$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json) Hash identifier: zv6vAqdFaoRcsuoCByiL7nQ22m43A7dAEGghH/QsTZ4= Subject key identifier: 84:5A:FB:38:94:84:9F:A6:73:D5:92:6B:1B:BE:3F:B7:B1:57:07:37 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft Manifest number: 02E5 Signing time: Thu 23 Oct 2025 02:54:15 +0000 Manifest this update: Thu 23 Oct 2025 02:54:14 +0000 Manifest next update: Thu 30 Oct 2025 02:54:14 +0000 Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: g4ctgt9qIK17/Sep2oxpD0njliV1mNZA4Sy0uVzsRwg=) 2: 6C92164E8E7111F095FEDD1FC4F9AE02.roa (hash: p9Kse7D2GRgFk2ojVpA2GrgFV3dn4x52lP6u7UEBcJM=) 3: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=) 4: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: xvHNzzMV7f1gxQWEGQg7Uu7grR61uCNrb99drLaVCJw=) 5: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Validity Not Before: Oct 23 02:54:14 2025 GMT Not After : Oct 30 02:54:14 2025 GMT Subject: CN=68f998d7-eb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:3f:2f:51:99:3d:86:63:00:5f:3d:97:bf: 68:63:b6:38:93:1a:53:fe:4e:18:14:4b:c2:41:e3: a7:a8:c2:73:4b:a1:9c:a7:da:95:61:e0:a8:0f:d3: 64:4e:b8:7d:82:86:9a:ab:1d:b8:a7:c1:d8:f8:44: 09:58:a9:1b:2d:93:a5:dc:b7:9c:57:db:b7:d9:6c: 88:19:5b:84:2c:fa:19:4c:42:b4:23:84:66:b0:25: e3:50:6c:2f:a8:e6:9f:44:2b:ff:9e:c0:9b:0c:e1: a5:8c:3a:4e:11:63:1a:2e:da:60:81:ae:9b:90:23: 22:e9:34:24:a1:13:d0:3d:e3:4b:17:e5:7b:c4:62: 76:55:03:a7:59:f5:4e:ae:56:26:62:f7:c9:a6:75: 15:be:0d:d0:c1:1e:8f:97:cc:cd:52:bf:1f:84:3c: 90:c2:a4:38:38:a3:f0:af:45:ff:93:f0:e5:2b:17: 5a:26:60:94:0a:c4:ac:3c:00:b2:87:12:f9:c9:42: 66:da:ab:38:9f:6a:55:55:92:b7:07:5b:b7:6e:33: 05:6c:e6:9c:9a:3d:88:bf:65:10:8a:09:53:bf:cc: 3b:54:50:df:23:0a:dd:fe:71:4a:95:1d:a6:5d:42: dd:4b:98:59:b9:9e:f6:46:89:26:d7:6f:f1:c5:67: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5A:FB:38:94:84:9F:A6:73:D5:92:6B:1B:BE:3F:B7:B1:57:07:37 X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:67:e9:f9:5b:61:67:81:48:6c:f8:25:ec:50:ce:80:9c:e0: a2:17:28:7c:27:f5:59:97:8b:9c:d6:52:bd:ea:a5:ef:47:5b: c1:25:ba:7a:fe:6a:24:d4:ce:0c:30:bf:50:0d:99:05:07:06: 20:43:a4:2d:71:ce:d1:1f:da:e4:11:2f:8d:79:af:39:47:5b: 18:4d:6d:6d:6d:19:6c:b2:88:79:86:76:b4:22:a1:45:1e:12: 93:30:32:4a:f8:4e:1c:98:3a:08:2e:14:89:e7:a0:5d:ff:50: 03:84:dc:ac:98:89:9a:a0:38:93:1f:f1:7b:d5:bd:f8:99:07: ac:6f:ec:d1:2b:9f:2c:66:3b:3d:e9:54:f8:51:e6:e8:53:13: 00:62:09:21:4e:09:2e:6f:c9:96:92:18:a1:48:83:34:54:7c: 6a:01:57:28:38:68:de:2c:f2:ad:08:7b:12:12:77:7d:d6:54: 5f:39:5c:85:2d:f0:b8:06:f0:a6:a8:50:9c:ed:42:26:e9:68: 31:9b:ce:d5:7b:b6:68:fa:63:e9:f8:ba:de:4b:f8:58:9b:67: fd:24:e1:a9:73:ba:33:6d:be:4a:fc:56:0a:e9:e9:81:62:3f: e2:b6:c6:23:20:fd:cd:1d:3c:4c:22:fa:c9:25:a6:21:ea:2e: 09:37:1e:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjUxMDIzMDI1NDE0WhcNMjUxMDMwMDI1NDE0WjAYMRYwFAYD VQQDEw02OGY5OThkNy1lYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuck/L1GZPYZjAF89l79oY7Y4kxpT/k4YFEvCQeOnqMJzS6Gcp9qVYeCoD9Nk Trh9goaaqx24p8HY+EQJWKkbLZOl3LecV9u32WyIGVuELPoZTEK0I4RmsCXjUGwv qOafRCv/nsCbDOGljDpOEWMaLtpgga6bkCMi6TQkoRPQPeNLF+V7xGJ2VQOnWfVO rlYmYvfJpnUVvg3QwR6Pl8zNUr8fhDyQwqQ4OKPwr0X/k/DlKxdaJmCUCsSsPACy hxL5yUJm2qs4n2pVVZK3B1u3bjMFbOacmj2Iv2UQiglTv8w7VFDfIwrd/nFKlR2m XULdS5hZuZ72Rokm12/xxWfc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRa+ziU hJ+mc9WSaxu+P7exVwc3MB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ Ul93TlQwY0ktZFFVa3hxNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQZ+n5W2FngUhs+CXsUM6AnOCiFyh8J/VZl4uc1lK96qXvR1vBJbp6 /mok1M4MML9QDZkFBwYgQ6Qtcc7RH9rkES+Nea85R1sYTW1tbRlssoh5hna0IqFF HhKTMDJK+E4cmDoILhSJ56Bd/1ADhNysmImaoDiTH/F71b34mQesb+zRK58sZjs9 6VT4UeboUxMAYgkhTgkub8mWkhihSIM0VHxqAVcoOGjeLPKtCHsSEnd91lRfOVyF LfC4BvCmqFCc7UIm6Wgxm87Ve7Zo+mPp+LreS/hYm2f9JOGpc7ozbb5K/FYK6emB Yj/itsYjIP3NHTxMIvrJJaYh6i4JNx7A -----END CERTIFICATE-----Generated at Fri Oct 24 23:12:27 2025 by rpki-client