$ rpki-client -vvvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: 6BmaRno1yjF7I6GuaYrTwepIoJuRxI6mZC2qpS3jJHM= Subject key identifier: 06:72:A7:36:C9:63:25:6F:06:12:58:80:2A:31:09:1B:1E:F9:9D:CF Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 042A Signing time: Thu 29 Oct 2026 00:34:44 +0000 Manifest this update: Thu 29 Oct 2026 00:34:44 +0000 Manifest next update: Thu 05 Nov 2026 00:34:44 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: vL2mPco3xnSGCplXpu6jRNqpRpf4i1tE1eJfeau9tOw=) 2: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) 3: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) 4: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Oct 29 00:34:44 2026 GMT Not After : Nov 5 00:34:44 2026 GMT Subject: CN=6ae294a4-f1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:a9:d9:05:a0:70:28:b5:6c:32:4a:e9:ab: 3b:64:52:42:c9:72:0d:a6:9e:86:a1:4c:e6:55:2c: b6:dc:8d:03:8a:2d:8f:6d:c3:ad:c8:aa:52:62:b2: 3a:ed:19:b5:9c:ec:ec:ee:ca:54:3c:d6:52:4c:e3: 19:05:1b:91:c9:96:f8:9c:0d:38:40:91:79:d2:a4: 76:4f:c6:b8:48:c3:fb:b4:86:1a:d8:6f:1d:4b:99: ab:56:a4:1d:56:bf:48:73:d2:5f:ba:aa:84:29:96: e7:81:52:d7:8f:3e:45:cf:5b:1d:21:63:bc:d0:1b: 4d:19:83:cb:45:e5:42:0c:dd:10:fc:e8:d9:9d:71: c5:5c:6e:44:6c:68:c7:42:71:25:5e:48:0d:d0:68: 09:b4:c9:18:2d:fd:58:ab:07:2c:b6:62:8d:f0:6d: da:6f:dc:21:1e:0e:a9:5d:44:b6:73:15:4f:fe:b1: 8c:e4:b8:fb:43:20:94:d5:4a:39:48:c3:c8:00:3d: 06:50:cf:da:bb:c7:26:f8:cb:83:d8:36:31:f9:49: 18:ca:91:95:d1:51:c3:f8:35:f1:98:cc:1e:8b:b7: f9:74:4c:1b:f4:66:e8:d2:35:64:9a:5a:ae:54:e9: ae:bd:3b:0b:a4:88:2f:df:0e:f1:90:72:42:a2:ee: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:A7:36:C9:63:25:6F:06:12:58:80:2A:31:09:1B:1E:F9:9D:CF X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:61:57:1d:e9:a3:c4:40:43:3e:a5:5a:4e:c9:21:e2:f3:9e: a1:f3:19:1f:d7:c5:ae:79:d3:44:27:77:19:33:13:ca:49:c5: e4:07:9b:4e:61:cd:27:bc:19:de:b0:35:26:90:0e:66:32:ec: 38:3a:d9:ef:f5:af:c7:dc:3a:3a:21:72:26:57:95:d1:ac:85: 18:56:2e:71:58:2c:09:4a:9a:20:2f:33:32:25:2f:6e:ab:48: 40:ae:66:47:43:49:34:d3:44:4b:27:22:9f:89:47:53:d7:c7: 82:72:21:37:86:1d:3f:15:a0:4e:fb:18:73:06:1b:7c:ec:a9: 5b:c1:9e:5d:c9:9a:05:cc:a2:1d:f4:a8:2b:cd:63:01:00:e7: d6:9f:d0:ad:35:52:21:6c:fd:57:ef:d7:58:6a:a7:c3:f2:54: 2f:54:39:11:1b:e4:62:44:6a:4d:0a:46:e8:e9:a3:6a:d1:48: e5:be:64:1d:7c:c3:d9:60:64:2b:c7:f9:94:e8:18:d5:3c:a2: ab:48:4f:ae:8b:7e:e5:76:7b:f9:d5:49:c2:47:51:2d:5a:6d: c7:f0:89:b5:60:42:d6:1d:26:0d:e5:ee:77:a2:75:e6:3e:5c: 1b:2a:69:63:dd:aa:10:04:be:45:e3:43:13:99:c7:9f:d0:71: be:5c:fc:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYxMDI5MDAzNDQ0WhcNMjYxMTA1MDAzNDQ0WjAYMRYwFAYD VQQDEw02YWUyOTRhNC1mMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7Cp2QWgcCi1bDJK6as7ZFJCyXINpp6GoUzmVSy23I0Dii2PbcOtyKpSYrI6 7Rm1nOzs7spUPNZSTOMZBRuRyZb4nA04QJF50qR2T8a4SMP7tIYa2G8dS5mrVqQd Vr9Ic9JfuqqEKZbngVLXjz5Fz1sdIWO80BtNGYPLReVCDN0Q/OjZnXHFXG5EbGjH QnElXkgN0GgJtMkYLf1YqwcstmKN8G3ab9whHg6pXUS2cxVP/rGM5Lj7QyCU1Uo5 SMPIAD0GUM/au8cm+MuD2DYx+UkYypGV0VHD+DXxmMwei7f5dEwb9Gbo0jVkmlqu VOmuvTsLpIgv3w7xkHJCou7eCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZypzbJ YyVvBhJYgCoxCRse+Z3PMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWFXHemjxEBDPqVaTskh4vOeofMZH9fFrnnTRCd3GTMTyknF5AebTmHNJ7wZ 3rA1JpAOZjLsODrZ7/Wvx9w6OiFyJleV0ayFGFYucVgsCUqaIC8zMiUvbqtIQK5m R0NJNNNESycin4lHU9fHgnIhN4YdPxWgTvsYcwYbfOypW8GeXcmaBcyiHfSoK81j AQDn1p/QrTVSIWz9V+/XWGqnw/JUL1Q5ERvkYkRqTQpG6OmjatFI5b5kHXzD2WBk K8f5lOgY1Tyiq0hProt+5XZ7+dVJwkdRLVptx/CJtWBC1h0mDeXud6J15j5cGypp Y92qEAS+ReNDE5nHn9Bxvlz8RQ== -----END CERTIFICATE-----Generated at Thu Oct 29 17:10:14 2026 by rpki-client