$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: 6kxAv5NfFWA7xQ8Vfv6+EtFDFWZR7RdYZ7z+pp8coUQ= Subject key identifier: 96:04:88:FA:B6:BB:1A:CE:C9:F3:3A:55:4D:7E:70:5C:BA:18:92:EF Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 036B Signing time: Mon 27 Oct 2025 02:26:18 +0000 Manifest this update: Mon 27 Oct 2025 02:26:18 +0000 Manifest next update: Mon 03 Nov 2025 02:26:18 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: Zhdlnj8znDVrEFVTuxCSNJ9KcttA6zcH9nt373l0kTI=) 2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: MnpTevKrhY7L4cqXUyU9PXlqHjDSUZYAGeApiPXwlBI=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Oct 27 02:26:18 2025 GMT Not After : Nov 3 02:26:18 2025 GMT Subject: CN=68fed84a-62a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:dc:ae:07:ef:2b:bd:4f:fc:ef:b8:22:a5:06: 82:28:49:76:99:0b:43:7e:b4:49:64:57:58:7d:dd: 34:20:f1:e4:b8:c9:49:cf:77:9e:d5:d7:f6:74:a3: fc:79:eb:39:89:76:0b:57:82:ed:65:75:09:77:4a: 09:f8:7a:45:54:2b:eb:77:8d:20:ec:01:f5:4a:a7: cc:9c:32:8c:10:e8:79:b0:5d:55:81:8b:3f:6f:eb: 68:90:58:d4:f7:d5:9f:5e:97:18:9c:9a:87:5b:ba: 75:bc:de:1a:0d:97:29:42:9c:e6:71:9a:aa:f6:09: 1c:2b:71:66:5b:bd:6a:cc:b9:7d:e0:12:66:f0:4a: ed:ad:f8:b1:e4:4e:ee:10:96:1b:e6:2b:48:dc:39: 50:0c:07:46:58:0c:33:8c:c4:df:88:b8:89:05:ba: b2:ec:11:f1:ff:df:c8:7e:b0:4d:01:35:75:f3:38: 04:38:c3:88:14:05:d1:b6:fe:62:35:c4:72:41:75: 1f:71:ec:10:bc:5c:f3:cf:1d:28:c7:06:38:1a:54: 0c:6f:19:a1:98:ec:71:9b:1d:9c:11:7b:1e:e4:2f: be:36:ff:6d:33:cd:2a:9b:47:fa:07:74:aa:31:67: 4d:9a:2b:00:a5:c8:35:2f:7e:7f:c9:0f:15:3f:e5: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:88:FA:B6:BB:1A:CE:C9:F3:3A:55:4D:7E:70:5C:BA:18:92:EF X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4f:2a:72:39:29:cf:b3:41:b9:c2:40:c6:fd:39:ba:34:aa: 45:23:8f:b8:f8:13:12:e4:a1:e4:b7:27:f2:9d:d8:6e:72:32: 66:07:cc:4f:f0:d3:68:ac:48:5f:73:ce:94:b4:47:55:b1:40: 3a:86:16:68:14:d2:d8:96:94:b7:d3:f5:65:fc:77:c0:84:ab: ab:08:f8:5c:9a:ef:ed:03:f6:a9:16:97:1f:23:39:f0:23:41: c4:d2:70:38:6c:0a:5c:83:75:02:e2:fd:05:24:58:cb:ab:f4: 20:45:a8:8b:85:db:9a:06:4a:f2:21:30:fa:b6:97:cf:a4:0a: a1:97:60:24:76:37:3f:f8:7b:34:44:c4:e3:64:d3:ff:72:3f: 87:9f:0b:8f:78:69:bb:b1:a9:ba:d8:05:18:91:0f:6a:e7:f4: 43:15:be:64:60:0e:98:0e:2b:d5:c3:2b:a9:04:37:f5:9b:b7: 99:32:ce:35:65:68:75:4c:13:17:ac:da:f3:28:1d:a9:e9:d8: f2:72:c8:4c:86:12:73:6e:9a:39:be:dd:db:35:5d:e8:5d:0f: 62:db:c8:4c:a5:fc:6b:7d:6a:81:12:d9:8d:9f:96:35:40:fc: 78:a8:df:d5:d1:0e:24:14:4a:5c:40:82:b2:72:b4:f8:48:bc: ba:7d:76:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjUxMDI3MDIyNjE4WhcNMjUxMTAzMDIyNjE4WjAYMRYwFAYD VQQDEw02OGZlZDg0YS02MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+dyuB+8rvU/877gipQaCKEl2mQtDfrRJZFdYfd00IPHkuMlJz3ee1df2dKP8 ees5iXYLV4LtZXUJd0oJ+HpFVCvrd40g7AH1SqfMnDKMEOh5sF1VgYs/b+tokFjU 99WfXpcYnJqHW7p1vN4aDZcpQpzmcZqq9gkcK3FmW71qzLl94BJm8Ertrfix5E7u EJYb5itI3DlQDAdGWAwzjMTfiLiJBbqy7BHx/9/IfrBNATV18zgEOMOIFAXRtv5i NcRyQXUfcewQvFzzzx0oxwY4GlQMbxmhmOxxmx2cEXse5C++Nv9tM80qm0f6B3Sq MWdNmisApcg1L35/yQ8VP+Xe6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYEiPq2 uxrOyfM6VU1+cFy6GJLvMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGTypyOSnPs0G5wkDG/Tm6NKpFI4+4+BMS5KHktyfyndhucjJmB8xP 8NNorEhfc86UtEdVsUA6hhZoFNLYlpS30/Vl/HfAhKurCPhcmu/tA/apFpcfIznw I0HE0nA4bApcg3UC4v0FJFjLq/QgRaiLhduaBkryITD6tpfPpAqhl2Akdjc/+Hs0 RMTjZNP/cj+HnwuPeGm7sam62AUYkQ9q5/RDFb5kYA6YDivVwyupBDf1m7eZMs41 ZWh1TBMXrNrzKB2p6djycshMhhJzbpo5vt3bNV3oXQ9i28hMpfxrfWqBEtmNn5Y1 QPx4qN/V0Q4kFEpcQIKycrT4SLy6fXby -----END CERTIFICATE-----Generated at Mon Oct 27 15:00:51 2025 by rpki-client