$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: HAKYRtZBucM7enQyDEBEsEUUHTgml9S4rPO/5xxsUvI= Subject key identifier: AA:23:4E:3C:72:E0:B8:1F:EC:99:DD:0A:0E:CE:47:D5:60:71:5E:B9 Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0E74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0E6C Signing time: Sat 18 Oct 2025 18:22:48 +0000 Manifest this update: Sat 18 Oct 2025 18:22:47 +0000 Manifest next update: Sat 25 Oct 2025 18:22:47 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: hgdHHjb6LWhGenhUdj66+H/2ovSdBqXY0VOlhTFcDRE=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: X7Dq3eZ/GJf+9yPNH4D4Wvo3ddILMQm0OljP2i+67DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3700 (0xe74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: Oct 18 18:22:47 2025 GMT Not After : Oct 25 18:22:47 2025 GMT Subject: CN=68f3daf7-2b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9b:55:c5:cf:48:6c:29:63:67:40:a3:54:c1: 9d:b5:8b:47:98:16:00:61:9b:1e:69:f6:be:60:e6: 4e:ed:81:8b:82:cb:5b:bf:ee:4f:3e:06:08:e7:47: 39:60:f8:20:fb:a4:ba:2c:38:13:59:a7:5f:77:b3: 14:c4:27:94:63:6d:2a:5f:af:e9:e5:dd:30:9f:61: 5c:a3:90:f7:5d:1e:59:c1:c8:56:17:ac:b6:a4:ef: d2:e1:f8:1e:fa:ff:b1:0f:4a:24:f2:56:23:fd:a0: 58:06:84:5c:a6:9b:3b:0e:81:51:3a:a5:02:70:b2: 3a:5e:8a:23:83:be:82:c1:eb:98:95:64:44:2a:85: 9b:f4:28:62:fc:63:40:c6:01:39:a4:f5:00:92:17: 75:c8:c8:5b:6b:95:7b:b6:70:49:11:45:98:77:99: a8:a6:fb:63:16:7d:b9:76:34:53:d5:92:94:7d:a4: bc:ce:e5:f7:d9:08:31:7b:58:01:bc:cf:4a:70:96: 42:d9:26:62:2e:2a:82:54:08:cc:d7:23:58:16:77: 82:35:01:09:fb:d6:0b:c4:da:11:cc:55:ab:3e:18: ee:a5:84:4e:84:d4:20:aa:09:e4:44:0e:66:ed:cf: 34:e3:5b:c4:8f:d0:64:ff:98:eb:58:2c:3d:11:5d: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:23:4E:3C:72:E0:B8:1F:EC:99:DD:0A:0E:CE:47:D5:60:71:5E:B9 X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:16:fb:b6:6d:87:39:f7:ef:e1:12:51:a3:98:6a:1e:45:fb: 11:59:be:26:77:9e:11:43:e2:47:45:b6:a2:7c:e7:8c:3d:05: ea:cd:14:d2:ca:41:2b:8e:d8:c1:8c:30:e4:b7:ef:a5:11:30: 6b:61:79:58:0a:a6:c7:b6:c0:ef:8b:9f:85:09:ad:ef:d6:3a: 03:bc:07:1b:03:50:64:0a:73:40:be:99:5b:1e:ea:3b:d8:52: 35:aa:0b:34:14:69:09:31:74:37:d8:25:d6:6d:15:d0:a2:da: ea:c7:eb:b8:fc:d4:1b:07:ef:c5:b2:91:63:22:13:a9:c3:d5: f0:f4:6a:69:01:d6:4c:e8:92:da:d6:04:27:98:1b:bc:c3:00: a4:72:38:99:28:f8:f0:22:7b:b1:9c:88:0c:f2:cd:0f:b4:3f: 8c:99:54:bd:e0:e4:7e:ce:ba:0f:4d:7a:33:40:94:ea:92:2c: 64:2b:75:f8:ad:f1:68:db:4c:a9:e4:7e:33:dd:73:4c:86:ec: 53:ee:d4:e9:64:6a:08:8d:08:76:5c:8d:d1:a7:9b:ce:88:35: 64:12:a2:70:51:3c:f9:f2:6a:c5:39:26:0b:4a:7a:6b:73:94: a6:06:c3:cb:f8:a3:50:24:29:b2:e9:dc:93:38:87:48:e8:e1: f7:3a:8f:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjUxMDE4MTgyMjQ3WhcNMjUxMDI1MTgyMjQ3WjAYMRYwFAYD VQQDEw02OGYzZGFmNy0yYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9JtVxc9IbCljZ0CjVMGdtYtHmBYAYZseafa+YOZO7YGLgstbv+5PPgYI50c5 YPgg+6S6LDgTWadfd7MUxCeUY20qX6/p5d0wn2Fco5D3XR5ZwchWF6y2pO/S4fge +v+xD0ok8lYj/aBYBoRcpps7DoFROqUCcLI6Xoojg76CweuYlWREKoWb9Chi/GNA xgE5pPUAkhd1yMhba5V7tnBJEUWYd5mopvtjFn25djRT1ZKUfaS8zuX32Qgxe1gB vM9KcJZC2SZiLiqCVAjM1yNYFneCNQEJ+9YLxNoRzFWrPhjupYROhNQgqgnkRA5m 7c8041vEj9Bk/5jrWCw9EV1AJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKojTjxy 4Lgf7JndCg7OR9VgcV65MB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzFvu2bYc59+/hElGjmGoeRfsRWb4md54RQ+JHRbaifOeMPQXqzRTS ykErjtjBjDDkt++lETBrYXlYCqbHtsDvi5+FCa3v1joDvAcbA1BkCnNAvplbHuo7 2FI1qgs0FGkJMXQ32CXWbRXQotrqx+u4/NQbB+/FspFjIhOpw9Xw9GppAdZM6JLa 1gQnmBu8wwCkcjiZKPjwInuxnIgM8s0PtD+MmVS94OR+zroPTXozQJTqkixkK3X4 rfFo20yp5H4z3XNMhuxT7tTpZGoIjQh2XI3Rp5vOiDVkEqJwUTz58mrFOSYLSnpr c5SmBsPL+KNQJCmy6dyTOIdI6OH3Oo+k -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:12 2025 by rpki-client