$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: DqZGadrxHFDxeOZcBIiLaGS6yEr2mNF3UU75DXV67Bg= Subject key identifier: 21:15:AE:FA:7F:7C:EA:DC:5E:35:95:E3:DD:F1:A2:48:26:35:44:17 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 0855 Signing time: Sun 02 Nov 2025 20:41:09 +0000 Manifest this update: Sun 02 Nov 2025 20:41:08 +0000 Manifest next update: Sun 09 Nov 2025 20:41:08 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: Mo8HsN07TqlU11AvVq/MfTzCrzfZki6fHvqgHhk+J7s=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: 6NwFc4G6kbW7IIFb4mldHTmS90zuZDDfhVsh0xYOrRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Nov 2 20:41:08 2025 GMT Not After : Nov 9 20:41:08 2025 GMT Subject: CN=6907c1e5-0290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:df:53:aa:73:93:4b:ea:12:86:94:d7:aa: 5a:4c:9a:b7:31:d0:39:c8:cf:ce:6e:ce:78:2a:3f: 56:00:05:a3:00:8c:ba:74:6e:41:80:aa:d5:ca:ae: 6a:10:c1:c9:d4:9d:58:17:14:af:f7:ea:78:92:69: dd:af:ff:66:94:4c:d9:15:ba:2b:f8:48:2a:7d:7c: ae:72:41:27:83:aa:2c:9b:62:c8:bd:f9:d1:5c:b6: 0d:e7:d5:0d:ff:b7:9a:32:75:1d:c8:a9:3e:57:e7: b0:f2:12:34:ae:fe:8c:70:51:c5:dc:8a:49:9d:de: e0:e8:8b:4c:0a:7d:6d:de:f5:9c:70:48:9f:ed:2e: 09:c1:67:f2:2f:6a:82:cf:09:d0:3c:c1:95:48:bf: 7b:a8:bd:a4:aa:ac:b2:9c:a2:de:55:cc:3c:fd:64: 00:8e:42:25:e8:ba:fb:0e:e3:94:46:ab:18:43:8c: d2:eb:e3:03:79:f7:5e:b4:a5:f4:15:52:40:eb:5b: 51:b9:98:36:96:6a:7e:d8:e7:39:d7:58:12:32:57: e0:99:af:21:d7:04:2d:dd:ec:51:65:bb:32:d9:3e: e3:e1:86:5d:ab:8f:3a:47:7a:73:4a:ce:72:43:5b: 8d:c8:b9:17:c2:3d:01:4d:9a:87:b7:8e:5a:c1:ae: 8d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:15:AE:FA:7F:7C:EA:DC:5E:35:95:E3:DD:F1:A2:48:26:35:44:17 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:1d:ae:70:2c:5b:22:cd:8d:32:b1:63:67:ea:ac:b6:89:40: 2c:df:39:85:9d:f0:c6:67:c1:de:0f:65:56:51:37:0e:84:bb: d3:8b:16:44:53:2d:09:c7:aa:86:20:06:54:3a:9a:f8:9b:c6: b2:a6:23:18:dc:5b:54:be:75:42:04:09:96:83:e2:83:66:2d: 78:94:23:88:80:2e:fa:c8:08:f3:e3:44:ed:6b:4a:c5:15:c5: 15:39:8c:59:6a:5c:db:47:71:49:a5:d6:82:fd:77:7f:4e:2f: 22:59:c5:a3:06:87:71:24:4f:57:97:bc:9f:24:f7:8b:33:91: d0:c4:66:0d:a0:9a:d7:ce:ef:68:8d:fd:56:44:2e:13:7c:90: 33:95:0c:e8:fd:48:57:37:f3:20:f8:9e:40:be:3b:77:14:21: d8:0d:97:02:13:bf:d0:da:54:46:1e:07:14:40:2f:53:24:31: b0:a3:90:b9:38:35:d9:27:e0:a4:29:1e:11:f0:34:26:ec:63: de:4b:8f:d3:a2:ba:19:ef:bd:8a:06:8c:33:18:7e:ee:28:4f: 9f:41:dc:ae:c5:69:c4:0a:42:fa:b6:5f:8b:02:4c:08:2b:4d: 05:26:19:47:e0:9a:91:1a:ba:fb:3d:69:47:57:f7:5b:42:28: 77:ba:9a:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUxMTAyMjA0MTA4WhcNMjUxMTA5MjA0MTA4WjAYMRYwFAYD VQQDEw02OTA3YzFlNS0wMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSPfU6pzk0vqEoaU16paTJq3MdA5yM/Obs54Kj9WAAWjAIy6dG5BgKrVyq5q EMHJ1J1YFxSv9+p4kmndr/9mlEzZFbor+EgqfXyuckEng6osm2LIvfnRXLYN59UN /7eaMnUdyKk+V+ew8hI0rv6McFHF3IpJnd7g6ItMCn1t3vWccEif7S4JwWfyL2qC zwnQPMGVSL97qL2kqqyynKLeVcw8/WQAjkIl6Lr7DuOURqsYQ4zS6+MDefdetKX0 FVJA61tRuZg2lmp+2Oc511gSMlfgma8h1wQt3exRZbsy2T7j4YZdq486R3pzSs5y Q1uNyLkXwj0BTZqHt45awa6N5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEVrvp/ fOrcXjWV493xokgmNUQXMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYHa5wLFsizY0ysWNn6qy2iUAs3zmFnfDGZ8HeD2VWUTcOhLvTixZE Uy0Jx6qGIAZUOpr4m8aypiMY3FtUvnVCBAmWg+KDZi14lCOIgC76yAjz40Tta0rF FcUVOYxZalzbR3FJpdaC/Xd/Ti8iWcWjBodxJE9Xl7yfJPeLM5HQxGYNoJrXzu9o jf1WRC4TfJAzlQzo/UhXN/Mg+J5Avjt3FCHYDZcCE7/Q2lRGHgcUQC9TJDGwo5C5 ODXZJ+CkKR4R8DQm7GPeS4/ToroZ772KBowzGH7uKE+fQdyuxWnECkL6tl+LAkwI K00FJhlH4JqRGrr7PWlHV/dbQih3upqx -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:06 2025 by rpki-client