$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft File: j6hk_qmvHMBaicsQ6i43MXBt8_U.mft (raw, json) Hash identifier: 5XjsUeIfppuhMnwW4QyS4g2qTTWXdJh0TrnwVzGwPXo= Subject key identifier: B9:CC:20:8A:E4:24:B0:98:D3:FD:A3:26:96:8B:64:13:29:10:DB:4C Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5 Certificate issuer: /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft Manifest number: 0F Signing time: Thu 23 Oct 2025 10:15:06 +0000 Manifest this update: Thu 23 Oct 2025 10:15:05 +0000 Manifest next update: Thu 30 Oct 2025 10:15:05 +0000 Files and hashes: 1: j6hk_qmvHMBaicsQ6i43MXBt8_U.crl (hash: bsa+zGPky+/QwpWbFbVsOT5SJxuPjnIY19jVo6BBq/8=) 2: 8121DCA49DF611F0B7D5393FC4F9AE02.roa (hash: 9g7OIf/aUpSy1rCWca9ZMugo81QHot1HlcLobRXWLTE=) 3: 0B1E45B49DF711F09C653340C4F9AE02.roa (hash: vIsigsIWJxpolid0KI36h1A1tKYdEORqEUTOoyk6qAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 10:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5 Validity Not Before: Oct 23 10:15:05 2025 GMT Not After : Oct 30 10:15:05 2025 GMT Subject: CN=68fa002a-a59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:b2:a0:6c:2a:9d:fb:ce:ce:8a:c7:6a:a1: 6c:8c:ab:49:08:f4:1a:17:f0:c5:fa:8b:a3:b0:03: 3d:83:f0:83:6b:4a:10:98:f8:b3:77:26:0a:87:b1: 19:91:9b:f3:af:e6:90:41:1b:aa:e6:a6:8e:ab:35: bb:2c:93:13:ea:56:41:c8:7f:a3:57:c6:d9:cf:7c: e7:ac:f6:48:5d:8f:8c:a9:8f:69:07:56:7f:8a:d5: 69:ad:18:83:17:d6:2c:c0:20:05:4f:48:f1:f8:85: bf:bd:1f:af:4e:68:ec:60:06:da:af:49:dd:55:b9: df:39:55:ed:cd:25:2c:2d:e2:21:10:ae:c0:66:bd: 51:3c:52:b1:d1:f4:e0:a9:26:37:50:96:83:37:6c: 9e:87:04:4f:f8:2c:00:6c:22:f7:9e:e5:c6:68:37: c5:bf:6f:9a:ef:32:20:4f:ff:1f:bd:f0:cf:f1:9b: 09:6b:1f:f1:db:8a:c1:26:68:6e:11:a1:b8:15:9d: a9:e8:08:63:4b:6b:4d:5e:e8:60:97:fb:b0:f3:84: 42:0f:b1:21:14:79:5d:99:76:8a:04:a0:3f:9b:6f: 9a:b2:b9:64:f5:01:14:43:b1:02:a1:67:41:64:43: c9:14:74:3f:93:b1:5b:30:a4:40:a0:5f:c9:82:53: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CC:20:8A:E4:24:B0:98:D3:FD:A3:26:96:8B:64:13:29:10:DB:4C X509v3 Authority Key Identifier: keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fd:c7:46:03:e3:c4:00:83:8f:01:d0:63:0d:90:ab:54:a4: cd:4a:fc:c4:34:4d:da:8c:97:17:42:b3:a5:98:69:22:9a:f2: 8c:72:f5:c8:03:85:56:05:13:93:ba:3e:ee:e4:a3:4e:f7:4d: ee:7b:dd:0a:51:5c:d3:29:02:a6:a4:cb:fb:ea:25:34:8f:4e: ad:59:8e:be:fd:8e:43:a2:70:47:e3:2c:c0:31:fa:ba:d5:de: 47:95:09:89:f7:d1:07:70:2c:08:ef:05:b1:a0:2b:1d:77:94: 1b:69:1d:48:99:a8:a1:3b:5c:91:6b:af:16:c8:a3:63:0f:f1: ea:ea:79:ef:7e:a8:1b:bd:00:2f:76:1f:ca:be:95:5a:bf:e3: d6:16:cf:81:ba:dc:cb:7b:23:f6:28:18:98:35:e1:05:14:19: 8e:2d:11:1e:4c:57:3a:1c:a1:5b:d5:6e:03:02:a5:0c:f0:20: 29:6f:53:6c:a8:27:a9:3e:e3:22:9c:5e:68:dd:12:1f:a8:4b: ee:31:2d:9f:54:44:ce:b7:2f:7f:7d:31:67:e4:bb:e8:bb:73: cb:03:e2:d9:ef:70:ef:36:30:a1:f0:77:17:7a:17:63:94:7a: ca:74:37:10:0e:ea:8d:c5:f1:06:78:70:99:2f:7f:99:4c:a6: 37:74:3c:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFGNTExMC8GA1UEBRMoOEZBODY0RkVBOUFGMUNDMDVBODlDQjEwRUEyRTM3MzE3 MDZERjNGNTAeFw0yNTEwMjMxMDE1MDVaFw0yNTEwMzAxMDE1MDVaMBgxFjAUBgNV BAMTDTY4ZmEwMDJhLWE1OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7S7KgbCqd+87OisdqoWyMq0kI9BoX8MX6i6OwAz2D8INrShCY+LN3JgqHsRmR m/Ov5pBBG6rmpo6rNbsskxPqVkHIf6NXxtnPfOes9khdj4ypj2kHVn+K1WmtGIMX 1izAIAVPSPH4hb+9H69OaOxgBtqvSd1Vud85Ve3NJSwt4iEQrsBmvVE8UrHR9OCp JjdQloM3bJ6HBE/4LABsIvee5cZoN8W/b5rvMiBP/x+98M/xmwlrH/HbisEmaG4R obgVnanoCGNLa01e6GCX+7DzhEIPsSEUeV2ZdooEoD+bb5qyuWT1ARRDsQKhZ0Fk Q8kUdD+TsVswpECgX8mCUwWLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUucwgiuQk sJjT/aMmlotkEykQ20wwHwYDVR0jBBgwFoAUj6hk/qmvHMBaicsQ6i43MXBt8/Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUY1LzdDRDQyQTY4OURG NTExRjA5QTJCNjYyMEM0RjlBRTAyL2o2aGtfcW12SE1CYWljc1E2aTQzTVhCdDhf VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZoa19xbXZITUJhaWNzUTZpNDNNWEJ0OF9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUY1LzdDRDQyQTY4OURGNTExRjA5QTJCNjYyMEM0RjlBRTAyL2o2aGtfcW12SE1C YWljc1E2aTQzTVhCdDhfVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAv9x0YD48QAg48B0GMNkKtUpM1K/MQ0TdqMlxdCs6WYaSKa8oxy9cgD hVYFE5O6Pu7ko073Te573QpRXNMpAqaky/vqJTSPTq1Zjr79jkOicEfjLMAx+rrV 3keVCYn30QdwLAjvBbGgKx13lBtpHUiZqKE7XJFrrxbIo2MP8erqee9+qBu9AC92 H8q+lVq/49YWz4G63Mt7I/YoGJg14QUUGY4tER5MVzocoVvVbgMCpQzwIClvU2yo J6k+4yKcXmjdEh+oS+4xLZ9URM63L399MWfku+i7c8sD4tnvcO82MKHwdxd6F2OU esp0NxAO6o3F8QZ4cJkvf5lMpjd0PJE= -----END CERTIFICATE-----Generated at Fri Oct 24 21:47:24 2025 by rpki-client