$ rpki-client -vvvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: XZwRK20G4oBCm+E9ZGJAFdC3r1yEpekBF8xjn3AtlRw= Subject key identifier: 7B:22:01:80:AD:F6:15:91:56:D7:96:C7:73:28:46:7A:77:82:BA:9F Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 042B Signing time: Sat 31 Oct 2026 00:23:47 +0000 Manifest this update: Sat 31 Oct 2026 00:23:47 +0000 Manifest next update: Sat 07 Nov 2026 00:23:47 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: eVmaXzUJNqmnzv77vRPDns448wJJtqCb3blFHuG1b28=) 2: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) 3: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 00:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Oct 31 00:23:47 2026 GMT Not After : Nov 7 00:23:47 2026 GMT Subject: CN=6ae53513-d0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:ae:0a:b9:bb:0e:d1:83:ef:10:39:70:33: 1a:4f:19:d6:4b:ea:e8:50:d6:01:29:6c:5e:e2:4d: 0d:36:69:4a:56:d4:b1:32:db:47:0a:e1:db:18:82: 1f:13:b8:da:d0:ed:db:c8:e9:de:3b:1d:ea:40:ee: 54:3c:18:f8:49:50:00:e9:af:4c:d0:22:f1:44:d4: 60:55:8d:6c:eb:80:3d:83:83:34:b3:48:aa:0d:52: 1c:5f:c3:cb:e7:79:82:a3:25:7a:fb:37:2c:f7:c0: d5:1a:f1:f5:81:5e:31:6e:9b:8c:f2:4d:3b:fe:dd: 32:a4:cf:52:86:0c:0d:f7:07:93:80:43:1c:22:50: 76:58:3a:ac:4a:98:72:57:98:ee:03:e6:8f:d9:56: 9f:17:3b:a5:6d:25:08:53:1c:88:80:be:5c:9e:41: 0a:4d:77:6d:a8:06:18:eb:57:32:34:64:1e:55:f3: e6:ee:26:3d:d1:7f:97:b6:94:9f:e8:33:26:97:00: 28:d2:51:98:49:9a:ea:f3:c6:bd:1c:ba:3b:60:ed: 5a:cb:32:c4:b4:cc:c7:9d:2f:f2:d5:0b:37:79:e9: 8b:a1:01:00:0f:c1:50:de:fd:2d:67:1e:df:46:d1: b9:63:fa:1d:fd:20:22:01:a3:09:0d:f6:0b:f0:c4: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:01:80:AD:F6:15:91:56:D7:96:C7:73:28:46:7A:77:82:BA:9F X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d8:ea:54:20:fa:ae:af:7f:dd:ee:be:be:90:74:78:af:fc: 17:f9:9f:fd:3e:8c:0d:a5:9b:36:b8:05:c0:53:50:a1:c4:3f: a2:c1:5d:7a:55:aa:fd:ec:79:0c:f3:e7:03:26:25:17:f2:f5: 70:bb:46:95:b4:07:6b:23:be:93:d0:bb:cc:5a:68:80:e6:63: e3:d2:8f:a3:04:80:30:36:d0:04:58:0f:f8:5b:a1:69:ae:04: 54:41:b5:92:67:6c:a8:4e:6a:6a:20:f6:2c:c9:d2:c8:24:39: c7:7b:b9:90:0c:13:d1:09:68:c4:5d:fb:22:3d:53:5b:c1:8d: 0e:53:1b:a9:47:e3:41:76:02:fd:02:91:4e:e6:49:40:89:d3: a3:ea:a9:bb:7b:74:88:46:59:cd:e8:3d:e2:97:f4:60:42:a0: f5:48:22:92:28:25:83:6d:35:f3:9b:35:17:97:a5:bb:93:8b: 84:c5:3c:93:2a:41:30:9b:3c:75:7f:00:aa:4c:4c:d0:1c:e8: 98:98:3f:fb:5e:e5:f4:4c:a6:2e:28:cc:b9:18:c9:68:9d:2f: 1c:39:51:1f:52:a8:1f:b5:f7:f5:3b:44:3f:ad:ec:69:95:61: bf:00:35:3f:28:04:e9:34:4e:d7:2e:ca:dd:86:59:6e:fa:bb: b4:95:f0:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYxMDMxMDAyMzQ3WhcNMjYxMTA3MDAyMzQ3WjAYMRYwFAYD VQQDEw02YWU1MzUxMy1kMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jGuCrm7DtGD7xA5cDMaTxnWS+roUNYBKWxe4k0NNmlKVtSxMttHCuHbGIIf E7ja0O3byOneOx3qQO5UPBj4SVAA6a9M0CLxRNRgVY1s64A9g4M0s0iqDVIcX8PL 53mCoyV6+zcs98DVGvH1gV4xbpuM8k07/t0ypM9ShgwN9weTgEMcIlB2WDqsSphy V5juA+aP2VafFzulbSUIUxyIgL5cnkEKTXdtqAYY61cyNGQeVfPm7iY90X+XtpSf 6DMmlwAo0lGYSZrq88a9HLo7YO1ayzLEtMzHnS/y1Qs3eemLoQEAD8FQ3v0tZx7f RtG5Y/od/SAiAaMJDfYL8MRDIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsiAYCt 9hWRVteWx3MoRnp3grqfMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG9jqVCD6rq9/3e6+vpB0eK/8F/mf/T6MDaWbNrgFwFNQocQ/osFdelWq/ex5 DPPnAyYlF/L1cLtGlbQHayO+k9C7zFpogOZj49KPowSAMDbQBFgP+Fuhaa4EVEG1 kmdsqE5qaiD2LMnSyCQ5x3u5kAwT0QloxF37Ij1TW8GNDlMbqUfjQXYC/QKRTuZJ QInTo+qpu3t0iEZZzeg94pf0YEKg9Ugikiglg20185s1F5elu5OLhMU8kypBMJs8 dX8AqkxM0BzomJg/+17l9EymLijMuRjJaJ0vHDlRH1KoH7X39TtEP63saZVhvwA1 PygE6TRO1y7K3YZZbvq7tJXw6A== -----END CERTIFICATE-----Generated at Sat Oct 31 22:51:19 2026 by rpki-client