$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: AlthN/8dDySHEUADb7MoZzW5AFBjrHLXRFVpNTyD0PM= Subject key identifier: 4E:9D:E5:71:B4:02:32:51:D7:49:2B:37:14:93:E9:89:76:52:83:A5 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 0621 Signing time: Wed 22 Oct 2025 23:48:58 +0000 Manifest this update: Wed 22 Oct 2025 23:48:57 +0000 Manifest next update: Wed 29 Oct 2025 23:48:57 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: talnz3WQNHzo4/fZzUu5R2OVRaozVpIbG/nGvHHMdPA=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: PHugSXTi2dZxLQln/zegbseeVs2jPcn21YYpHl84zeo=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: PqPcM9AknODy/bx8TAswPdKxA7piJbRMKnDsw8NBbDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Oct 22 23:48:57 2025 GMT Not After : Oct 29 23:48:57 2025 GMT Subject: CN=68f96d69-55bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:e6:70:36:9a:86:ac:bc:3c:37:05:be:8d: cf:84:ee:e3:1e:d7:91:f3:7b:94:85:1f:70:1e:8b: f8:6a:53:29:11:84:5a:55:cd:a8:d7:be:e9:00:6d: 7e:99:3d:b0:bc:09:9b:db:d1:44:4d:7f:e0:d6:72: a0:34:c3:ac:27:63:70:92:c1:fd:21:06:0a:99:08: 5b:65:bb:ec:5d:57:bd:36:cb:a5:6d:c0:7c:1b:94: 2f:cb:ed:0a:dd:10:57:79:af:b3:b1:20:5f:73:e4: 19:e5:da:43:56:2d:15:2e:0b:65:87:29:58:69:b3: 84:44:0b:c7:92:46:d4:b2:11:ae:88:d5:d1:a4:84: 52:58:ec:cc:59:39:ac:75:da:5d:fb:dc:f5:e2:d5: 8a:38:55:21:e0:33:84:d6:0f:f9:8f:81:2e:cc:76: 3d:f0:7c:1c:03:6e:9a:b5:b4:b5:d8:25:e2:97:b9: 09:c8:f7:15:8a:14:c2:0d:3b:c4:f6:f7:37:4a:e3: 65:c0:03:9d:42:dd:f8:00:90:b5:7f:a2:0c:bd:a2: 75:5a:e3:d9:81:df:e7:ef:67:30:ad:41:c4:86:4a: b0:8d:7b:68:f2:e2:2f:29:11:6c:43:76:47:bf:3f: b1:0b:ed:d8:d9:4b:e1:a9:98:b3:ce:33:ab:af:3d: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:E5:71:B4:02:32:51:D7:49:2B:37:14:93:E9:89:76:52:83:A5 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d2:26:a3:4a:ed:ca:67:22:8f:10:27:6e:72:7a:15:64:d1: e8:02:3f:1d:d8:78:ae:6f:49:3c:fc:54:53:df:fa:87:1f:aa: 99:6c:d4:84:77:9c:18:5d:19:91:80:67:af:bb:e3:c0:32:79: 75:32:e1:6f:ce:e4:08:7a:9e:64:4f:63:b9:5d:5f:fb:a8:51: 7a:35:cb:71:b1:f6:61:28:b5:d9:75:47:39:7e:7c:60:44:c5: d7:48:cb:29:0a:dc:dc:9f:71:8e:e8:88:48:a2:fa:a6:da:db: 77:fd:5e:20:5f:92:ff:46:8a:ed:c7:f0:3e:24:3a:5c:4a:64: 15:11:de:2f:4f:c2:1d:44:20:e1:fb:61:e5:27:a2:6e:f4:85: 9d:d7:7f:bc:30:17:2d:18:89:b2:cd:fb:da:08:e3:bb:92:82: f4:b4:09:e2:53:99:1a:3a:5e:5a:4a:eb:f0:ef:ec:33:da:98: 00:d4:e5:0b:ac:90:02:63:b3:a6:5d:6e:b9:81:05:59:12:0d: d8:0b:58:1d:de:79:b9:11:91:20:bc:88:76:b1:20:b6:32:60: f8:7c:8b:8d:17:ec:01:2b:bc:d8:cf:3c:17:08:5f:9e:c3:7c: b4:4a:fd:02:d6:a3:dd:4a:12:c6:65:45:2a:b0:99:ab:94:63: 5e:17:46:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjUxMDIyMjM0ODU3WhcNMjUxMDI5MjM0ODU3WjAYMRYwFAYD VQQDEw02OGY5NmQ2OS01NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthjmcDaahqy8PDcFvo3PhO7jHteR83uUhR9wHov4alMpEYRaVc2o177pAG1+ mT2wvAmb29FETX/g1nKgNMOsJ2NwksH9IQYKmQhbZbvsXVe9NsulbcB8G5Qvy+0K 3RBXea+zsSBfc+QZ5dpDVi0VLgtlhylYabOERAvHkkbUshGuiNXRpIRSWOzMWTms ddpd+9z14tWKOFUh4DOE1g/5j4EuzHY98HwcA26atbS12CXil7kJyPcVihTCDTvE 9vc3SuNlwAOdQt34AJC1f6IMvaJ1WuPZgd/n72cwrUHEhkqwjXto8uIvKRFsQ3ZH vz+xC+3Y2UvhqZizzjOrrz3SBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6d5XG0 AjJR10krNxST6Yl2UoOlMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr0iajSu3KZyKPECducnoVZNHoAj8d2Hiub0k8/FRT3/qHH6qZbNSE d5wYXRmRgGevu+PAMnl1MuFvzuQIep5kT2O5XV/7qFF6NctxsfZhKLXZdUc5fnxg RMXXSMspCtzcn3GO6IhIovqm2tt3/V4gX5L/Rortx/A+JDpcSmQVEd4vT8IdRCDh +2HlJ6Ju9IWd13+8MBctGImyzfvaCOO7koL0tAniU5kaOl5aSuvw7+wz2pgA1OUL rJACY7OmXW65gQVZEg3YC1gd3nm5EZEgvIh2sSC2MmD4fIuNF+wBK7zYzzwXCF+e w3y0Sv0C1qPdShLGZUUqsJmrlGNeF0ZA -----END CERTIFICATE-----Generated at Thu Oct 23 10:16:49 2025 by rpki-client