$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json) Hash identifier: E+G9Q4NwUYI/Wsrj3v9vb8vtFWUjOETfCEnLu07ta+0= Subject key identifier: 4B:01:68:EE:C3:6C:15:55:D0:D1:B8:24:92:41:CB:C4:8C:00:22:D8 Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft Manifest number: 025C Signing time: Sun 19 Oct 2025 04:37:16 +0000 Manifest this update: Sun 19 Oct 2025 04:37:16 +0000 Manifest next update: Sun 26 Oct 2025 04:37:16 +0000 Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: yoMlHt1qxKU8XSSChDOoPmAJqrzwQWW7tXROQFynuIU=) 2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Validity Not Before: Oct 19 04:37:16 2025 GMT Not After : Oct 26 04:37:16 2025 GMT Subject: CN=68f46afc-bcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:2b:94:e5:ad:5e:fe:81:0a:c9:a9:ce:c9: b9:04:63:1e:f0:73:07:76:fc:27:54:1b:0d:80:c9: 12:3d:a9:4a:03:a2:a7:11:e8:f4:85:50:80:08:b2: b9:53:3e:4f:ae:b5:50:1f:69:a0:52:d1:cc:72:c9: c4:bc:c0:10:21:cd:bd:01:3e:00:b3:8f:83:20:d0: f0:e7:4e:d3:50:98:e1:21:06:70:83:8d:a9:c8:00: 88:a2:74:59:33:14:ea:77:71:dd:82:68:db:08:90: 11:2b:d9:ea:67:0d:79:38:2d:1d:93:e1:5a:63:ad: ba:7e:62:33:f7:4f:c3:d2:cc:67:48:b5:27:2d:74: 8a:20:eb:d6:79:44:43:89:96:4a:42:ce:1c:87:47: 82:2e:c5:cf:81:1d:fc:92:e5:45:87:c6:26:1f:ae: 7c:bf:89:c8:6c:a9:63:be:43:87:24:4d:34:65:78: 8c:1f:63:13:ca:8b:1e:78:59:25:22:95:32:eb:65: 7a:74:3d:68:fb:c3:68:ee:90:dc:7a:c7:03:b1:23: d6:a8:6b:fe:89:36:f4:05:12:f6:e8:fe:7c:34:3e: d1:b2:73:40:f2:60:94:b7:f3:1b:bb:eb:a6:c0:06: 6b:29:96:fa:08:37:6e:4a:78:76:eb:b0:f5:37:4e: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:68:EE:C3:6C:15:55:D0:D1:B8:24:92:41:CB:C4:8C:00:22:D8 X509v3 Authority Key Identifier: keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:72:39:0b:8e:42:5f:a0:f5:d5:ab:41:32:02:40:55:ac:9d: 67:1f:6e:63:ce:46:bd:7c:6c:0b:5a:ac:a3:51:00:7f:77:4e: 91:90:5e:2e:58:91:b6:a6:15:35:51:8d:bf:db:04:c9:b8:7d: 36:a4:cf:65:48:8a:94:f6:0c:95:37:5f:90:0c:57:f5:f1:be: c7:02:09:c8:4e:4a:1a:4f:4b:26:d3:a8:c8:98:ef:c7:31:5f: 13:2c:b4:00:de:4b:40:71:35:59:48:a0:26:e9:a3:94:54:09: c0:31:47:e7:08:1f:e6:9a:52:ca:e0:ea:e6:4d:5a:05:1b:81: 52:1b:82:8f:47:24:6d:0b:89:de:76:8d:a9:0e:fa:96:80:9a: e0:de:a6:46:ff:cf:40:c7:d4:bd:e9:18:9e:a4:52:40:98:79: 38:e8:ff:76:ff:e6:2b:dc:4d:e9:be:bc:3d:a3:e0:51:4c:d9: 2f:e9:a6:2d:82:ca:38:dd:2a:a4:e3:a3:72:03:6d:7e:3d:76: ac:fe:f0:7c:b0:7d:1e:57:15:a8:df:55:ab:e5:e6:5b:57:63: 96:27:b8:3c:1a:87:43:87:c3:ee:33:99:84:30:af:da:09:26: 0c:08:f7:f2:54:1f:f0:cc:6f:d4:4e:02:37:0b:18:aa:46:41: 8b:28:be:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU0QjExMC8GA1UEBRMoRDBBNDY2NkFGMzVCNEI2NTREODE4MUM0Q0QxQzkxMUFF Rjk5NDVCQjAeFw0yNTEwMTkwNDM3MTZaFw0yNTEwMjYwNDM3MTZaMBgxFjAUBgNV BAMTDTY4ZjQ2YWZjLWJjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfkiuU5a1e/oEKyanOybkEYx7wcwd2/CdUGw2AyRI9qUoDoqcR6PSFUIAIsrlT Pk+utVAfaaBS0cxyycS8wBAhzb0BPgCzj4Mg0PDnTtNQmOEhBnCDjanIAIiidFkz FOp3cd2CaNsIkBEr2epnDXk4LR2T4Vpjrbp+YjP3T8PSzGdItSctdIog69Z5REOJ lkpCzhyHR4Iuxc+BHfyS5UWHxiYfrny/ichsqWO+Q4ckTTRleIwfYxPKix54WSUi lTLrZXp0PWj7w2jukNx6xwOxI9aoa/6JNvQFEvbo/nw0PtGyc0DyYJS38xu766bA BmsplvoIN25KeHbrsPU3Tg8NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSwFo7sNs FVXQ0bgkkkHLxIwAItgwHwYDVR0jBBgwFoAU0KRmavNbS2VNgYHEzRyRGu+ZRbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTRCL0MxNDAxNkI0OEQ3 RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJWTmdZSEV6UnlSR3UtWlJi cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEtSbWF2TmJTMlZOZ1lIRXpSeVJHdS1aUmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RTRCL0MxNDAxNkI0OEQ3RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJW TmdZSEV6UnlSR3UtWlJicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxyOQuOQl+g9dWrQTICQFWsnWcfbmPORr18bAtarKNRAH93TpGQXi5Y kbamFTVRjb/bBMm4fTakz2VIipT2DJU3X5AMV/XxvscCCchOShpPSybTqMiY78cx XxMstADeS0BxNVlIoCbpo5RUCcAxR+cIH+aaUsrg6uZNWgUbgVIbgo9HJG0Lid52 jakO+paAmuDepkb/z0DH1L3pGJ6kUkCYeTjo/3b/5ivcTem+vD2j4FFM2S/ppi2C yjjdKqTjo3IDbX49dqz+8HywfR5XFajfVavl5ltXY5YnuDwah0OHw+4zmYQwr9oJ JgwI9/JUH/DMb9ROAjcLGKpGQYsovjI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:01 2025 by rpki-client