$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: Y6f2wtuZxqJ3ky59V2hAuYyseekyXQyz4XupZK6+av4= Subject key identifier: F0:5C:16:25:F4:C1:37:45:20:12:4E:0E:A7:3E:FD:56:78:C0:5C:A2 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 86 Signing time: Mon 03 Nov 2025 06:38:07 +0000 Manifest this update: Mon 03 Nov 2025 06:38:07 +0000 Manifest next update: Mon 10 Nov 2025 06:38:07 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: KJveSrnwVwPimmz0+K4EqFF8kIuDMFNWW7yyaR7smBo=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Nov 3 06:38:07 2025 GMT Not After : Nov 10 06:38:07 2025 GMT Subject: CN=69084dcf-2975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:9f:c4:d9:70:d3:cb:4f:62:a1:73:99:07: 9b:85:b0:a1:57:81:0b:bb:f1:18:59:40:5e:3d:a6: 0d:8a:b3:8d:64:d5:dd:5c:e5:a1:50:8f:28:c8:c2: 14:fc:cc:d8:bd:5b:82:40:5d:aa:fc:52:fc:45:cb: 8f:95:18:66:f6:24:bb:32:e1:ff:6a:f6:ce:72:d6: 8e:97:f7:48:48:fd:80:eb:6b:80:1b:7e:49:db:07: a0:b9:27:56:2e:f4:49:60:14:f9:16:58:a3:ea:a7: fd:1d:61:25:f4:18:3c:5d:ac:76:70:09:36:f0:8f: 6d:8a:8b:ad:ae:ba:17:0e:46:1a:a8:d3:44:71:9b: d5:f8:f2:94:7b:a8:de:3a:20:44:28:ad:56:a2:d3: 17:64:46:d9:e3:7f:93:44:c3:29:0d:36:1f:92:66: a5:27:57:13:54:01:76:15:42:fe:bc:c9:3c:ea:3e: 83:29:6b:86:69:7f:b5:2f:28:b5:c5:ef:4e:07:d4: 5c:28:49:2f:c6:33:41:c2:6f:9d:8b:4a:61:02:56: aa:0b:75:58:6e:de:9b:f2:64:4f:ff:ba:54:32:49: 5d:77:40:30:03:df:8b:67:7e:0b:7e:7e:dc:21:ae: eb:c0:73:7f:ed:dd:aa:33:ef:57:f9:19:7b:6b:9d: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5C:16:25:F4:C1:37:45:20:12:4E:0E:A7:3E:FD:56:78:C0:5C:A2 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:95:be:a3:26:b4:ff:98:48:bd:54:af:20:9d:19:2c:31:e6: 2f:54:ad:f0:80:97:e9:91:db:d8:1c:66:f0:f4:27:60:2b:46: be:8e:44:3a:f0:42:78:94:15:17:e7:ce:51:32:b3:97:60:74: df:a5:92:3a:13:7b:09:7d:5b:b5:bd:57:10:74:5b:24:55:55: f1:01:68:d7:87:ce:86:de:c1:e8:3d:c4:b8:17:3c:95:71:64: 1d:d6:3f:5b:15:ba:4b:40:89:cf:4a:e2:71:93:56:28:e4:1a: 61:fa:f6:ab:9c:3b:0e:af:a6:91:e6:c3:d8:b2:ad:af:57:37: eb:8a:df:35:a4:ad:d8:49:e5:23:6c:fb:b4:04:b5:1c:6c:f5: 15:6b:62:de:02:83:09:90:42:96:1a:a6:dc:96:b9:4e:53:63: 22:55:3c:4f:ca:50:72:39:a6:12:0c:a8:55:53:5e:ab:2c:66: e9:9a:47:bc:23:c2:f0:52:ed:65:d7:8b:d3:52:6a:35:e7:76: 37:7c:1d:be:f7:a5:08:28:5c:1a:14:bd:f6:7e:54:4a:b9:83: e4:8f:a8:ff:7e:f1:b3:09:db:eb:73:b8:5f:5f:82:ae:a7:74: e2:ed:d0:03:f0:ee:c2:78:d6:84:03:22:b2:97:4d:06:39:b2: f0:19:e4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI3NTkxMTAvBgNVBAUTKEZCNEI2ODNGQkE0REI2QUMxQTVBQzUwODgwN0ZDN0VB NDk2QzVFQzUwHhcNMjUxMTAzMDYzODA3WhcNMjUxMTEwMDYzODA3WjAYMRYwFAYD VQQDEw02OTA4NGRjZi0yOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dqfxNlw08tPYqFzmQebhbChV4ELu/EYWUBePaYNirONZNXdXOWhUI8oyMIU /MzYvVuCQF2q/FL8RcuPlRhm9iS7MuH/avbOctaOl/dISP2A62uAG35J2weguSdW LvRJYBT5Flij6qf9HWEl9Bg8Xax2cAk28I9tioutrroXDkYaqNNEcZvV+PKUe6je OiBEKK1WotMXZEbZ43+TRMMpDTYfkmalJ1cTVAF2FUL+vMk86j6DKWuGaX+1Lyi1 xe9OB9RcKEkvxjNBwm+di0phAlaqC3VYbt6b8mRP/7pUMkldd0AwA9+LZ34Lfn7c Ia7rwHN/7d2qM+9X+Rl7a52qHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBcFiX0 wTdFIBJODqc+/VZ4wFyiMB8GA1UdIwQYMBaAFPtLaD+6TbasGlrFCIB/x+pJbF7F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qjc1OS82OUMzQkVFNkVC NjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRxd2FXc1VJZ0hfSDZrbHNY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qjc1OS82OUMzQkVFNkVCNjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRx d2FXc1VJZ0hfSDZrbHNYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDElb6jJrT/mEi9VK8gnRksMeYvVK3wgJfpkdvYHGbw9CdgK0a+jkQ6 8EJ4lBUX585RMrOXYHTfpZI6E3sJfVu1vVcQdFskVVXxAWjXh86G3sHoPcS4FzyV cWQd1j9bFbpLQInPSuJxk1Yo5Bph+varnDsOr6aR5sPYsq2vVzfrit81pK3YSeUj bPu0BLUcbPUVa2LeAoMJkEKWGqbclrlOU2MiVTxPylByOaYSDKhVU16rLGbpmke8 I8LwUu1l14vTUmo153Y3fB2+96UIKFwaFL32flRKuYPkj6j/fvGzCdvrc7hfX4Ku p3Ti7dAD8O7CeNaEAyKyl00GObLwGeSk -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:39 2025 by rpki-client