$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: IgsLUCcXi3rWWyYeXU3fzoo9wBMaSoERXlj4V7ke2hY= Subject key identifier: 3A:19:6E:FC:C5:C8:4B:56:24:97:40:49:01:D8:A5:15:21:69:FD:06 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E36 Signing time: Sat 18 Oct 2025 18:29:09 +0000 Manifest this update: Sat 18 Oct 2025 18:29:08 +0000 Manifest next update: Sat 25 Oct 2025 18:29:08 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: 0cpYjHfhfsUoGVEoNACOTTbFy7ZYGRZVLsp6hD4zJn8=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: DurC24jDEySwBvnHLWPC4SxsoJWd0wHtB7dUrheJ8l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3662 (0xe4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Oct 18 18:29:08 2025 GMT Not After : Oct 25 18:29:08 2025 GMT Subject: CN=68f3dc75-1e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ea:a3:16:09:39:48:31:6f:a5:94:44:f9:b6: e1:c5:0e:6a:f6:59:d8:11:e0:57:de:86:5e:49:46: 22:33:b1:61:5c:8b:9f:4e:2e:df:72:93:5e:c2:19: 23:5c:85:bb:43:cb:57:cc:9a:55:a0:2c:e2:be:e3: 4d:6f:b4:7f:6e:bb:2d:60:c2:51:89:34:e9:8b:a3: e2:08:eb:58:2a:8f:4f:60:63:1e:34:c9:39:1c:1e: 34:69:6c:f1:8d:16:9f:7b:ad:8c:fa:4f:eb:cd:59: 2e:06:81:a0:eb:68:e9:48:9b:55:a4:4f:50:5a:76: 65:28:a1:94:16:10:fa:3b:0f:4c:ee:c4:14:e9:0b: 5a:c3:81:0b:c6:02:02:5e:0c:20:dc:66:c5:dc:ef: 36:08:c7:96:0a:8f:a9:6d:89:1a:79:ff:ce:c1:1e: 80:25:2d:70:10:b2:7f:79:9b:11:b2:30:c0:7f:9e: bc:44:56:64:a9:c7:cb:42:34:b9:7f:da:bc:dc:b0: 72:ec:8c:4f:8e:72:be:68:ef:ce:34:bc:d4:0c:ee: ee:3e:6e:85:26:1a:16:bd:0b:9e:10:68:76:4e:db: e1:05:d1:97:4f:eb:17:e0:a9:35:f3:49:7d:47:13: b8:e6:59:8d:2c:3c:b1:e3:10:dc:22:2d:f1:0f:2b: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:6E:FC:C5:C8:4B:56:24:97:40:49:01:D8:A5:15:21:69:FD:06 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:87:db:2e:67:40:00:28:b6:0b:98:b9:50:e3:90:2f:5d:80: 76:cc:ce:ee:33:b8:17:d6:75:28:63:85:5f:20:4a:70:41:8b: 67:75:36:2b:25:c9:14:70:bf:f3:e8:ee:27:8b:85:97:a1:39: 1f:fa:7d:18:b1:fe:e8:f5:72:ea:3c:2c:5c:e4:4f:4d:06:e6: f0:4b:e9:34:24:75:cb:0f:76:bd:f2:ad:94:78:3f:7a:5d:63: 2e:b7:e6:10:87:d2:bf:22:9d:59:38:c0:99:ce:de:db:d7:13: 74:a5:23:a5:d7:25:60:4f:0e:4e:7f:b2:5f:ca:ac:27:ff:6c: bf:7b:e0:41:fc:b3:01:09:3f:8a:ad:3d:02:36:a1:4f:7d:f1: 34:98:9a:30:d3:73:28:64:79:0f:48:a3:9c:ec:6a:fb:16:ec: af:49:a5:80:ce:ec:1e:de:52:53:86:24:99:f7:c8:aa:f1:75: 28:45:17:f5:6f:d4:a0:12:db:36:8a:c2:7f:1a:af:d7:0e:2a: 55:89:4d:ff:8f:3d:c6:01:ea:ab:2a:51:4a:1b:b7:3e:a9:af: 59:5b:61:c2:31:62:e1:5a:8d:c6:37:64:ab:a1:ae:b2:30:5d: 9a:5e:ef:a2:4c:de:58:38:83:ee:09:05:d4:c5:e1:4a:ce:46: 94:3b:85:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUxMDE4MTgyOTA4WhcNMjUxMDI1MTgyOTA4WjAYMRYwFAYD VQQDEw02OGYzZGM3NS0xZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eqjFgk5SDFvpZRE+bbhxQ5q9lnYEeBX3oZeSUYiM7FhXIufTi7fcpNewhkj XIW7Q8tXzJpVoCzivuNNb7R/brstYMJRiTTpi6PiCOtYKo9PYGMeNMk5HB40aWzx jRafe62M+k/rzVkuBoGg62jpSJtVpE9QWnZlKKGUFhD6Ow9M7sQU6Qtaw4ELxgIC Xgwg3GbF3O82CMeWCo+pbYkaef/OwR6AJS1wELJ/eZsRsjDAf568RFZkqcfLQjS5 f9q83LBy7IxPjnK+aO/ONLzUDO7uPm6FJhoWvQueEGh2TtvhBdGXT+sX4Kk180l9 RxO45lmNLDyx4xDcIi3xDysWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoZbvzF yEtWJJdASQHYpRUhaf0GMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZh9suZ0AAKLYLmLlQ45AvXYB2zM7uM7gX1nUoY4VfIEpwQYtndTYr JckUcL/z6O4ni4WXoTkf+n0Ysf7o9XLqPCxc5E9NBubwS+k0JHXLD3a98q2UeD96 XWMut+YQh9K/Ip1ZOMCZzt7b1xN0pSOl1yVgTw5Of7Jfyqwn/2y/e+BB/LMBCT+K rT0CNqFPffE0mJow03MoZHkPSKOc7Gr7FuyvSaWAzuwe3lJThiSZ98iq8XUoRRf1 b9SgEts2isJ/Gq/XDipViU3/jz3GAeqrKlFKG7c+qa9ZW2HCMWLhWo3GN2Sroa6y MF2aXu+iTN5YOIPuCQXUxeFKzkaUO4Uk -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:10 2025 by rpki-client