$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: 13FieYb/9q9LNYqZqhoeEFT0MUKJwO4TsmfnIDzgB2M= Subject key identifier: 0D:75:10:44:41:07:43:E5:6D:93:A2:F5:8E:61:6F:11:B2:EE:58:3C Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 10AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 10A7 Signing time: Sat 18 Oct 2025 17:53:10 +0000 Manifest this update: Sat 18 Oct 2025 17:53:09 +0000 Manifest next update: Sat 25 Oct 2025 17:53:09 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: lnLt6UZjjJaG9IBxGJW7+Ye0Bg4x2tGziA5xuCO2rLQ=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4270 (0x10ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Oct 18 17:53:09 2025 GMT Not After : Oct 25 17:53:09 2025 GMT Subject: CN=68f3d406-3d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:75:89:8b:35:31:2a:e1:1b:0e:43:64:7a: fb:33:b0:e8:90:cc:75:50:29:83:0e:16:da:7e:0e: 42:f1:17:11:e9:57:06:b5:01:0f:74:45:05:ce:96: 7e:93:b8:b0:81:29:5b:ca:77:ce:09:3e:8d:90:d2: 2f:45:d6:5a:11:4d:87:96:7b:3c:d2:e1:f0:f1:0a: c5:d1:d9:2b:04:ec:4b:ff:67:84:8a:a0:50:59:c6: 45:e3:98:f3:fb:c3:92:e1:47:6f:6d:d9:ad:66:6b: 59:60:2d:96:ce:d5:80:94:9a:b2:29:2c:65:04:1f: ec:41:61:26:80:82:77:7a:ad:a9:ba:32:b4:ff:3c: 2d:87:ac:07:3e:97:f3:51:78:c8:53:a7:0c:ae:50: 2c:ee:89:8a:c1:18:d0:72:09:1d:64:e8:f8:b3:d4: 22:f9:bf:43:eb:ce:ce:70:70:a9:fd:41:f0:6d:31: 3f:a9:87:6e:9a:0e:6f:9d:82:83:2e:99:a7:4c:8a: 20:31:97:92:1f:92:71:60:fd:ea:3a:f2:6b:49:a2: ac:6e:bf:17:93:42:6e:a6:ee:45:d6:5f:fa:e0:7e: 93:56:fb:02:c6:f4:fb:fa:3f:41:48:a4:52:62:c2: d4:fd:da:bc:0f:d1:3d:ed:ba:65:b8:fc:48:31:7c: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:75:10:44:41:07:43:E5:6D:93:A2:F5:8E:61:6F:11:B2:EE:58:3C X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6e:1d:63:29:c4:f6:0b:a3:c6:0e:8a:74:19:80:5f:70:6f: 5d:f3:c7:7d:50:c7:97:b2:43:6b:40:67:78:f9:65:6a:44:c6: de:3c:f8:a2:51:ad:b8:d5:b9:5a:c0:cb:45:33:57:e7:d9:25: ef:02:64:c1:cc:3a:be:23:7f:bb:25:6e:5f:4a:42:c2:82:b1: b3:d3:28:74:98:52:50:02:0f:c7:27:d4:56:cd:f1:aa:9f:68: 5b:88:f6:c8:f7:62:ab:c2:f9:71:0d:52:dc:00:41:b6:c5:d4: af:1d:c6:b6:0e:1a:9f:1d:32:ca:df:ed:03:d4:a2:c3:ee:18: 12:e5:98:a7:17:08:59:66:a2:a3:f3:89:d3:71:42:58:de:8e: b0:a7:80:47:1b:44:85:f0:cf:4f:28:62:80:b1:00:56:68:65: e6:40:06:b5:eb:e8:bd:ce:a7:99:e0:0b:10:60:c4:f2:23:2d: 4d:ab:52:00:8d:f3:87:54:aa:ef:00:91:f0:06:a5:45:64:49: 81:41:e1:7c:b7:73:da:38:26:ee:59:b9:2d:47:b6:d7:34:2c: 15:b9:5d:ed:85:ff:b4:a2:23:56:ab:e6:12:cd:4e:a0:83:fe: f1:c7:f6:7e:83:70:9a:f7:21:5e:d4:4d:82:ca:dd:02:67:c3: bc:35:f8:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUxMDE4MTc1MzA5WhcNMjUxMDI1MTc1MzA5WjAYMRYwFAYD VQQDEw02OGYzZDQwNi0zZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn11iYs1MSrhGw5DZHr7M7DokMx1UCmDDhbafg5C8RcR6VcGtQEPdEUFzpZ+ k7iwgSlbynfOCT6NkNIvRdZaEU2Hlns80uHw8QrF0dkrBOxL/2eEiqBQWcZF45jz +8OS4UdvbdmtZmtZYC2WztWAlJqyKSxlBB/sQWEmgIJ3eq2pujK0/zwth6wHPpfz UXjIU6cMrlAs7omKwRjQcgkdZOj4s9Qi+b9D687OcHCp/UHwbTE/qYdumg5vnYKD LpmnTIogMZeSH5JxYP3qOvJrSaKsbr8Xk0Jupu5F1l/64H6TVvsCxvT7+j9BSKRS YsLU/dq8D9E97bpluPxIMXxcHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA11EERB B0PlbZOi9Y5hbxGy7lg8MB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtbh1jKcT2C6PGDop0GYBfcG9d88d9UMeXskNrQGd4+WVqRMbePPii Ua241blawMtFM1fn2SXvAmTBzDq+I3+7JW5fSkLCgrGz0yh0mFJQAg/HJ9RWzfGq n2hbiPbI92KrwvlxDVLcAEG2xdSvHca2DhqfHTLK3+0D1KLD7hgS5ZinFwhZZqKj 84nTcUJY3o6wp4BHG0SF8M9PKGKAsQBWaGXmQAa16+i9zqeZ4AsQYMTyIy1Nq1IA jfOHVKrvAJHwBqVFZEmBQeF8t3PaOCbuWbktR7bXNCwVuV3thf+0oiNWq+YSzU6g g/7xx/Z+g3Ca9yFe1E2Cyt0CZ8O8NfiR -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:41 2025 by rpki-client