$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft File: UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json) Hash identifier: idW1DKHH24GChw3LGJ57GAZ/qzK/yOTq7XY3OXY4o9M= Subject key identifier: BC:83:26:EB:C2:CC:29:9B:CE:09:0F:F3:FB:81:E3:8A:97:CD:71:0A Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE Certificate issuer: /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft Manifest number: 0188 Signing time: Sun 19 Oct 2025 06:10:09 +0000 Manifest this update: Sun 19 Oct 2025 06:10:09 +0000 Manifest next update: Sun 26 Oct 2025 06:10:09 +0000 Files and hashes: 1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: ZxIDSjgl5HwKvdlPw2r+HalbkoeD6vM86z/1/uEYudo=) 2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: 33db+G2HmqK4GM+/q2Pot6yftpHMysN5n0HwgMWkack=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE Validity Not Before: Oct 19 06:10:09 2025 GMT Not After : Oct 26 06:10:09 2025 GMT Subject: CN=68f480c1-9a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:49:83:63:4c:09:46:b7:71:85:b9:44:15: da:cb:e6:7d:bf:bd:43:e6:46:60:90:2a:ea:b7:01: 75:43:49:a9:15:dd:74:12:f4:65:73:ee:36:3b:b5: 05:cd:4f:af:66:b3:e4:da:da:3f:e9:da:87:6e:aa: aa:fc:7c:f3:6f:32:a1:48:43:d3:b0:fd:96:44:c8: 21:9f:69:20:58:f0:8a:91:8c:57:6c:29:2c:f9:e9: 66:0f:fe:72:44:4e:a0:20:cc:e0:f2:bb:0f:8d:ac: dd:9f:3a:c4:1c:62:8a:b7:c1:7c:e1:8d:79:7d:7b: c0:b8:0e:a3:28:40:bd:c9:0a:99:73:b7:a2:29:c4: e1:98:93:38:c4:43:2f:c8:0f:c7:13:d1:43:e3:3b: 24:f5:4d:81:b2:84:69:aa:b3:fb:0f:22:5d:20:c1: e9:b6:b4:83:22:d2:2b:00:0c:a9:fc:ec:9b:d8:36: 0b:9e:1a:f0:f8:44:f7:39:b3:f8:c0:a8:21:c8:5b: 68:c6:19:f9:d0:59:63:55:7e:a4:85:2f:4f:7a:e5: fc:b7:49:26:9a:93:af:ee:61:bd:41:f4:ad:a2:25: 2d:0c:2c:3e:ed:44:1e:c1:bd:64:e8:19:fe:15:49: 26:bd:42:df:60:1b:25:a1:e9:fb:33:7b:c1:e3:93: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:83:26:EB:C2:CC:29:9B:CE:09:0F:F3:FB:81:E3:8A:97:CD:71:0A X509v3 Authority Key Identifier: keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:f7:15:96:bb:4a:9c:1c:83:0d:d4:15:e7:7a:10:f7:f1: c3:62:7f:e6:59:6a:3a:0f:b8:d3:16:76:67:53:e0:95:69:1b: 52:fe:05:86:f7:b8:b7:b0:72:47:cd:e1:9a:63:36:ba:b9:4d: 72:cf:b7:1c:bc:bc:1d:70:6d:04:d4:fb:fd:9c:18:4a:0c:40: d5:a7:0a:8e:15:cf:71:88:fe:77:d1:be:ba:16:51:c0:85:c3: 61:c3:00:37:af:0b:2f:d2:d3:f5:56:c1:86:34:de:49:52:80: 1e:f9:e5:e3:a8:b2:0c:73:63:5a:b9:f8:c8:c7:b9:e2:5a:d5: de:1a:71:63:0c:d1:c5:15:5c:32:5f:c6:13:d8:7a:09:2a:a3: b4:5e:f5:0d:74:36:e7:7d:ef:30:34:56:53:1a:dd:ef:08:01: 10:c9:f2:b8:d9:28:30:96:b3:39:b3:85:f7:f0:0f:0b:a4:25: a0:39:5d:39:bd:40:07:f3:f4:85:c7:64:1b:b3:3d:58:5f:da: c2:91:bf:89:65:3c:14:92:74:50:cb:a5:10:70:d5:fd:58:30: 1c:02:ad:32:37:d8:b4:1c:ae:c0:f6:44:cd:ff:42:06:3e:99: cc:07:3e:f4:ed:b3:b1:e5:76:04:97:d9:a5:47:61:22:b8:05: 63:3b:6d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx MEQ1Q0NDQUUwHhcNMjUxMDE5MDYxMDA5WhcNMjUxMDI2MDYxMDA5WjAYMRYwFAYD VQQDEw02OGY0ODBjMS05YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJhJg2NMCUa3cYW5RBXay+Z9v71D5kZgkCrqtwF1Q0mpFd10EvRlc+42O7UF zU+vZrPk2to/6dqHbqqq/HzzbzKhSEPTsP2WRMghn2kgWPCKkYxXbCks+elmD/5y RE6gIMzg8rsPjazdnzrEHGKKt8F84Y15fXvAuA6jKEC9yQqZc7eiKcThmJM4xEMv yA/HE9FD4zsk9U2BsoRpqrP7DyJdIMHptrSDItIrAAyp/Oyb2DYLnhrw+ET3ObP4 wKghyFtoxhn50FljVX6khS9PeuX8t0kmmpOv7mG9QfStoiUtDCw+7UQewb1k6Bn+ FUkmvULfYBsloen7M3vB45OJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyDJuvC zCmbzgkP8/uB44qXzXEKMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0 N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6 SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1 MjI2VExxaUdpZHdRMWN6SzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1h/cVlrtKnByDDdQV53oQ9/HDYn/mWWo6D7jTFnZnU+CVaRtS/gWG 97i3sHJHzeGaYza6uU1yz7ccvLwdcG0E1Pv9nBhKDEDVpwqOFc9xiP530b66FlHA hcNhwwA3rwsv0tP1VsGGNN5JUoAe+eXjqLIMc2NaufjIx7niWtXeGnFjDNHFFVwy X8YT2HoJKqO0XvUNdDbnfe8wNFZTGt3vCAEQyfK42SgwlrM5s4X38A8LpCWgOV05 vUAH8/SFx2Qbsz1YX9rCkb+JZTwUknRQy6UQcNX9WDAcAq0yN9i0HK7A9kTN/0IG PpnMBz707bOx5XYEl9mlR2EiuAVjO22T -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:17 2025 by rpki-client