:63:20:22:f6:f9: 8d:d0:e1:c8:f1:cc:09:b8:17:0f:84:b8:5b:3b:c5:b6:bc:ea: ce:39:9f:4b:9d:3d:e7:93:23:5b:c6:48:3a:ed:67:99:8d:7e: 6c:c0:f9:93:5d:83:d8:b4:41:2c:f8:11:ee:dc:86:52:a8:cd: e0:30:39:81:15:88:d6:3b:39:16:da:ec:46:ff:32:ce:31:71: 04:eb:e8:4e:eb:c2:5b:d0:98:bd:b2:e2:a1:36:ba:b0:39:16: 2b:ba:b0:2f:be:be:2a:33:2c:76:05:65:3c:c9:b8:e0:8c:d6: 82:80:4c:24:e5:02:3b:0a:35:81:1b:9a:c7:f4:24:57:69:c5: ec:7a:dc:2b:a5:22:fd:27:7a:14:20:21:69:84:37:50:c9:1a: 08:8a:f3:4f:74:1a:6b:2f:00:23:8e:ae:06:62:57:31:59:b5: ce:51:4c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUxMDE4MjE0MDIwWhcNMjUxMDI1MjE0MDIwWjAYMRYwFAYD VQQDEw02OGY0MDk0NC1hMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweEs2rEXX319E7beOYeCkt/u2rkwTa6Mcy9mgTWecBTlDMoMJj7zRuisk4F3 L4SXR3uC/oLgajpNdYOUXzS4raCf2IfCjxLvlyRl4BR/rApvmmhGnwBLPMH0SaZt 3e1YP9lkNfSunfYO1ppyBbsfsJK0binUegNoeVRJNk12kytNsJt+bXjug0Df9e5V GG3cLG7zXC7oUZTHoHlkuaNgRrY1gvsAhoDXK4/Ry1sjVXyKlWyajNXZ1I/ykEdJ oofJyo0YFXS0lZSxhZJkSJ5fbZdsp/drbUyKBPHF4trpreKGPpNC+wSDMq3pdHoh 0A4HZPL0683OeLUioB0uF8sBXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoixxoW 91e8ASkmBH4/R5FucGfZMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF54A4Bo/etNV/aL9ST8DVY5lKj+FZ6/1rSM9GTgHOfLNRFquHojaO RR2aCDwvhDRw8CxqtqMTpNiRVYS2nc72AqMfDLjKOVmwnMuiJqHGm1CuCs52YyAi 9vmN0OHI8cwJuBcPhLhbO8W2vOrOOZ9LnT3nkyNbxkg67WeZjX5swPmTXYPYtEEs +BHu3IZSqM3gMDmBFYjWOzkW2uxG/zLOMXEE6+hO68Jb0Ji9suKhNrqwORYrurAv vr4qMyx2BWU8ybjgjNaCgEwk5QI7CjWBG5rH9CRXacXsetwrpSL9J3oUICFphDdQ yRoIivNPdBprLwAjjq4GYlcxWbXOUUwY -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:44 2025 by rpki-client