$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: 55z3Za9To6CzBz5od770eZAOejuEbHVxOkEwRf0SySg= Subject key identifier: 7E:6C:5D:25:04:83:25:BC:1B:1E:FD:D1:48:47:7B:97:6C:8F:A1:F8 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 084D Signing time: Sat 18 Oct 2025 21:54:46 +0000 Manifest this update: Sat 18 Oct 2025 21:54:45 +0000 Manifest next update: Sat 25 Oct 2025 21:54:45 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: lbNhu8ibtB7T7BPMbETR9KGWftR2bVuUkqKAcfXPqHQ=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: 6NwFc4G6kbW7IIFb4mldHTmS90zuZDDfhVsh0xYOrRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Oct 18 21:54:45 2025 GMT Not After : Oct 25 21:54:45 2025 GMT Subject: CN=68f40ca6-b39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:46:fa:4a:d5:bf:24:ff:4c:d7:b0:cb:50: 9f:45:2c:20:a7:b0:e0:bb:88:7e:da:a7:15:eb:bb: 06:95:85:8d:96:99:01:38:41:20:77:cc:57:45:0d: 2b:31:84:f0:c5:b7:be:0b:ee:19:5f:75:c6:2a:ea: 40:fa:40:df:7d:ba:ae:10:1d:e8:5f:55:96:bd:01: 39:a6:a8:23:2c:d1:2b:4a:41:b6:a1:92:05:a8:22: 95:31:55:d6:e7:e9:9f:68:35:da:d9:eb:5c:28:bb: 3e:70:f1:ea:be:33:14:cd:5d:96:da:c3:12:52:d9: 0c:5b:2e:14:99:4f:0a:30:0f:0e:26:79:e5:b3:f2: df:2e:7a:d9:36:4e:1d:2e:99:71:fa:d4:93:b7:e7: 6e:96:96:fa:0a:c7:7d:81:48:d4:d3:9a:43:83:13: ce:be:20:4e:40:ea:44:85:ba:f4:5f:3d:e0:8a:52: 94:ab:db:5b:89:d6:9c:98:f4:4b:6b:12:44:57:fa: 58:9a:71:c3:e7:6e:00:a2:db:ff:66:60:c7:46:18: cb:5e:c8:89:ef:7c:90:2b:9c:6a:67:2a:a0:67:42: ba:f4:30:59:ca:7b:c1:ec:16:2c:aa:86:97:09:fe: c9:38:a7:45:e7:92:92:aa:8e:b4:b5:50:f6:04:68: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6C:5D:25:04:83:25:BC:1B:1E:FD:D1:48:47:7B:97:6C:8F:A1:F8 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:35:77:b9:38:30:12:46:93:8b:0b:87:47:52:07:84:6d:d1: 52:ea:03:48:17:9c:9c:df:00:01:2c:1f:94:31:29:1f:86:93: 04:e7:5d:cd:44:92:cf:13:b4:67:97:f2:66:7b:90:28:f4:fe: ac:10:fd:63:b1:70:8b:1a:09:22:07:14:a5:41:5e:a4:35:c3: ef:5b:0c:8c:46:e1:5c:d8:fd:d6:70:9f:11:3d:3a:8b:28:a7: 50:b3:6a:0d:4b:12:b9:ab:f7:80:19:8e:f5:86:bc:26:22:43: d7:30:29:1b:69:de:12:94:83:ce:c0:4e:f8:74:c9:2b:0a:1f: f6:af:21:50:ca:a9:87:a3:17:1f:51:f3:17:f0:e9:9d:e2:0a: c4:8c:ac:78:06:ff:6f:55:50:4f:4c:59:34:05:a3:1e:68:2a: c0:72:e8:9d:c9:24:c8:00:0d:c5:86:4b:ca:c1:2f:de:d2:00: 20:7f:05:a2:27:e5:a3:6b:1b:44:da:22:8e:8d:21:69:0b:58: a9:4d:3a:5b:c5:48:9b:8b:f8:67:0a:c3:d3:04:9d:30:16:aa: 60:22:06:16:8a:64:53:55:ab:76:d0:dc:11:42:b6:5b:3e:f3: 7d:8e:62:1f:58:28:1a:5f:cf:32:c7:10:e6:aa:7e:a5:b5:e3: a0:95:a9:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUxMDE4MjE1NDQ1WhcNMjUxMDI1MjE1NDQ1WjAYMRYwFAYD VQQDEw02OGY0MGNhNi1iMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUtG+krVvyT/TNewy1CfRSwgp7Dgu4h+2qcV67sGlYWNlpkBOEEgd8xXRQ0r MYTwxbe+C+4ZX3XGKupA+kDffbquEB3oX1WWvQE5pqgjLNErSkG2oZIFqCKVMVXW 5+mfaDXa2etcKLs+cPHqvjMUzV2W2sMSUtkMWy4UmU8KMA8OJnnls/LfLnrZNk4d Lplx+tSTt+dulpb6Csd9gUjU05pDgxPOviBOQOpEhbr0Xz3gilKUq9tbidacmPRL axJEV/pYmnHD524Aotv/ZmDHRhjLXsiJ73yQK5xqZyqgZ0K69DBZynvB7BYsqoaX Cf7JOKdF55KSqo60tVD2BGh46QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5sXSUE gyW8Gx790UhHe5dsj6H4MB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkNXe5ODASRpOLC4dHUgeEbdFS6gNIF5yc3wABLB+UMSkfhpME513N RJLPE7Rnl/Jme5Ao9P6sEP1jsXCLGgkiBxSlQV6kNcPvWwyMRuFc2P3WcJ8RPTqL KKdQs2oNSxK5q/eAGY71hrwmIkPXMCkbad4SlIPOwE74dMkrCh/2ryFQyqmHoxcf UfMX8Omd4grEjKx4Bv9vVVBPTFk0BaMeaCrAcuidySTIAA3FhkvKwS/e0gAgfwWi J+WjaxtE2iKOjSFpC1ipTTpbxUibi/hnCsPTBJ0wFqpgIgYWimRTVat20NwRQrZb PvN9jmIfWCgaX88yxxDmqn6lteOglakN -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:38 2025 by rpki-client