$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json) Hash identifier: Bc2/cDcJTnHHSOvxWVGpnnRJorpfRhThUL42MLnCJ/c= Subject key identifier: EC:E8:79:D4:72:F7:50:34:A3:39:46:F0:97:97:D3:5B:F0:8B:65:29 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft Manifest number: 0230 Signing time: Sun 19 Oct 2025 04:57:29 +0000 Manifest this update: Sun 19 Oct 2025 04:57:29 +0000 Manifest next update: Sun 26 Oct 2025 04:57:29 +0000 Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: HrNFr+aWLO1uuJsMnkKvQt+Uk8wgsfZQ3g9WQuLHhwc=) 2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Oct 19 04:57:29 2025 GMT Not After : Oct 26 04:57:29 2025 GMT Subject: CN=68f46fb9-5ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:98:f2:3c:c6:68:d2:09:89:7d:41:54:36:c0: 04:44:c7:2b:0e:97:f1:48:3a:ca:5d:bb:c4:23:de: 20:88:2b:79:00:d2:6f:ff:4a:88:71:76:59:5d:82: f4:e4:57:d3:1b:a5:75:6b:e3:70:43:0d:81:cc:9e: 87:ac:ca:8a:27:c4:67:3b:af:ee:23:f9:3a:8c:54: 2f:9c:76:74:58:9d:1e:c2:a5:dc:1a:42:f0:07:27: 90:89:d0:0c:dd:a1:de:77:76:f5:83:7f:44:6f:cb: 37:a5:a5:fc:53:50:b2:3a:17:c9:ce:ca:dc:6d:7c: 27:d1:2a:41:b5:36:e0:47:5b:65:86:5b:94:5c:a8: 57:83:d8:14:31:d0:74:d5:b3:a0:38:ce:6d:19:23: a7:94:e8:34:02:8e:1e:3d:e6:21:09:55:cb:e1:b4: 31:fe:85:2b:e1:9b:47:f0:44:0d:ff:02:32:93:20: 5b:7c:8f:9d:c8:51:84:f5:23:f4:6b:c9:81:ec:6a: e7:09:48:38:18:e2:1b:4c:7d:84:08:c7:a7:f2:d8: fc:61:d8:b6:4c:73:09:c2:d2:72:99:6e:2d:14:ee: f8:7e:01:24:4e:4e:e6:a7:ca:51:84:d4:35:ec:bf: 13:18:9c:bf:2b:20:09:c8:14:78:5a:bb:a4:01:ae: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E8:79:D4:72:F7:50:34:A3:39:46:F0:97:97:D3:5B:F0:8B:65:29 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7a:16:ab:e1:54:21:54:83:56:a8:d3:39:08:ca:f6:82:f9: 17:dd:e6:3f:f0:58:99:8a:c1:f9:69:d0:75:9c:0e:03:ca:01: dc:ee:04:03:75:08:5b:be:ad:45:52:25:c3:84:fb:99:39:2a: be:1e:ec:f4:9c:29:4e:ab:ae:d7:88:94:89:a6:94:56:05:f3: 0c:84:5b:f0:47:a7:2b:58:43:84:47:48:f4:a2:47:90:10:94: de:8e:0b:f7:f5:b4:ec:9b:c3:77:6c:7f:28:bf:3f:80:b4:d9: 11:4b:4e:3d:06:1b:5b:85:ab:17:aa:51:87:da:bc:5e:59:c4: dc:26:9e:4a:cf:43:6a:34:1a:4b:f9:05:d2:ef:44:24:6a:35: 2c:83:91:84:3b:28:b5:f2:27:4b:f8:d0:07:8f:86:0f:85:ae: 35:ea:c3:e2:2a:d6:41:15:6b:be:27:2a:eb:b2:af:52:5a:43: f3:5c:d2:7c:50:7f:db:51:cb:22:6b:47:3d:f8:f4:40:9b:2d: 66:ed:06:a2:17:d2:e7:c5:a6:30:e6:32:2b:a9:98:12:61:b4: 70:1e:49:d6:74:be:c3:1c:66:3f:5c:0a:1a:eb:6d:89:3e:3d: b9:b1:fa:71:93:c2:47:a6:f0:1b:5c:6b:50:c9:e0:19:22:d3: 4b:b7:f8:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNTEwMTkwNDU3MjlaFw0yNTEwMjYwNDU3MjlaMBgxFjAUBgNV BAMTDTY4ZjQ2ZmI5LTVmZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUmPI8xmjSCYl9QVQ2wARExysOl/FIOspdu8Qj3iCIK3kA0m//SohxdlldgvTk V9MbpXVr43BDDYHMnoesyoonxGc7r+4j+TqMVC+cdnRYnR7CpdwaQvAHJ5CJ0Azd od53dvWDf0RvyzelpfxTULI6F8nOytxtfCfRKkG1NuBHW2WGW5RcqFeD2BQx0HTV s6A4zm0ZI6eU6DQCjh495iEJVcvhtDH+hSvhm0fwRA3/AjKTIFt8j53IUYT1I/Rr yYHsaucJSDgY4htMfYQIx6fy2Pxh2LZMcwnC0nKZbi0U7vh+ASROTuanylGE1DXs vxMYnL8rIAnIFHhau6QBrmg7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Oh51HL3 UDSjOUbwl5fTW/CLZSkwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MkFGL0YzRUZCODk4QkNCQTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xX QjYzakRtQzhkNFNwS1lBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEN6FqvhVCFUg1ao0zkIyvaC+Rfd5j/wWJmKwflp0HWcDgPKAdzuBAN1 CFu+rUVSJcOE+5k5Kr4e7PScKU6rrteIlImmlFYF8wyEW/BHpytYQ4RHSPSiR5AQ lN6OC/f1tOybw3dsfyi/P4C02RFLTj0GG1uFqxeqUYfavF5ZxNwmnkrPQ2o0Gkv5 BdLvRCRqNSyDkYQ7KLXyJ0v40AePhg+FrjXqw+Iq1kEVa74nKuuyr1JaQ/Nc0nxQ f9tRyyJrRz349ECbLWbtBqIX0ufFpjDmMiupmBJhtHAeSdZ0vsMcZj9cChrrbYk+ Pbmx+nGTwkem8Btca1DJ4Bki00u3+Bs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:49 2025 by rpki-client