$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft File: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json) Hash identifier: /aMtDabCnLaIZJE76tfA6xxTlN02hJYXr8rKOH2UenU= Subject key identifier: 98:F0:2D:76:47:C8:FC:39:B6:49:53:3B:A6:BB:F2:FB:D8:D2:B0:B1 Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft Manifest number: 2D Signing time: Thu 23 Oct 2025 09:54:17 +0000 Manifest this update: Thu 23 Oct 2025 09:54:16 +0000 Manifest next update: Thu 30 Oct 2025 09:54:16 +0000 Files and hashes: 1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: coVxIwGzOt2QwC5EuME64Y1HIr4hkjHpsupz1xYvDiE=) 2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: 6h0NC6fnyVrjlZRLQUdED+ump8j2JnnC17arwDP46lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Validity Not Before: Oct 23 09:54:16 2025 GMT Not After : Oct 30 09:54:16 2025 GMT Subject: CN=68f9fb49-2f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:67:c5:cc:1b:53:6f:af:85:c2:1e:8a:e3: 53:4e:a1:27:3d:e3:cb:8d:7c:80:f1:01:98:f9:0d: f8:16:a8:17:44:7d:1f:2e:8d:07:55:86:d4:b9:f7: 71:02:32:f1:99:d8:df:34:46:25:5d:fb:1e:e4:ee: 59:cd:84:24:c4:c0:08:0f:72:00:12:83:71:96:bd: 5a:64:2e:41:5d:5e:b6:0d:cc:2b:0a:ef:70:fe:1c: 0c:f1:b1:33:df:08:56:84:0b:9a:c9:1c:14:5b:0a: 74:fa:a2:88:6b:d7:e0:23:7e:bb:60:6e:b2:66:94: 3e:64:63:0f:ef:57:72:50:d3:2f:32:c8:b0:ca:7a: 54:ef:b8:19:45:ca:4f:e9:d1:76:4b:11:20:b0:f0: 08:de:8c:0a:3b:7a:1a:88:40:dd:bc:d6:4a:b1:41: b1:bf:ec:b9:2c:f4:26:88:91:1c:31:5c:9f:bb:d2: 90:34:93:90:7b:32:c9:85:42:d3:23:b9:cd:78:49: b1:12:f8:7c:73:4c:4a:a9:25:b1:19:0f:d8:52:1d: a0:77:cf:99:82:f5:15:e1:04:dd:3d:d3:b7:e3:38: 44:28:30:ca:6e:87:dd:4a:72:72:e0:c1:69:b9:f6: 88:f7:b6:b8:1c:3c:d6:2d:02:74:11:54:07:14:cb: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F0:2D:76:47:C8:FC:39:B6:49:53:3B:A6:BB:F2:FB:D8:D2:B0:B1 X509v3 Authority Key Identifier: keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7b:03:07:4f:4d:e2:77:2e:18:17:8b:90:e9:5d:e8:c3:65: b7:11:2b:82:77:23:f8:61:ed:ec:bb:00:1b:0a:37:f7:0d:af: 3f:cb:87:03:0e:72:83:99:cf:74:d6:05:91:b6:06:f8:4d:62: 7e:8e:ec:59:0b:f5:72:76:f5:c1:3c:f7:60:a5:0a:33:ad:75: 0a:c2:01:be:9a:53:0c:90:2b:ec:8c:df:b8:d8:dd:a5:1a:3e: 7f:e9:75:32:62:93:04:23:f2:89:f5:27:4a:2c:e4:17:a8:34: 4e:88:82:99:2c:09:36:e8:34:84:58:74:cd:c2:26:17:4f:04: d5:2e:e9:ea:3f:30:11:2c:bd:b9:e1:90:40:eb:db:a4:85:2a: cc:54:af:79:5e:b6:2b:ff:39:1c:49:3b:1a:3c:40:e5:98:97: bb:c5:1a:20:29:20:c4:d8:27:05:e2:0b:a9:2f:a4:59:19:9f: 21:19:9a:12:33:07:92:cb:78:b1:c4:3e:25:0a:f3:45:20:3b: 0f:be:2a:fa:dd:63:6b:bb:78:ba:8f:10:8a:6c:17:e2:34:04: 2b:6a:48:19:ae:cd:c7:19:49:ab:cc:d7:e2:5c:a1:44:b6:73: e8:18:4c:33:c6:52:80:dd:dc:26:3e:89:b9:ea:04:f8:e0:d5: c2:b5:bc:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTQwMjExMC8GA1UEBRMoRjBBMDBDMzFEMDkxRTI0NTcxMzdEMkE4RUYzMjY3NzQ3 RUREN0MyMjAeFw0yNTEwMjMwOTU0MTZaFw0yNTEwMzAwOTU0MTZaMBgxFjAUBgNV BAMTDTY4ZjlmYjQ5LTJmMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkOGfFzBtTb6+Fwh6K41NOoSc948uNfIDxAZj5DfgWqBdEfR8ujQdVhtS593EC MvGZ2N80RiVd+x7k7lnNhCTEwAgPcgASg3GWvVpkLkFdXrYNzCsK73D+HAzxsTPf CFaEC5rJHBRbCnT6oohr1+AjfrtgbrJmlD5kYw/vV3JQ0y8yyLDKelTvuBlFyk/p 0XZLESCw8AjejAo7ehqIQN281kqxQbG/7Lks9CaIkRwxXJ+70pA0k5B7MsmFQtMj uc14SbES+HxzTEqpJbEZD9hSHaB3z5mC9RXhBN0907fjOEQoMMpuh91KcnLgwWm5 9oj3trgcPNYtAnQRVAcUyzNpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmPAtdkfI /Dm2SVM7prvy+9jSsLEwHwYDVR0jBBgwFoAU8KAMMdCR4kVxN9Ko7zJndH7dfCIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNDAyLzQ3Q0I1QkM0NkRG OTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtWeE45S283ekpuZEg3ZGZD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEtBTU1kQ1I0a1Z4TjlLbzd6Sm5kSDdkZkNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NDAyLzQ3Q0I1QkM0NkRGOTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtW eE45S283ekpuZEg3ZGZDSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB57AwdPTeJ3LhgXi5DpXejDZbcRK4J3I/hh7ey7ABsKN/cNrz/LhwMO coOZz3TWBZG2BvhNYn6O7FkL9XJ29cE892ClCjOtdQrCAb6aUwyQK+yM37jY3aUa Pn/pdTJikwQj8on1J0os5BeoNE6IgpksCTboNIRYdM3CJhdPBNUu6eo/MBEsvbnh kEDr26SFKsxUr3letiv/ORxJOxo8QOWYl7vFGiApIMTYJwXiC6kvpFkZnyEZmhIz B5LLeLHEPiUK80UgOw++KvrdY2u7eLqPEIpsF+I0BCtqSBmuzccZSavM1+JcoUS2 c+gYTDPGUoDd3CY+ibnqBPjg1cK1vEw= -----END CERTIFICATE-----Generated at Fri Oct 24 17:56:34 2025 by rpki-client