$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft File: SdD0BpcqgFseep_CD7OpzLdmKs4.mft (raw, json) Hash identifier: 2Tfwx/B1QKDYRROp2msBIMCH6mvMF2qJcYW25K6M1sY= Subject key identifier: FA:01:0A:03:EF:A0:D5:CD:B7:9F:DD:38:4D:61:58:B6:05:8E:6B:6B Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft Manifest number: 01D4 Signing time: Mon 03 Nov 2025 02:47:09 +0000 Manifest this update: Mon 03 Nov 2025 02:47:09 +0000 Manifest next update: Mon 10 Nov 2025 02:47:09 +0000 Files and hashes: 1: SdD0BpcqgFseep_CD7OpzLdmKs4.crl (hash: 3wlIu5LTBbqDlnO/QMDXRSMYBBCaeCtwPDOguk0X+Nw=) 2: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (hash: H97m0xGfwTSK15tOF7js1ABWMy5iF+l3/IsWtR98xbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D396, serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE Validity Not Before: Nov 3 02:47:09 2025 GMT Not After : Nov 10 02:47:09 2025 GMT Subject: CN=690817ad-e39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:2d:5f:6d:6d:fa:73:45:b6:ba:c7:98:38: 86:ff:6d:27:a8:b8:c7:1e:f0:87:80:0f:0e:5f:6b: a3:21:d1:e9:d6:6b:6e:61:3b:0f:11:09:bf:57:bf: ea:2f:62:88:79:2e:91:6d:c7:1b:ac:bc:1c:5e:6b: 57:ce:e8:87:b0:5c:aa:54:ff:19:a9:71:cd:ed:ab: 80:29:b9:86:cf:04:e8:45:5b:a0:8a:f4:85:29:93: d1:14:01:3f:52:60:44:bf:37:53:df:3d:ce:ae:76: 65:d8:a2:73:6f:0c:ed:8d:27:f0:29:3e:eb:e5:79: 86:04:86:a3:ed:ef:1e:99:6a:c0:ba:4b:c8:1f:ae: a7:05:f0:1e:18:7d:82:3a:83:31:dd:94:d5:f8:91: 09:c0:b6:54:55:8e:59:db:64:a2:69:eb:a0:e6:05: e0:7e:92:c9:16:74:c2:b9:8a:f5:7c:6d:bd:de:11: 5a:f8:d6:e2:74:29:df:50:03:85:9d:91:ba:24:2e: 40:6e:17:ce:ee:22:3d:0d:a4:8e:80:3d:0a:43:65: 7d:7a:15:4f:df:9c:35:01:37:9f:fa:3d:cb:75:28: 37:ac:40:f7:d1:24:b2:a1:51:7d:42:b7:07:ae:71: be:9a:88:a6:64:11:ca:95:20:c6:fb:b0:7c:5d:03: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:01:0A:03:EF:A0:D5:CD:B7:9F:DD:38:4D:61:58:B6:05:8E:6B:6B X509v3 Authority Key Identifier: keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:87:2e:c1:1d:c6:f8:a5:a5:49:8a:24:da:16:f4:85:09:f0: c2:4c:b8:d2:82:32:df:2e:e0:b4:23:25:55:e5:74:6d:af:a9: 08:4d:46:53:cd:c7:1c:2a:b1:87:00:4f:8a:32:59:97:a2:96: 7a:d1:b6:f1:a8:0c:33:40:d4:f0:3c:8b:8d:ad:fb:aa:1a:0a: e1:bb:e7:0a:a5:93:25:42:ad:58:91:a4:ed:c0:52:4e:ce:8c: 39:ff:19:2a:72:0e:89:1a:0c:57:ef:57:f2:da:e0:35:26:34: c6:a0:49:9f:7a:c5:45:bb:0e:2b:99:07:f7:51:d9:36:47:69: e5:1e:45:e8:97:e0:68:15:3a:7c:da:11:43:bc:8e:03:0a:e2: f0:91:cd:1d:6a:5b:ac:4b:e1:fb:a3:13:a8:9c:13:b9:84:7f: bd:17:ba:c9:4a:4c:fb:5f:5c:37:98:cb:de:2a:5a:f2:ff:d4: ef:c3:17:2d:98:5b:5e:08:55:d8:24:01:58:99:12:fb:ac:10: a2:73:d0:f7:ca:f5:f5:78:62:86:89:21:8d:e1:3b:1c:84:c3: 25:9d:0a:8d:c7:a0:8a:00:df:df:32:ff:e6:ce:52:39:2a:bc: ec:b9:67:69:24:9e:71:82:00:89:5d:58:1e:7d:fa:0e:96:8c: 53:97:3f:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzOTYxMTAvBgNVBAUTKDQ5RDBGNDA2OTcyQTgwNUIxRTdBOUZDMjBGQjNBOUND Qjc2NjJBQ0UwHhcNMjUxMTAzMDI0NzA5WhcNMjUxMTEwMDI0NzA5WjAYMRYwFAYD VQQDEw02OTA4MTdhZC1lMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21EtX21t+nNFtrrHmDiG/20nqLjHHvCHgA8OX2ujIdHp1mtuYTsPEQm/V7/q L2KIeS6RbccbrLwcXmtXzuiHsFyqVP8ZqXHN7auAKbmGzwToRVugivSFKZPRFAE/ UmBEvzdT3z3OrnZl2KJzbwztjSfwKT7r5XmGBIaj7e8emWrAukvIH66nBfAeGH2C OoMx3ZTV+JEJwLZUVY5Z22Siaeug5gXgfpLJFnTCuYr1fG293hFa+NbidCnfUAOF nZG6JC5AbhfO7iI9DaSOgD0KQ2V9ehVP35w1ATef+j3LdSg3rED30SSyoVF9QrcH rnG+moimZBHKlSDG+7B8XQM//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoBCgPv oNXNt5/dOE1hWLYFjmtrMB8GA1UdIwQYMBaAFEnQ9AaXKoBbHnqfwg+zqcy3ZirO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDM5Ni85NUQwREY3QUVG OUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdGc2VlcF9DRDdPcHpMZG1L czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkRDBCcGNxZ0ZzZWVwX0NEN09wekxkbUtzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDM5Ni85NUQwREY3QUVGOUMxMUVEOUJGNjNCODZDNEY5QUUwMi9TZEQwQnBjcWdG c2VlcF9DRDdPcHpMZG1LczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVhy7BHcb4paVJiiTaFvSFCfDCTLjSgjLfLuC0IyVV5XRtr6kITUZT zcccKrGHAE+KMlmXopZ60bbxqAwzQNTwPIuNrfuqGgrhu+cKpZMlQq1YkaTtwFJO zow5/xkqcg6JGgxX71fy2uA1JjTGoEmfesVFuw4rmQf3Udk2R2nlHkXol+BoFTp8 2hFDvI4DCuLwkc0dalusS+H7oxOonBO5hH+9F7rJSkz7X1w3mMveKlry/9Tvwxct mFteCFXYJAFYmRL7rBCic9D3yvX1eGKGiSGN4TschMMlnQqNx6CKAN/fMv/mzlI5 KrzsuWdpJJ5xggCJXVgeffoOloxTlz8G -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:04 2025 by rpki-client