$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: fJJH/1O5W2z/t4GGVIHFoQWmD05VJDbaLj1LnAq58sA= Subject key identifier: DB:43:65:3E:96:C9:B6:0F:1A:29:B9:E7:71:37:BA:EC:AD:5B:7F:97 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 0976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 0970 Signing time: Sat 18 Oct 2025 21:10:33 +0000 Manifest this update: Sat 18 Oct 2025 21:10:32 +0000 Manifest next update: Sat 25 Oct 2025 21:10:32 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: g4kjT+JLuh1gmDGMJOV7jEbFjHNnyxsa23sJCW0bavA=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: McDtUaMk7e01xsshJ/22xBrdGiD8USZ0rSk/8TzyXxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Oct 18 21:10:32 2025 GMT Not After : Oct 25 21:10:32 2025 GMT Subject: CN=68f40248-4485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:c8:96:ca:1b:44:05:ad:f6:70:f1:ea:60: ef:88:a6:43:f0:fe:ee:7a:02:03:f4:19:d1:e5:27: 16:2a:de:67:de:41:d8:97:12:6e:78:13:fe:d2:a6: 30:dc:7f:5f:ee:98:24:7d:b6:36:d0:49:4c:04:aa: 63:9d:c0:4a:fb:85:1a:61:61:d7:68:b3:3f:80:17: d4:14:d0:11:43:d2:7e:9b:0e:ec:48:04:53:09:7b: b6:56:3e:6a:bb:d4:93:1c:2c:f0:85:6c:86:0b:53: 27:a2:4f:54:7c:80:39:54:41:d8:47:f2:90:65:71: 6d:e6:20:d1:d0:97:fa:13:9b:3c:ea:37:54:4b:7b: 23:60:d1:37:86:64:f6:d1:a9:a3:8f:c3:5c:58:18: b6:12:76:89:f8:0a:30:63:51:bd:be:12:0f:25:ce: 24:3d:de:1d:39:11:2a:60:3a:ab:47:78:80:20:b3: 68:f7:d1:b4:48:cf:e2:eb:90:a8:a7:1a:95:b3:ac: 27:24:c1:31:6e:af:13:5e:30:79:6c:47:94:fc:a7: 8b:7c:8a:40:47:db:d8:14:e0:78:c0:b0:07:83:68: 9a:2a:93:9d:1a:31:91:49:80:de:1a:d4:4c:e1:9d: 5d:e6:24:ca:42:9c:f0:68:7e:21:42:e5:45:6d:46: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:65:3E:96:C9:B6:0F:1A:29:B9:E7:71:37:BA:EC:AD:5B:7F:97 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b5:1c:7f:d2:98:ac:b7:09:0d:c3:0c:be:88:0f:23:13:13: fe:6f:31:bc:75:49:d1:80:7b:62:40:71:19:8f:4a:f5:ce:3d: 58:a5:58:16:0e:8d:ad:b1:2a:57:01:0f:21:a8:c6:61:88:8e: 91:3b:82:8c:51:1f:a9:53:2a:96:81:2b:f5:63:b1:81:46:38: c5:20:af:fa:d2:e4:e6:1c:1e:63:28:e6:3e:a5:1d:1e:62:8e: 73:79:29:3b:fc:24:41:a5:cd:de:63:35:1e:7b:52:3f:25:7d: ad:34:40:f1:72:0c:58:43:03:88:9b:c8:cd:58:f5:9d:c7:b8: 15:8d:09:7d:d1:06:49:8e:2d:d0:9e:50:a3:a6:3b:7c:94:e1: e0:f0:30:b2:4b:f6:cf:bb:1c:b3:1b:87:13:88:a0:20:11:8f: 80:a2:f9:47:b1:df:ae:dc:bc:c0:08:e2:fe:9c:f3:66:29:c9: b9:5a:db:d2:98:2a:8d:7e:73:ee:ae:eb:da:99:99:99:9d:d8: 2a:0c:4c:54:ab:9f:56:b2:ea:ab:fc:f2:14:b3:d0:9c:92:03: b5:80:bc:fd:41:d2:66:8b:4d:25:43:cd:a5:16:93:28:c7:ba: 4c:dd:58:d3:40:a1:04:69:a3:81:79:d6:aa:98:4a:46:5d:ca: 4d:bf:83:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjUxMDE4MjExMDMyWhcNMjUxMDI1MjExMDMyWjAYMRYwFAYD VQQDEw02OGY0MDI0OC00NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufnIlsobRAWt9nDx6mDviKZD8P7uegID9BnR5ScWKt5n3kHYlxJueBP+0qYw 3H9f7pgkfbY20ElMBKpjncBK+4UaYWHXaLM/gBfUFNARQ9J+mw7sSARTCXu2Vj5q u9STHCzwhWyGC1Mnok9UfIA5VEHYR/KQZXFt5iDR0Jf6E5s86jdUS3sjYNE3hmT2 0amjj8NcWBi2EnaJ+AowY1G9vhIPJc4kPd4dOREqYDqrR3iAILNo99G0SM/i65Co pxqVs6wnJMExbq8TXjB5bEeU/KeLfIpAR9vYFOB4wLAHg2iaKpOdGjGRSYDeGtRM 4Z1d5iTKQpzwaH4hQuVFbUaMjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtDZT6W ybYPGim553E3uuytW3+XMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWtRx/0pistwkNwwy+iA8jExP+bzG8dUnRgHtiQHEZj0r1zj1YpVgW Do2tsSpXAQ8hqMZhiI6RO4KMUR+pUyqWgSv1Y7GBRjjFIK/60uTmHB5jKOY+pR0e Yo5zeSk7/CRBpc3eYzUee1I/JX2tNEDxcgxYQwOIm8jNWPWdx7gVjQl90QZJji3Q nlCjpjt8lOHg8DCyS/bPuxyzG4cTiKAgEY+AovlHsd+u3LzACOL+nPNmKcm5WtvS mCqNfnPuruvamZmZndgqDExUq59Wsuqr/PIUs9CckgO1gLz9QdJmi00lQ82lFpMo x7pM3VjTQKEEaaOBedaqmEpGXcpNv4PT -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:14 2025 by rpki-client