$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: y2OcgNsFbEGbl7XuFxoKrVIRrtFBvsXuebuIAhB48FY= Subject key identifier: 14:D6:89:34:10:74:EA:9C:45:78:46:F3:C9:55:A8:D0:14:77:04:F4 Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 01CD Signing time: Sun 19 Oct 2025 05:19:56 +0000 Manifest this update: Sun 19 Oct 2025 05:19:56 +0000 Manifest next update: Sun 26 Oct 2025 05:19:56 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: lLZPMHrp/i2cexFuj9WjKuf/nzczsQ2h+nQpMjdgWk8=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Oct 19 05:19:56 2025 GMT Not After : Oct 26 05:19:56 2025 GMT Subject: CN=68f474fc-752b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:e0:58:3f:0d:86:09:55:62:12:66:bb:ac: 29:56:f7:6c:49:c5:04:f6:4a:c7:9a:89:0b:0d:6e: 59:8c:bd:a6:76:6f:63:d5:e2:f7:21:ef:13:e0:b2: 50:f7:90:87:e4:1d:bd:e4:11:9d:38:41:50:91:7e: 09:79:ee:4b:c3:9a:02:ff:97:1c:b6:f6:41:2e:b2: 13:e5:71:a2:3c:c4:2b:48:26:2a:85:7e:bf:bd:b2: 40:34:7c:15:04:77:60:be:63:d8:d1:66:53:0d:4e: 1c:cf:f5:0b:77:07:0d:29:c3:05:ac:05:7e:54:ea: e4:23:3a:ed:ea:d0:42:d6:b1:66:8c:67:44:f4:ef: 54:06:79:0f:96:3c:de:f9:c8:45:e7:c5:25:97:ef: 92:ee:0e:0b:65:60:a2:a3:0c:8a:f2:47:96:8b:b5: a1:74:15:6b:0a:ac:6d:68:67:62:70:fc:c9:29:26: de:b7:8f:2a:cb:97:d1:08:b5:61:b1:aa:e4:9f:4d: e1:95:fb:d1:1c:c0:84:61:bd:79:35:04:02:31:da: 74:82:4c:83:38:c0:f0:1c:3f:8a:2f:8e:76:cb:2f: b6:fc:11:6d:9e:19:1e:46:32:fd:1e:61:ec:f0:ad: 83:1a:41:80:18:d6:fc:7d:3b:21:bc:ff:84:10:8b: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D6:89:34:10:74:EA:9C:45:78:46:F3:C9:55:A8:D0:14:77:04:F4 X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b1:c4:8f:51:25:a9:6f:bf:fa:d1:b2:e3:b9:13:26:00:01: ac:be:b6:a7:51:06:c1:6f:64:1b:5d:08:ee:5b:96:d5:b1:a3: 11:1e:06:27:8b:16:5e:97:7c:bf:5f:00:d4:8d:f1:6e:16:12: 26:5a:02:bc:33:7d:db:b8:d7:98:90:10:71:61:86:3d:b7:94: b5:90:88:29:bb:95:37:62:c5:26:ba:a8:28:32:8e:f7:c3:66: 21:c2:67:6c:15:9e:21:8f:56:83:03:ce:ba:b0:39:d3:ca:7a: be:3e:3a:84:7e:1e:6a:ec:a5:72:eb:d7:a3:7b:70:e2:e4:26: 09:c5:5b:4f:f0:16:f6:20:c3:bf:8f:4d:50:ff:bd:53:a6:05: 65:62:b9:b4:2a:74:0c:b2:c7:e4:53:f5:a0:74:c8:97:86:ec: 8f:cf:33:57:a7:ea:7b:79:6d:4e:4f:e8:96:24:7d:df:3f:69: bb:ae:0c:02:62:fb:6d:b1:05:5a:e4:be:9c:fb:36:8d:4e:fa: 52:d8:1c:0a:93:7e:ad:60:1b:cf:6a:89:68:51:0c:02:b1:f4: c8:57:1c:fc:56:cd:bf:f6:40:94:84:7c:c3:07:81:37:b3:79: 36:58:ca:ba:b1:4f:8a:98:44:66:21:5f:f9:f8:16:40:93:b7: 7c:86:91:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUxMDE5MDUxOTU2WhcNMjUxMDI2MDUxOTU2WjAYMRYwFAYD VQQDEw02OGY0NzRmYy03NTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuALgWD8NhglVYhJmu6wpVvdsScUE9krHmokLDW5ZjL2mdm9j1eL3Ie8T4LJQ 95CH5B295BGdOEFQkX4Jee5Lw5oC/5cctvZBLrIT5XGiPMQrSCYqhX6/vbJANHwV BHdgvmPY0WZTDU4cz/ULdwcNKcMFrAV+VOrkIzrt6tBC1rFmjGdE9O9UBnkPljze +chF58Ull++S7g4LZWCiowyK8keWi7WhdBVrCqxtaGdicPzJKSbet48qy5fRCLVh sarkn03hlfvRHMCEYb15NQQCMdp0gkyDOMDwHD+KL452yy+2/BFtnhkeRjL9HmHs 8K2DGkGAGNb8fTshvP+EEIuq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTWiTQQ dOqcRXhG88lVqNAUdwT0MB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdscSPUSWpb7/60bLjuRMmAAGsvranUQbBb2QbXQjuW5bVsaMRHgYn ixZel3y/XwDUjfFuFhImWgK8M33buNeYkBBxYYY9t5S1kIgpu5U3YsUmuqgoMo73 w2YhwmdsFZ4hj1aDA866sDnTynq+PjqEfh5q7KVy69eje3Di5CYJxVtP8Bb2IMO/ j01Q/71TpgVlYrm0KnQMssfkU/WgdMiXhuyPzzNXp+p7eW1OT+iWJH3fP2m7rgwC YvttsQVa5L6c+zaNTvpS2BwKk36tYBvPaoloUQwCsfTIVxz8Vs2/9kCUhHzDB4E3 s3k2WMq6sU+KmERmIV/5+BZAk7d8hpEa -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:05 2025 by rpki-client