$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: L/alt5SqXXaNHoR0LbdNi6f2OE/o9BL71cUKh2e2p+A= Subject key identifier: 45:CA:FF:B7:16:2B:3F:28:1E:AF:E5:5A:A5:27:70:63:A3:B6:7A:5C Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 0335 Signing time: Thu 23 Oct 2025 02:33:16 +0000 Manifest this update: Thu 23 Oct 2025 02:33:15 +0000 Manifest next update: Thu 30 Oct 2025 02:33:15 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: I5Y02p4oX15EjKwiD1BQSAnuvwxCY/NKCNundIoEDfg=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Oct 23 02:33:15 2025 GMT Not After : Oct 30 02:33:15 2025 GMT Subject: CN=68f993eb-db50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:a7:71:58:3c:80:73:97:d8:f1:58:83:8f: b8:99:5a:5b:97:24:e2:ae:24:9c:04:2e:d9:d0:d4: f9:11:c9:be:bc:bf:09:6a:cc:dd:8b:c3:57:6c:df: cb:b9:d6:90:2c:ab:d5:2b:25:47:28:34:1a:71:39: a8:19:e4:97:70:0b:23:d7:67:05:2f:8d:6b:f0:79: 31:fe:41:1e:41:2e:f6:92:5c:6d:38:60:05:82:32: f9:03:51:31:4a:0b:1f:32:4f:f8:30:fb:76:1e:84: 2e:84:e5:15:94:25:3e:b4:90:94:fb:0e:40:2b:ba: ff:97:57:e6:a7:16:75:84:55:78:c8:59:4b:bf:39: bf:9e:d5:a5:24:0e:cf:61:d6:4a:33:79:00:d5:81: 68:91:07:50:46:51:c4:a5:bb:26:81:c6:48:a3:ce: 12:0e:7c:bc:66:34:65:5c:80:8b:9e:6f:ce:d2:ac: b3:29:c2:dd:9f:b6:fb:7e:6c:1a:b8:ce:01:c7:8f: 79:98:47:8f:b4:94:6d:78:3c:c8:20:95:8d:c1:ab: b7:ef:ed:25:b8:f0:2a:63:05:41:b8:b1:da:d0:c7: 52:ae:81:ce:2d:fa:28:1e:da:55:f0:72:20:bd:6f: 8d:a5:94:fb:ed:bc:dc:cd:b1:ac:0f:29:b2:b7:ed: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CA:FF:B7:16:2B:3F:28:1E:AF:E5:5A:A5:27:70:63:A3:B6:7A:5C X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9c:2e:6b:3c:d4:51:11:b3:64:12:a3:40:10:ad:63:dc:ad: 9a:00:7e:27:f4:d4:83:a7:88:99:4e:06:96:c2:8e:d1:bf:35: 14:ad:64:e4:e6:5a:82:7c:9c:f1:83:01:0e:96:76:1b:2e:3b: c4:1e:49:6e:ed:af:64:90:87:d0:77:cd:b1:80:56:db:4e:7d: 32:5f:21:09:5e:3f:49:3a:a2:80:16:16:a8:ac:57:1c:53:ec: 35:4f:03:54:c9:23:a7:bf:60:e5:f5:6a:6a:a8:45:52:88:ff: db:d7:0c:c8:8e:cb:45:11:ca:01:0e:af:3a:96:95:ec:81:2c: 1d:70:e5:ce:65:e6:27:ca:51:c7:9c:7a:dd:a1:19:1b:6a:96: 52:c9:68:4c:68:09:a3:60:bc:7d:1f:e4:1b:ed:b9:d9:b2:ff: 0d:40:4d:45:bf:60:82:5a:3e:83:fb:d9:da:05:bd:f1:2d:25: d4:2d:a8:49:37:bd:48:2e:d5:fd:d0:2e:26:d1:be:82:ab:a9: 5a:28:58:0f:e2:2c:d0:f3:18:cd:24:7d:2d:04:04:9b:3b:cd: 25:8d:5a:58:d9:e0:7d:10:34:3b:af:a1:f1:2b:81:d2:0d:0b: 50:2e:b9:46:35:60:9d:32:72:6e:43:33:ec:51:dc:44:3d:73: 18:14:78:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUxMDIzMDIzMzE1WhcNMjUxMDMwMDIzMzE1WjAYMRYwFAYD VQQDEw02OGY5OTNlYi1kYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52qncVg8gHOX2PFYg4+4mVpblyTiriScBC7Z0NT5Ecm+vL8Jaszdi8NXbN/L udaQLKvVKyVHKDQacTmoGeSXcAsj12cFL41r8Hkx/kEeQS72klxtOGAFgjL5A1Ex SgsfMk/4MPt2HoQuhOUVlCU+tJCU+w5AK7r/l1fmpxZ1hFV4yFlLvzm/ntWlJA7P YdZKM3kA1YFokQdQRlHEpbsmgcZIo84SDny8ZjRlXICLnm/O0qyzKcLdn7b7fmwa uM4Bx495mEePtJRteDzIIJWNwau37+0luPAqYwVBuLHa0MdSroHOLfooHtpV8HIg vW+NpZT77bzczbGsDymyt+1fQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXK/7cW Kz8oHq/lWqUncGOjtnpcMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLnC5rPNRREbNkEqNAEK1j3K2aAH4n9NSDp4iZTgaWwo7RvzUUrWTk 5lqCfJzxgwEOlnYbLjvEHklu7a9kkIfQd82xgFbbTn0yXyEJXj9JOqKAFhaorFcc U+w1TwNUySOnv2Dl9WpqqEVSiP/b1wzIjstFEcoBDq86lpXsgSwdcOXOZeYnylHH nHrdoRkbapZSyWhMaAmjYLx9H+Qb7bnZsv8NQE1Fv2CCWj6D+9naBb3xLSXULahJ N71ILtX90C4m0b6Cq6laKFgP4izQ8xjNJH0tBASbO80ljVpY2eB9EDQ7r6HxK4HS DQtQLrlGNWCdMnJuQzPsUdxEPXMYFHg0 -----END CERTIFICATE-----Generated at Fri Oct 24 20:38:12 2025 by rpki-client