$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: DTtbmTS2KxO5wCjHzApR6Gl/cmFX+Dvusv3THAHJRiQ= Subject key identifier: D5:06:BC:DA:97:AA:10:D3:CB:D6:80:A3:1A:83:AD:11:56:18:CA:EB Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 24E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 24A5 Signing time: Mon 20 Oct 2025 15:59:27 +0000 Manifest this update: Mon 20 Oct 2025 15:59:26 +0000 Manifest next update: Mon 27 Oct 2025 15:59:26 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: i61yPQ3F56s/dQ3BFKBvXEtmZNuiCgBuTE/o+If/W+E=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9448 (0x24e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Oct 20 15:59:26 2025 GMT Not After : Oct 27 15:59:26 2025 GMT Subject: CN=68f65c5f-96f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:1b:7a:9d:ee:76:1b:9b:c1:fe:b4:c5:6f: cf:bb:1e:5e:bb:58:af:22:23:fb:43:5f:e6:a5:80: 53:e8:fa:4d:10:f9:53:46:61:64:10:c8:68:f0:f0: 7f:93:40:97:2e:25:87:57:57:a5:41:90:f9:d4:21: 3c:2b:db:7f:ef:8f:62:56:f6:5d:be:3b:b2:27:3d: fa:a5:17:f7:9c:b0:96:b8:b4:64:38:86:0b:c3:c3: 93:0b:0c:f6:3d:c7:fd:9b:1f:32:d3:cc:52:9f:c7: 7d:a7:f1:cd:49:f1:ee:f2:86:85:ea:16:6b:bc:79: ea:ab:36:b3:cf:6f:44:66:5c:c9:a8:5c:70:29:11: 69:c2:a7:b4:c3:54:c5:fc:e4:45:fb:5c:42:8e:93: 64:71:a2:14:24:1a:7c:88:2a:b6:dd:62:8a:03:25: de:e4:a2:a1:a7:68:9a:83:b0:dd:e2:56:29:86:af: 39:db:0a:c9:9e:3f:59:ea:e3:3b:03:67:8e:2d:98: 59:30:d1:89:cd:ce:d9:ff:0b:d6:43:2e:d5:69:d0: 7d:79:b5:58:59:5a:ab:2f:25:ff:d7:10:ba:3e:fa: aa:c2:63:eb:87:38:90:6c:3a:b9:56:a6:34:6e:db: f5:27:dd:f6:b8:30:89:ec:7e:a5:90:c2:41:fc:45: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:06:BC:DA:97:AA:10:D3:CB:D6:80:A3:1A:83:AD:11:56:18:CA:EB X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e6:b9:8c:f8:fd:2f:e9:7b:76:44:06:fc:d8:3f:7e:4d:18: 0f:fc:cf:95:d7:ad:96:16:a8:75:7a:17:cc:3e:48:47:fd:f4: 4a:78:b7:9e:ae:42:e9:bb:64:5e:77:c0:9b:4d:04:99:b2:91: ab:3d:fb:d7:6b:e8:a7:1e:25:47:60:d1:5c:cf:73:77:5c:9f: c1:36:3c:b7:48:d2:e2:c1:53:47:2c:b1:21:ac:e1:b9:91:45: c8:5b:0c:e9:79:35:f2:60:ac:0d:b3:ea:86:fb:d8:a0:06:50: 6e:39:e3:a9:ae:4d:71:b8:d9:3d:ee:08:c3:39:7d:6e:4b:77: 79:d0:5d:02:64:45:80:f7:b7:5c:84:e3:79:5d:de:33:ce:95: b7:65:fd:32:1a:9d:f3:2f:a5:52:98:58:0b:6b:cb:bc:19:56: 21:00:94:de:e2:69:0e:21:c4:ba:9a:d0:9b:2d:af:8e:08:15: 68:5c:2d:b5:61:24:a8:36:09:d4:79:38:96:a2:17:0e:4f:f1: d0:13:09:a2:81:87:cc:f4:ad:b8:62:a0:88:a8:d1:1e:06:16: 75:8f:81:02:8c:61:da:70:49:8c:09:d6:f4:fb:d4:21:57:2e: cf:91:83:52:6e:bc:40:b2:90:ce:db:c1:e8:94:9f:e5:e0:64: 5d:8c:9c:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUxMDIwMTU1OTI2WhcNMjUxMDI3MTU1OTI2WjAYMRYwFAYD VQQDEw02OGY2NWM1Zi05NmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VIbep3udhubwf60xW/Pux5eu1ivIiP7Q1/mpYBT6PpNEPlTRmFkEMho8PB/ k0CXLiWHV1elQZD51CE8K9t/749iVvZdvjuyJz36pRf3nLCWuLRkOIYLw8OTCwz2 Pcf9mx8y08xSn8d9p/HNSfHu8oaF6hZrvHnqqzazz29EZlzJqFxwKRFpwqe0w1TF /ORF+1xCjpNkcaIUJBp8iCq23WKKAyXe5KKhp2iag7Dd4lYphq852wrJnj9Z6uM7 A2eOLZhZMNGJzc7Z/wvWQy7VadB9ebVYWVqrLyX/1xC6PvqqwmPrhziQbDq5VqY0 btv1J932uDCJ7H6lkMJB/EX/CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUGvNqX qhDTy9aAoxqDrRFWGMrrMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb5rmM+P0v6Xt2RAb82D9+TRgP/M+V162WFqh1ehfMPkhH/fRKeLee rkLpu2Red8CbTQSZspGrPfvXa+inHiVHYNFcz3N3XJ/BNjy3SNLiwVNHLLEhrOG5 kUXIWwzpeTXyYKwNs+qG+9igBlBuOeOprk1xuNk97gjDOX1uS3d50F0CZEWA97dc hON5Xd4zzpW3Zf0yGp3zL6VSmFgLa8u8GVYhAJTe4mkOIcS6mtCbLa+OCBVoXC21 YSSoNgnUeTiWohcOT/HQEwmigYfM9K24YqCIqNEeBhZ1j4ECjGHacEmMCdb0+9Qh Vy7PkYNSbrxAspDO28HolJ/l4GRdjJxL -----END CERTIFICATE-----Generated at Wed Oct 22 10:34:59 2025 by rpki-client