$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: o1v9uGlwF0HBEC8wv4uIFxEZcfYLIdOtAIiHyLUgwYM= Subject key identifier: C7:B9:08:6E:D7:AE:06:F0:FF:4E:A9:A6:75:D8:75:8F:79:45:F7:88 Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 0A1C Signing time: Tue 04 Nov 2025 22:45:48 +0000 Manifest this update: Tue 04 Nov 2025 22:45:47 +0000 Manifest next update: Tue 11 Nov 2025 22:45:47 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: d63ReuamRPvd7zYIHCBnwO/iUf9VSDSGmxicCiQI58A=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Nov 4 22:45:47 2025 GMT Not After : Nov 11 22:45:47 2025 GMT Subject: CN=690a821b-c010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:c2:15:1f:bd:e2:3e:c4:d3:73:d2:33:c3: ad:9a:6b:3c:a9:87:42:c3:bd:bf:b5:18:11:5d:d3: 47:ae:f3:d2:e8:c9:22:e2:47:2c:46:9a:ad:98:53: 7f:be:ef:b6:f1:5a:34:f0:ba:d3:7a:09:f4:8d:65: f2:7c:bf:61:3f:53:97:67:7e:df:70:67:5a:b1:33: 75:1f:6e:6f:61:47:40:10:cb:d4:0b:84:99:d9:5e: ac:ed:17:bb:c1:42:ff:26:71:e0:eb:6d:19:f3:44: 67:d7:0b:5d:4f:3f:95:db:a0:81:fc:16:a6:84:79: 77:bd:22:e4:41:0b:13:c3:97:d3:79:ab:2e:98:3b: 48:89:ca:2b:e8:aa:cc:4e:86:45:0e:63:55:b8:1b: 24:cc:25:89:e0:6d:52:13:ab:55:cd:65:50:37:1a: 98:4e:af:07:68:f5:be:85:10:3a:44:ed:e7:b9:3f: 2a:39:4e:73:03:8b:cc:cf:dc:69:51:01:6c:5a:eb: 33:5c:40:89:68:de:a7:0b:b1:17:62:e6:0b:e1:33: 64:ae:e1:38:23:c6:a2:c0:a8:40:95:9f:7e:c3:33: cd:21:83:63:a8:b9:f2:7a:57:b3:51:5b:4f:ea:cc: fa:2f:bb:cc:e1:3f:41:eb:93:01:05:e1:c8:ae:38: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:08:6E:D7:AE:06:F0:FF:4E:A9:A6:75:D8:75:8F:79:45:F7:88 X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8e:9d:ac:70:eb:de:57:8b:e1:67:95:69:d1:47:21:a4:57: d0:bc:bb:c4:5c:b3:8f:c0:57:2e:0a:95:e1:78:22:2d:30:9a: 0e:1f:df:92:b8:23:5a:41:66:c9:88:fa:bd:c6:56:2c:cb:1b: 39:12:c2:cc:27:12:65:e2:ae:ce:3f:2e:da:c6:fd:b0:d5:1b: 79:15:00:0e:81:73:17:e6:4c:20:2b:20:a4:fd:8e:bb:f3:bb: 9f:87:9a:d8:4a:61:fd:4f:5c:19:28:a6:c1:d4:dd:4c:8b:df: 4c:d7:a0:77:c1:aa:74:c3:d8:90:8e:b2:37:9b:55:e5:3b:46: 79:3f:31:9f:0d:c5:e1:86:fc:7f:f6:83:81:16:bf:b8:5d:73: 6a:a4:1b:38:16:05:8e:82:09:bd:c5:a8:72:9f:91:0f:15:61: b8:de:95:fa:de:21:44:3c:31:10:17:b4:9e:e4:97:d1:77:42: c7:07:3b:ec:58:8e:f3:08:32:e0:5c:2e:a4:75:04:92:5a:94: 27:b3:fc:b5:17:c7:4d:8a:d5:d0:b8:fe:59:53:c2:f3:dc:10: b4:58:15:82:7f:58:bc:f6:ed:87:dc:be:99:3c:8b:39:73:07: 5d:74:bc:15:f9:17:79:98:d0:a0:d2:a4:0a:90:29:b4:cc:61: 43:de:e1:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTExMDQyMjQ1NDdaFw0yNTExMTEyMjQ1NDdaMBgxFjAUBgNV BAMTDTY5MGE4MjFiLWMwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc0MIVH73iPsTTc9Izw62aazyph0LDvb+1GBFd00eu89LoySLiRyxGmq2YU3++ 77bxWjTwutN6CfSNZfJ8v2E/U5dnft9wZ1qxM3Ufbm9hR0AQy9QLhJnZXqztF7vB Qv8mceDrbRnzRGfXC11PP5XboIH8FqaEeXe9IuRBCxPDl9N5qy6YO0iJyivoqsxO hkUOY1W4GyTMJYngbVITq1XNZVA3GphOrwdo9b6FEDpE7ee5Pyo5TnMDi8zP3GlR AWxa6zNcQIlo3qcLsRdi5gvhM2Su4TgjxqLAqECVn37DM80hg2OoufJ6V7NRW0/q zPovu8zhP0HrkwEF4ciuOJHLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx7kIbteu BvD/Tqmmddh1j3lF94gwHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaOnaxw695Xi+FnlWnRRyGkV9C8u8Rcs4/AVy4KleF4Ii0wmg4f35K4 I1pBZsmI+r3GVizLGzkSwswnEmXirs4/LtrG/bDVG3kVAA6BcxfmTCArIKT9jrvz u5+HmthKYf1PXBkopsHU3UyL30zXoHfBqnTD2JCOsjebVeU7Rnk/MZ8NxeGG/H/2 g4EWv7hdc2qkGzgWBY6CCb3FqHKfkQ8VYbjelfreIUQ8MRAXtJ7kl9F3QscHO+xY jvMIMuBcLqR1BJJalCez/LUXx02K1dC4/llTwvPcELRYFYJ/WLz27Yfcvpk8izlz B110vBX5F3mY0KDSpAqQKbTMYUPe4ck= -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:13 2025 by rpki-client