$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: AbPm2TZAt3AT3rB3ypAIInf9oXjRgXVR46UTUx8Yxxk= Subject key identifier: 08:7E:C6:0C:5D:A2:9F:89:05:C9:9A:13:ED:F7:10:5C:94:E2:E7:FC Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 0636 Signing time: Sat 25 Oct 2025 00:34:33 +0000 Manifest this update: Sat 25 Oct 2025 00:34:32 +0000 Manifest next update: Sat 01 Nov 2025 00:34:32 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: asdwU+3x47/KZ7lffV0BgcCpJsrWLy6W/iREp0g7pXc=) 2: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: yctT4YUUP20tQCvJN7CWg3MrC6O8Tuq96ZLx+s4UkRo=) 3: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: ufcIsYDdxZ7JHQere7GH/LJcOYs+a2XI1MSL+ZvwbhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 00:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: Oct 25 00:34:32 2025 GMT Not After : Nov 1 00:34:32 2025 GMT Subject: CN=68fc1b19-f3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:c9:d8:30:bc:20:a2:6e:6f:4c:69:55:85: a9:98:23:50:62:5d:9c:aa:6a:ec:3b:75:a6:17:b7: 03:9a:f1:dc:5a:9b:47:b1:58:9a:4b:88:05:f9:cd: 8a:ef:82:29:a4:c8:fd:e5:b6:80:b7:25:b4:7c:1f: 75:18:15:5a:2f:86:09:3a:92:ca:34:f0:1e:37:b5: 42:ce:af:d3:0d:3b:54:ae:cc:02:3b:33:0e:7b:59: 4e:c4:89:95:0d:2e:90:f9:7b:c1:6a:58:45:ac:22: d4:fc:d1:d3:05:57:4c:04:c4:bd:f9:c8:a9:bb:76: a6:00:80:d6:58:ea:3f:17:e4:4e:49:8a:83:15:a0: 36:88:41:77:3e:1f:34:0d:99:05:e4:b4:4f:d6:25: 05:9c:a4:a3:4e:0a:90:9a:0a:3d:b6:d0:21:1d:4f: 9a:24:e7:6d:bd:a1:36:5d:d9:f7:fc:89:bc:7c:c1: 87:bd:0a:da:dd:46:bf:cc:36:4e:0a:2d:5a:f4:51: e7:5b:f5:b5:4b:53:80:73:8c:5d:ed:05:59:2e:fa: d4:07:3d:0d:8f:8d:32:86:db:2e:a2:7e:3d:1a:1d: fa:0b:58:15:be:4c:ed:a2:e7:38:be:e8:dc:4b:24: b9:ad:0f:92:ad:1c:a6:87:12:b8:b2:7e:58:ae:d6: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7E:C6:0C:5D:A2:9F:89:05:C9:9A:13:ED:F7:10:5C:94:E2:E7:FC X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:dd:ff:8a:25:99:84:cf:76:eb:03:3f:f8:67:d4:0f:b2:08: f1:dd:06:e9:3b:24:42:36:62:cb:a6:4b:95:70:90:26:2e:bb: 29:0d:27:2b:6a:cb:c2:7a:f5:7f:a7:3a:b4:69:24:61:fd:5e: c1:5f:9e:a9:31:f4:28:13:b4:a1:3f:e1:02:d8:d7:17:e4:ac: 26:43:cb:0e:dc:11:5d:39:b3:d9:c8:a9:ce:2d:7e:0a:54:0e: b9:60:0e:85:c6:b2:f0:2b:10:6a:36:2a:b8:9a:fb:f7:09:02: a4:02:36:94:e2:b3:d1:43:20:65:7e:a1:cd:22:81:65:61:46: 24:c5:65:15:3c:51:bd:c6:f3:aa:69:2f:23:81:5d:41:83:bb: d1:3e:cf:bc:42:fd:9d:86:4c:e7:f7:fb:a1:96:73:57:32:c3: 0f:47:ba:58:71:b9:f1:41:64:f9:88:c5:e8:94:c1:5a:9a:53: e1:9f:b0:93:58:0d:3f:97:6d:25:b6:9c:dc:b6:9a:85:6a:08: ec:ac:3a:26:b2:c0:16:27:96:4b:22:e5:8e:37:39:c3:0a:84: 93:08:5c:bb:58:0e:b3:39:27:17:e3:11:7c:74:e0:84:de:08: cc:87:85:f4:6f:ea:96:92:67:e5:43:55:bf:62:b5:86:94:8a: 00:5a:4d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjUxMDI1MDAzNDMyWhcNMjUxMTAxMDAzNDMyWjAYMRYwFAYD VQQDEw02OGZjMWIxOS1mM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmXJ2DC8IKJub0xpVYWpmCNQYl2cqmrsO3WmF7cDmvHcWptHsViaS4gF+c2K 74IppMj95baAtyW0fB91GBVaL4YJOpLKNPAeN7VCzq/TDTtUrswCOzMOe1lOxImV DS6Q+XvBalhFrCLU/NHTBVdMBMS9+cipu3amAIDWWOo/F+ROSYqDFaA2iEF3Ph80 DZkF5LRP1iUFnKSjTgqQmgo9ttAhHU+aJOdtvaE2Xdn3/Im8fMGHvQra3Ua/zDZO Ci1a9FHnW/W1S1OAc4xd7QVZLvrUBz0Nj40yhtsuon49Gh36C1gVvkztouc4vujc SyS5rQ+SrRymhxK4sn5YrtY3AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh+xgxd op+JBcmaE+33EFyU4uf8MB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDY3f+KJZmEz3brAz/4Z9QPsgjx3QbpOyRCNmLLpkuVcJAmLrspDScr asvCevV/pzq0aSRh/V7BX56pMfQoE7ShP+EC2NcX5KwmQ8sO3BFdObPZyKnOLX4K VA65YA6FxrLwKxBqNiq4mvv3CQKkAjaU4rPRQyBlfqHNIoFlYUYkxWUVPFG9xvOq aS8jgV1Bg7vRPs+8Qv2dhkzn9/uhlnNXMsMPR7pYcbnxQWT5iMXolMFamlPhn7CT WA0/l20ltpzctpqFagjsrDomssAWJ5ZLIuWONznDCoSTCFy7WA6zOScX4xF8dOCE 3gjMh4X0b+qWkmflQ1W/YrWGlIoAWk2x -----END CERTIFICATE-----Generated at Sat Oct 25 13:42:34 2025 by rpki-client