$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: Yfxzr9l9aROgtsjTG0cdtRaee4UZ0xWG1WHly6s/LwI= Subject key identifier: D5:EF:0D:7B:6F:0A:23:FF:B7:5F:51:9E:28:FE:F0:24:4D:8A:04:9E Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0DB1 Signing time: Sat 18 Oct 2025 18:38:12 +0000 Manifest this update: Sat 18 Oct 2025 18:38:11 +0000 Manifest next update: Sat 25 Oct 2025 18:38:11 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: pM4IbGP0hZKbz7lbLf+oz+nSEbpzTN13vSWPln/Tk+c=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3560 (0xde8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Oct 18 18:38:11 2025 GMT Not After : Oct 25 18:38:11 2025 GMT Subject: CN=68f3de93-ad39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:99:14:c3:a3:69:3d:11:76:a4:d6:a0:7d:f5: ad:cf:97:16:4b:4f:93:e7:17:fa:32:4f:90:3b:99: 28:d8:95:d9:e1:2d:6d:d1:a0:f8:1f:2c:79:d8:ce: ff:10:fa:a8:72:69:02:fa:cd:a1:db:a4:43:f9:7c: b8:39:32:0c:89:b3:e3:6a:dd:7e:be:7d:d4:0a:61: d8:38:69:27:97:1a:31:b2:e1:a8:58:79:51:12:bf: 0e:5b:cc:e5:d1:8f:06:8c:09:c0:eb:28:7e:57:3a: a0:d8:61:39:b6:59:28:7a:3c:73:13:6f:38:19:95: 72:b8:eb:f9:11:b5:34:9c:66:df:87:f5:46:e2:64: 07:8f:04:9b:4a:27:4a:7d:6a:c6:08:e2:cd:63:f6: 86:3a:8d:56:01:92:61:cc:ea:8a:0a:3e:77:53:fd: 39:42:0e:02:5c:ae:ea:71:3c:d5:17:f8:a5:c0:92: e2:a4:e0:e3:73:78:85:64:40:52:4d:7c:6b:22:91: 44:d0:bb:83:84:be:cd:d4:bd:e7:0e:92:f1:52:ff: 9c:76:65:dd:87:e6:ec:3f:0d:88:7c:83:f2:43:fe: bc:60:28:12:54:ca:30:88:27:fb:81:39:8a:ec:3f: c4:a9:da:c9:85:67:c8:b9:dc:f2:f7:60:de:1f:05: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EF:0D:7B:6F:0A:23:FF:B7:5F:51:9E:28:FE:F0:24:4D:8A:04:9E X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d3:05:79:75:96:8d:bd:fc:81:a8:e6:fb:f3:ac:70:4b:51: 50:56:bb:2e:22:d8:75:20:36:a2:02:f5:a2:4d:e9:6d:4a:13: c8:57:46:66:39:ab:b9:bb:51:e2:87:a6:c3:86:de:61:77:cb: 80:c6:46:04:1e:ed:fd:75:9b:50:bf:fd:b5:4a:98:7b:02:20: aa:e8:6d:af:9a:e7:6a:de:82:78:2f:6c:ac:25:28:79:f9:6b: ea:3e:01:bd:7e:57:fb:f7:07:d6:89:b1:a0:fd:9d:b7:7f:00: d1:22:54:c3:c4:45:df:61:5c:1a:3f:62:d8:57:60:f4:0f:a2: 12:4c:0a:96:97:2f:46:dd:64:aa:94:83:1c:86:bd:76:33:23: db:74:4e:83:f3:9c:0f:13:c2:8d:9b:b6:19:59:3c:73:3c:da: 0d:e6:66:62:76:6c:08:66:15:b5:14:58:b2:e4:f4:56:b5:e0: 31:d7:4c:ce:a3:23:9e:f7:3e:d4:44:40:7f:aa:4e:18:60:c1: f4:82:8b:f6:40:13:2a:bb:3b:26:e7:a6:a2:b1:bc:e0:10:72: a9:ef:7d:7c:64:3c:8a:19:fc:55:25:15:d7:67:f6:8f:14:dc: 85:4f:dd:6c:7a:34:b8:c4:6a:a0:3a:1e:fe:ec:62:59:f3:e9: ec:25:65:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUxMDE4MTgzODExWhcNMjUxMDI1MTgzODExWjAYMRYwFAYD VQQDEw02OGYzZGU5My1hZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZkUw6NpPRF2pNagffWtz5cWS0+T5xf6Mk+QO5ko2JXZ4S1t0aD4Hyx52M7/ EPqocmkC+s2h26RD+Xy4OTIMibPjat1+vn3UCmHYOGknlxoxsuGoWHlREr8OW8zl 0Y8GjAnA6yh+Vzqg2GE5tlkoejxzE284GZVyuOv5EbU0nGbfh/VG4mQHjwSbSidK fWrGCOLNY/aGOo1WAZJhzOqKCj53U/05Qg4CXK7qcTzVF/ilwJLipODjc3iFZEBS TXxrIpFE0LuDhL7N1L3nDpLxUv+cdmXdh+bsPw2IfIPyQ/68YCgSVMowiCf7gTmK 7D/EqdrJhWfIudzy92DeHwVMoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXvDXtv CiP/t19Rnij+8CRNigSeMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0wV5dZaNvfyBqOb786xwS1FQVrsuIth1IDaiAvWiTeltShPIV0Zm Oau5u1Hih6bDht5hd8uAxkYEHu39dZtQv/21Sph7AiCq6G2vmudq3oJ4L2ysJSh5 +WvqPgG9flf79wfWibGg/Z23fwDRIlTDxEXfYVwaP2LYV2D0D6ISTAqWly9G3WSq lIMchr12MyPbdE6D85wPE8KNm7YZWTxzPNoN5mZidmwIZhW1FFiy5PRWteAx10zO oyOe9z7UREB/qk4YYMH0gov2QBMquzsm56aisbzgEHKp7318ZDyKGfxVJRXXZ/aP FNyFT91sejS4xGqgOh7+7GJZ8+nsJWXE -----END CERTIFICATE-----Generated at Mon Oct 20 20:20:32 2025 by rpki-client