$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: 5MjSU0OZgHTq1PH7aP8yUl5oHO00/nQCMuH6EFdoKTA= Subject key identifier: 5F:12:89:88:A7:FD:A9:94:B6:D7:5E:FA:60:D5:86:8B:2A:A6:B6:2D Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 02BC Signing time: Thu 23 Oct 2025 02:51:39 +0000 Manifest this update: Thu 23 Oct 2025 02:51:38 +0000 Manifest next update: Thu 30 Oct 2025 02:51:38 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: NGXSMoHxo9jkOh5+iSD6QMnEGk+y4XBGMqnG50jyo2E=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Oct 23 02:51:38 2025 GMT Not After : Oct 30 02:51:38 2025 GMT Subject: CN=68f9983b-b564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:12:3b:b6:0a:5f:05:bf:ef:34:4a:3a:3f: b6:91:2d:38:b4:5d:86:fd:b3:8a:80:53:c7:56:39: cf:eb:b8:8d:64:e9:67:bf:83:5b:a3:b9:99:f0:e9: b6:17:be:14:eb:5a:c9:70:79:f2:2b:c6:7e:94:84: 62:d6:d2:9a:16:ea:6f:7d:13:3e:c8:de:53:d0:e8: 79:47:04:6d:37:82:49:b4:1e:b4:d4:52:0c:5b:83: 59:50:4e:da:26:62:29:d3:55:c9:7b:69:06:7c:8b: 52:ab:d3:27:98:67:a5:3d:9c:81:cc:d3:a0:a0:7b: 65:fd:8f:e6:ed:be:b9:d7:46:cf:e1:ba:39:0a:ae: f9:e7:e6:ed:d3:90:b4:74:73:fb:c1:84:cc:8f:0c: d6:01:05:9c:13:cd:64:0a:b9:5b:63:3b:30:8b:82: 50:83:88:6b:25:4f:40:0e:bd:5a:e5:02:f2:d8:44: 89:c0:cb:2e:81:73:9d:f0:d6:72:45:93:b6:8c:b9: c2:b6:32:ba:47:82:e5:f0:8b:3e:ad:90:67:47:1a: 45:44:2c:e4:b0:cf:0d:8c:45:06:6b:4c:67:a1:a7: 36:d3:71:c4:db:f5:45:76:91:49:33:4e:22:89:a8: 81:0f:ed:44:ce:ae:0a:00:0d:fe:e3:ae:ef:0f:8c: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:12:89:88:A7:FD:A9:94:B6:D7:5E:FA:60:D5:86:8B:2A:A6:B6:2D X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:1e:d8:a9:af:63:33:32:e1:6f:1f:ec:34:a8:e2:44:e6:70: 60:c9:07:35:b2:3f:db:45:2a:48:67:e7:bb:ca:44:30:85:11: b6:ac:3c:8c:06:d9:31:2c:c6:26:28:e7:92:51:ac:e1:66:d6: 39:db:a4:0f:b8:97:d1:26:c1:7e:5f:6e:86:15:7b:46:fa:61: 4e:8e:b5:dc:bf:03:a9:f6:44:eb:b2:4b:95:3e:95:f3:1e:68: b2:f9:93:d2:3f:bd:fc:47:04:f8:16:68:06:5c:59:26:8a:61: 6d:01:86:b6:34:68:bd:64:3a:ea:4a:f7:ee:e6:85:a9:0e:79: 59:87:85:2a:75:22:80:98:5e:1f:01:da:b5:d8:43:b9:b6:13: 64:64:8e:77:50:f5:94:c6:31:90:73:9c:86:92:8d:76:2a:b3: 9e:49:02:bf:a8:2d:c0:b8:7d:0b:45:07:46:b3:22:ca:6b:7f: 32:92:a1:5a:6c:36:5a:72:f5:82:71:cf:29:6f:76:48:e1:5b: 4d:a3:b8:41:31:e3:24:ea:7c:c4:35:d3:95:f2:52:23:d2:84: fd:8b:ab:12:39:4e:5a:dc:b4:72:1f:0a:5b:69:56:f0:91:01: 5f:49:2a:a0:15:f4:1a:28:bc:6f:bb:7c:05:0c:03:8a:52:6a: f7:8f:46:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUxMDIzMDI1MTM4WhcNMjUxMDMwMDI1MTM4WjAYMRYwFAYD VQQDEw02OGY5OTgzYi1iNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jwSO7YKXwW/7zRKOj+2kS04tF2G/bOKgFPHVjnP67iNZOlnv4Nbo7mZ8Om2 F74U61rJcHnyK8Z+lIRi1tKaFupvfRM+yN5T0Oh5RwRtN4JJtB601FIMW4NZUE7a JmIp01XJe2kGfItSq9MnmGelPZyBzNOgoHtl/Y/m7b6510bP4bo5Cq755+bt05C0 dHP7wYTMjwzWAQWcE81kCrlbYzswi4JQg4hrJU9ADr1a5QLy2ESJwMsugXOd8NZy RZO2jLnCtjK6R4Ll8Is+rZBnRxpFRCzksM8NjEUGa0xnoac203HE2/VFdpFJM04i iaiBD+1Ezq4KAA3+467vD4wjdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8SiYin /amUttde+mDVhosqprYtMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkHtipr2MzMuFvH+w0qOJE5nBgyQc1sj/bRSpIZ+e7ykQwhRG2rDyM BtkxLMYmKOeSUazhZtY526QPuJfRJsF+X26GFXtG+mFOjrXcvwOp9kTrskuVPpXz Hmiy+ZPSP738RwT4FmgGXFkmimFtAYa2NGi9ZDrqSvfu5oWpDnlZh4UqdSKAmF4f Adq12EO5thNkZI53UPWUxjGQc5yGko12KrOeSQK/qC3AuH0LRQdGsyLKa38ykqFa bDZacvWCcc8pb3ZI4VtNo7hBMeMk6nzENdOV8lIj0oT9i6sSOU5a3LRyHwpbaVbw kQFfSSqgFfQaKLxvu3wFDAOKUmr3j0b3 -----END CERTIFICATE-----Generated at Fri Oct 24 19:03:39 2025 by rpki-client