$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: G4078NTL7gX1RtvNXwgLzKC23s078GFQsWcnB2kkMUA= Subject key identifier: DE:76:F7:E5:AD:2C:DD:23:1D:87:B3:10:57:2A:32:7E:B2:71:E9:39 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 0603 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 05D9 Signing time: Sat 25 Oct 2025 01:23:51 +0000 Manifest this update: Sat 25 Oct 2025 01:23:50 +0000 Manifest next update: Sat 01 Nov 2025 01:23:50 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: QdZbnzZnIu8Ht9jpvUh30Ntre4vdepQiwzuSeggLnwI=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 01:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Oct 25 01:23:50 2025 GMT Not After : Nov 1 01:23:50 2025 GMT Subject: CN=68fc26a7-3ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:38:4b:0a:ef:36:3b:39:62:9c:65:83:e1: 12:05:7c:f3:5f:6e:58:9e:20:18:4d:91:a8:d7:36: fd:5f:64:37:39:a5:85:39:54:1a:25:69:52:7e:33: c0:84:a2:af:9e:ee:36:2c:b9:16:c9:f0:7f:d8:89: 2c:3a:ec:52:3b:7f:5e:46:54:0c:16:f3:c9:31:8a: 96:d3:1f:8c:87:2a:ef:62:05:a3:16:ae:ef:45:b9: de:9e:0f:60:c1:5f:14:d1:56:2a:89:ea:bb:b3:cc: 59:eb:32:60:22:72:73:b1:80:aa:7e:aa:bf:61:03: 1a:50:5d:12:2f:5f:10:f0:b5:4a:f0:fd:39:8a:52: da:7c:bd:15:b4:be:f5:b7:98:d3:d0:53:63:c0:06: 3a:43:a5:d1:09:09:c0:37:c7:a8:85:a6:c8:f1:08: 0e:a6:93:f4:76:67:d3:61:85:35:b7:56:4f:81:9a: c6:c2:ba:6b:bd:fb:f6:cc:eb:3d:f9:45:3b:87:ff: 13:42:15:e7:fb:53:bb:5e:0b:68:ff:c7:d0:8c:15: b7:3b:70:91:4e:66:02:a9:62:a6:d7:8e:b7:50:3d: 25:c7:e0:c6:10:29:dd:a4:23:ab:43:aa:9c:20:ac: 57:bf:5c:73:f7:2f:fd:d1:b1:48:b5:9a:a2:d2:8e: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:76:F7:E5:AD:2C:DD:23:1D:87:B3:10:57:2A:32:7E:B2:71:E9:39 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:10:e6:35:a3:5f:b0:01:5b:8b:42:56:06:1e:2f:4d:d1:ef: 6d:09:b3:79:5e:81:cd:23:cb:4a:a9:cf:f4:70:ab:05:d7:c7: c9:f0:97:5f:81:83:c4:c3:01:21:15:fa:65:76:9e:d8:11:e6: d9:0b:c7:2c:c7:d1:87:eb:3d:8f:5e:5e:10:16:4d:11:c6:f0: d0:91:8e:69:4c:04:14:d0:25:41:26:b1:13:ba:45:c0:6b:88: 2b:76:cd:44:e3:71:db:1c:2d:d9:e3:21:4a:a0:1e:ba:ae:bc: ed:27:3b:73:4b:77:fb:a4:09:26:fa:2e:45:ec:36:37:bf:34: df:10:c0:0b:2a:e6:bb:d9:80:0a:2a:6c:07:2c:85:5c:16:ba: b8:bd:9a:8b:c8:e2:15:3d:4e:11:df:05:bf:47:9a:9f:09:00: 78:3e:6d:b9:1d:87:ad:03:63:ba:f7:a5:6c:3e:7e:7a:e5:d0: 5e:6d:f3:cd:21:69:9c:24:3f:8f:e9:cf:7e:01:18:3f:e8:a3: 93:4c:cf:7c:af:0c:d2:fa:b0:19:e9:8b:09:a6:c0:88:16:24: 50:01:e1:ca:3c:bb:75:8a:d1:dc:23:68:ad:17:45:b2:90:5d: 69:62:b8:e6:c3:0d:b0:bd:55:f9:a9:e2:46:42:6d:60:1c:ac: f4:c9:0b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUxMDI1MDEyMzUwWhcNMjUxMTAxMDEyMzUwWjAYMRYwFAYD VQQDEw02OGZjMjZhNy0zZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7Q4SwrvNjs5Ypxlg+ESBXzzX25YniAYTZGo1zb9X2Q3OaWFOVQaJWlSfjPA hKKvnu42LLkWyfB/2IksOuxSO39eRlQMFvPJMYqW0x+MhyrvYgWjFq7vRbneng9g wV8U0VYqieq7s8xZ6zJgInJzsYCqfqq/YQMaUF0SL18Q8LVK8P05ilLafL0VtL71 t5jT0FNjwAY6Q6XRCQnAN8eohabI8QgOppP0dmfTYYU1t1ZPgZrGwrprvfv2zOs9 +UU7h/8TQhXn+1O7Xgto/8fQjBW3O3CRTmYCqWKm1463UD0lx+DGECndpCOrQ6qc IKxXv1xz9y/90bFItZqi0o6J0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN529+Wt LN0jHYezEFcqMn6ycek5MB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiEOY1o1+wAVuLQlYGHi9N0e9tCbN5XoHNI8tKqc/0cKsF18fJ8Jdf gYPEwwEhFfpldp7YEebZC8csx9GH6z2PXl4QFk0RxvDQkY5pTAQU0CVBJrETukXA a4grds1E43HbHC3Z4yFKoB66rrztJztzS3f7pAkm+i5F7DY3vzTfEMALKua72YAK KmwHLIVcFrq4vZqLyOIVPU4R3wW/R5qfCQB4Pm25HYetA2O696VsPn565dBebfPN IWmcJD+P6c9+ARg/6KOTTM98rwzS+rAZ6YsJpsCIFiRQAeHKPLt1itHcI2itF0Wy kF1pYrjmww2wvVX5qeJGQm1gHKz0yQsR -----END CERTIFICATE-----Generated at Sun Oct 26 05:39:34 2025 by rpki-client