$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: KSXprINdWQC5iA7/u8k3Yk1ff5QLlViIfpaNSm33ODE= Subject key identifier: 07:A4:4F:12:DB:09:98:C0:EF:F3:6C:71:26:CC:EB:76:EB:5C:AD:9B Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 4D Signing time: Sun 19 Oct 2025 10:43:39 +0000 Manifest this update: Sun 19 Oct 2025 10:43:38 +0000 Manifest next update: Sun 26 Oct 2025 10:43:38 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: j/IkzL3jmfiYbT5g0KAg/PZbM/QPPOfWDVQa2/0xLvE=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Oct 19 10:43:38 2025 GMT Not After : Oct 26 10:43:38 2025 GMT Subject: CN=68f4c0da-142f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:55:f3:c7:ea:be:57:62:a4:32:17:07:52: 54:db:74:c5:d4:b3:54:65:95:dc:7e:e1:92:86:d2: 3a:12:3e:7e:79:d9:79:b9:49:73:af:92:b7:2c:79: bf:6e:e6:76:38:6d:8a:e6:e0:6a:77:76:e1:6c:41: f9:13:22:c6:82:f7:3b:3d:07:e2:18:8c:ac:be:3c: 0f:1b:74:5e:91:85:a3:30:5f:05:02:7a:b4:9c:38: ee:fa:7d:0d:cd:94:17:5d:68:33:b0:ac:bb:ee:17: e0:92:d7:8c:49:68:bc:cd:03:ba:14:89:6e:2a:ee: b9:95:16:04:04:62:d7:26:32:89:de:61:4b:bf:25: 91:15:cd:52:65:8e:17:cc:44:4b:1d:4a:a2:45:87: 32:9c:9f:65:9f:1d:48:34:3d:93:fe:4b:c1:09:f7: 10:e7:56:8c:a6:b5:01:e1:38:45:17:0e:93:c8:e0: ed:9a:d2:b5:14:57:9f:3b:8e:4a:d3:99:ca:b5:49: 44:7c:38:cd:c1:ff:e0:52:78:ad:60:2a:ed:06:7f: 68:52:5a:92:e0:b7:e7:f5:b8:ba:87:19:07:a1:18: 66:6b:ff:75:9b:90:82:fa:cb:bf:ac:ec:09:1b:c0: 21:0f:f3:85:03:31:0f:8a:eb:cc:56:75:a6:a4:c0: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A4:4F:12:DB:09:98:C0:EF:F3:6C:71:26:CC:EB:76:EB:5C:AD:9B X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ef:82:0c:d7:ad:e9:04:25:76:62:ec:d8:95:93:64:ae:cb: 62:bb:62:9d:ee:26:5a:66:ca:49:38:3a:77:99:fa:d8:53:48: a2:cf:59:4a:ab:b0:16:c3:05:20:6b:92:30:7a:bb:24:93:4a: eb:f7:9c:3a:97:7a:4a:91:3b:cf:f5:ee:32:25:41:d0:ee:fd: a2:d9:3d:70:b2:61:94:b6:70:c9:99:09:db:fd:d6:eb:2d:fe: d1:c4:09:79:de:82:ca:93:7b:ff:1c:54:e8:74:cd:3f:1a:37: ee:52:10:a4:55:db:96:37:dd:ff:1d:74:df:e9:af:78:0f:bf: fd:ce:88:a2:1d:9c:0c:12:1f:52:6c:be:9e:e8:c6:9a:09:88: 60:f7:4a:75:ca:b1:bc:d2:6d:28:74:62:53:19:54:5b:69:0b: 58:0d:3a:1e:ed:1d:b4:a4:e1:46:f8:d5:03:9b:13:38:77:19: e1:8d:98:48:d2:f1:37:8a:1e:87:49:ae:47:18:ea:7b:c4:af: 37:ed:d0:28:ab:41:ec:77:fc:31:b2:03:d5:9b:92:d7:98:b7: c4:5e:c2:32:6c:a4:9c:9e:21:1f:d2:f8:7c:2f:3a:1d:22:25: 43:ff:e8:d7:7e:42:ca:5d:79:34:f5:44:96:3e:51:60:34:38: 5e:66:b6:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTEwMTkxMDQzMzhaFw0yNTEwMjYxMDQzMzhaMBgxFjAUBgNV BAMTDTY4ZjRjMGRhLTE0MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKFVXzx+q+V2KkMhcHUlTbdMXUs1Rlldx+4ZKG0joSPn552Xm5SXOvkrcseb9u 5nY4bYrm4Gp3duFsQfkTIsaC9zs9B+IYjKy+PA8bdF6RhaMwXwUCerScOO76fQ3N lBddaDOwrLvuF+CS14xJaLzNA7oUiW4q7rmVFgQEYtcmMoneYUu/JZEVzVJljhfM REsdSqJFhzKcn2WfHUg0PZP+S8EJ9xDnVoymtQHhOEUXDpPI4O2a0rUUV587jkrT mcq1SUR8OM3B/+BSeK1gKu0Gf2hSWpLgt+f1uLqHGQehGGZr/3WbkIL6y7+s7Akb wCEP84UDMQ+K68xWdaakwJbxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB6RPEtsJ mMDv82xxJszrdutcrZswHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPvggzXrekEJXZi7NiVk2Suy2K7Yp3uJlpmykk4OneZ+thTSKLPWUqr sBbDBSBrkjB6uySTSuv3nDqXekqRO8/17jIlQdDu/aLZPXCyYZS2cMmZCdv91ust /tHECXnegsqTe/8cVOh0zT8aN+5SEKRV25Y33f8ddN/pr3gPv/3OiKIdnAwSH1Js vp7oxpoJiGD3SnXKsbzSbSh0YlMZVFtpC1gNOh7tHbSk4Ub41QObEzh3GeGNmEjS 8TeKHodJrkcY6nvErzft0CirQex3/DGyA9WbkteYt8RewjJspJyeIR/S+HwvOh0i JUP/6Nd+QspdeTT1RJY+UWA0OF5mtuo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:29 2025 by rpki-client