$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: uRRvOx6r5H7l1rO3lJGKVVZNlr8yjCBlHoQlxLPh4ck= Subject key identifier: 74:6F:F1:A7:37:1A:CB:C6:86:C0:25:DC:79:C7:77:25:8B:A5:3C:9A Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0DB5 Signing time: Sun 26 Oct 2025 18:18:33 +0000 Manifest this update: Sun 26 Oct 2025 18:18:32 +0000 Manifest next update: Sun 02 Nov 2025 18:18:32 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: 7s//GS23pOqletXSfNVKKSpu24dBc+Ih2XWPUmEZUBE=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: ephMktk7dldPDpqOYOq0zlTVGd1aoKcLbgXlsFlKEgM=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: TY0we0LCT2NhieXnw4ZC8SmWs1+jQYEFzS94Z1jJrh0=) 6: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Oct 26 18:18:32 2025 GMT Not After : Nov 2 18:18:32 2025 GMT Subject: CN=68fe65f8-a857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:e8:46:a9:25:6d:bc:2f:df:ed:55:76:f1: 61:7a:61:a0:71:64:c8:4d:a4:9c:8d:85:1c:f8:fb: 9c:60:b9:71:15:ff:96:cf:9d:00:56:6c:c4:08:18: 8b:f8:5c:0b:70:f1:d1:25:65:8f:8e:ab:24:5f:96: 17:e9:ce:61:a5:99:0a:88:31:cb:b2:1f:c8:9d:ea: 30:77:9e:bc:d1:ce:d4:93:c1:fe:4e:87:0b:49:40: 72:2a:f2:23:1a:7f:ec:77:10:6b:82:3c:2b:a2:97: 96:7e:f1:9f:4e:3a:61:4b:2c:00:9a:67:9a:a6:7b: 7a:c7:30:0a:c0:22:bd:85:28:e4:5b:1e:7a:79:27: fd:c8:46:9e:f1:e0:3f:fd:8f:3e:b4:61:51:38:12: f3:f2:cd:93:83:67:90:5b:55:e9:24:b3:00:65:47: 8f:79:02:aa:63:49:13:62:56:b5:d4:2c:d4:1a:63: 1c:d3:8f:e6:4f:92:d7:9e:f4:e4:2f:03:77:4f:17: a9:69:ca:6d:e4:82:c7:9f:c0:37:c1:f4:f9:81:bb: dc:b1:b6:84:2d:72:c0:51:53:20:30:d8:99:42:b2: 15:4a:7a:2b:b1:f7:b0:15:46:48:79:20:e3:72:be: 9d:dc:a8:00:6f:49:47:81:bb:54:17:82:b3:44:b4: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6F:F1:A7:37:1A:CB:C6:86:C0:25:DC:79:C7:77:25:8B:A5:3C:9A X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:db:6a:03:f7:32:c3:78:73:be:3e:88:c9:b5:53:a4:9b:98: a0:a7:10:89:5b:a1:79:20:16:89:a6:e2:24:b7:05:9a:a2:55: 07:f4:f2:3e:5c:30:dc:52:c0:b6:f6:06:6b:48:92:2e:58:52: db:ec:49:74:8f:38:a8:50:8b:e2:26:80:7b:ba:c4:06:86:ea: 5a:06:c6:8b:36:3a:bb:24:19:94:06:b9:a6:55:ff:18:fd:17: 29:69:30:f3:af:2a:92:6f:94:6a:19:4d:45:87:76:b7:89:ad: f0:ea:d7:56:25:39:f8:d8:f7:d8:99:97:4f:55:7d:db:2c:a5: 08:84:05:15:eb:ee:3e:55:54:9b:22:ab:15:51:f9:bb:67:ac: 3a:9c:4b:1d:61:06:0c:15:46:b2:a1:81:92:b0:1b:fc:2d:28: 71:c5:c1:26:c4:6e:24:69:34:50:40:e8:c9:b6:d5:07:df:7d: ac:a4:2b:9c:6b:63:54:4f:bc:bd:a7:3b:80:dc:f9:dd:55:c2: 0f:82:e1:88:b1:03:a2:ca:5c:e4:a7:66:ab:f9:c2:f1:82:34: 44:49:21:bc:19:9f:21:a2:a7:bc:2e:ee:ae:52:ca:2e:2e:81: 9a:dc:3f:c6:49:db:e5:82:cc:f6:68:e4:99:06:27:40:3d:4f: 5a:2d:05:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUxMDI2MTgxODMyWhcNMjUxMTAyMTgxODMyWjAYMRYwFAYD VQQDEw02OGZlNjVmOC1hODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhvoRqklbbwv3+1VdvFhemGgcWTITaScjYUc+PucYLlxFf+Wz50AVmzECBiL +FwLcPHRJWWPjqskX5YX6c5hpZkKiDHLsh/Ineowd5680c7Uk8H+TocLSUByKvIj Gn/sdxBrgjwropeWfvGfTjphSywAmmeapnt6xzAKwCK9hSjkWx56eSf9yEae8eA/ /Y8+tGFROBLz8s2Tg2eQW1XpJLMAZUePeQKqY0kTYla11CzUGmMc04/mT5LXnvTk LwN3Txepacpt5ILHn8A3wfT5gbvcsbaELXLAUVMgMNiZQrIVSnorsfewFUZIeSDj cr6d3KgAb0lHgbtUF4KzRLR/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRv8ac3 GsvGhsAl3HnHdyWLpTyaMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu22oD9zLDeHO+PojJtVOkm5igpxCJW6F5IBaJpuIktwWaolUH9PI+ XDDcUsC29gZrSJIuWFLb7El0jzioUIviJoB7usQGhupaBsaLNjq7JBmUBrmmVf8Y /RcpaTDzryqSb5RqGU1Fh3a3ia3w6tdWJTn42PfYmZdPVX3bLKUIhAUV6+4+VVSb IqsVUfm7Z6w6nEsdYQYMFUayoYGSsBv8LShxxcEmxG4kaTRQQOjJttUH332spCuc a2NUT7y9pzuA3PndVcIPguGIsQOiylzkp2ar+cLxgjRESSG8GZ8hoqe8Lu6uUsou LoGa3D/GSdvlgsz2aOSZBidAPU9aLQUw -----END CERTIFICATE-----Generated at Mon Oct 27 15:00:46 2025 by rpki-client