$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: 5MjdI54MrSKOnOTSMCRZVFR5KgYMh3j/1DTZrn24iWM= Subject key identifier: 43:A0:A7:9B:65:09:61:45:35:7F:64:31:B6:E8:EB:8F:A5:F0:8E:2E Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: 27 Signing time: Mon 27 Oct 2025 10:14:24 +0000 Manifest this update: Mon 27 Oct 2025 10:14:24 +0000 Manifest next update: Mon 03 Nov 2025 10:14:24 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: BlgMbg2vFT3ZCOPT0pNsvqXD86nXbbrIp5xpv2ddpGg=) 2: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: LhJsIUDxJjf34uwAXx8g7B6lkG4erRS20bGVNhkO1Ek=) 3: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: vQ9ge67AKzH4HNbVsuxX3Mwi95vAo6POwUTMCo0fB8I=) 4: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: ccXunp3OE2ONSoYTGcr2m1hcygin6LHeeNQEO7if+44=) 5: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: DPudtrZt3zDLn6cOKt8G2uNXGPQUskKpTDxbAvt9zzA=) 6: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: 8VEPDf924YuQ0JrYCDPzrjF2qm9rSo7AZ2xnXGQmqpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 10:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Oct 27 10:14:24 2025 GMT Not After : Nov 3 10:14:24 2025 GMT Subject: CN=68ff4600-077f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:25:d3:d1:53:e6:cc:ae:f6:bf:9a:67:59:1c: 7f:ad:22:59:90:16:25:4d:92:18:9d:aa:1d:27:75: 59:e9:86:a2:d9:cb:e3:df:c7:40:f1:8b:48:bf:46: f9:1e:56:10:15:bc:34:53:7a:5f:e6:46:86:d4:a5: de:4f:ed:68:ce:73:b0:e1:0e:a9:18:f9:8f:54:f6: 6b:f8:6a:9a:a1:9c:22:ab:a5:af:75:10:4f:5f:85: 16:3a:6a:a7:50:9a:ae:ef:63:8f:c9:fd:ab:f8:93: 07:a9:d6:07:7e:ca:4d:d2:55:41:b4:4c:b6:21:25: cb:f9:8d:8f:91:31:cf:db:74:00:42:27:98:7c:3c: 5c:ad:33:e5:1a:66:9b:81:68:b6:33:fb:bb:10:e1: ff:0e:15:66:15:00:3e:a1:f9:08:72:13:63:13:cd: 7b:d8:76:2f:07:24:ae:0f:02:c9:db:c6:b7:23:21: 23:d2:30:36:f9:1d:95:ea:dd:8b:ed:52:41:90:3b: 98:5b:0b:f4:ff:1e:78:5f:58:dc:34:ab:45:a0:1b: 0a:56:c6:db:6e:0f:60:5e:2f:b9:c2:a2:a4:cb:3a: 76:f0:78:21:36:ba:4c:74:8c:5c:f5:ac:78:35:ab: a9:1c:67:ac:1f:82:a7:2c:41:67:ca:31:82:2e:9b: 7e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:A7:9B:65:09:61:45:35:7F:64:31:B6:E8:EB:8F:A5:F0:8E:2E X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:36:5c:6b:e4:04:03:e0:f6:75:a9:9b:d1:0b:6e:5b:ae:db: a1:7b:1e:05:e0:ee:6f:12:d4:a0:80:00:21:4d:86:f1:cc:1a: fd:60:66:df:5b:ed:67:d0:ef:cb:26:7f:19:87:81:a3:d5:e5: eb:64:22:46:be:a2:20:93:6b:ec:a8:02:79:0d:27:89:ca:d4: 35:01:e5:7e:2d:50:7b:95:bd:7e:39:61:5f:75:24:8a:0d:f0: 5a:d0:76:7d:8f:ca:0a:ec:cc:fb:eb:80:86:cc:3b:14:4c:ff: 42:12:8b:77:28:cc:6f:25:d0:7b:a4:bd:11:35:e9:d6:1e:98: 21:ad:04:f2:e5:f6:5b:fc:12:6c:27:1a:59:81:44:5f:11:ba: a8:a4:d5:ae:4f:a5:63:76:53:c6:12:c7:f7:f4:ca:6b:4a:7f: 20:09:54:92:b2:6c:c7:50:f3:dc:d4:b7:b3:7c:c1:61:a7:f8: a5:c8:0a:dd:84:61:1a:68:1d:75:2d:68:ad:50:73:9d:10:bd: 7e:b7:4b:85:ef:12:6e:65:e2:de:ee:c6:25:a8:42:05:2e:f0: e7:3a:1a:70:72:ce:eb:33:98:01:38:a8:e6:86:1d:33:e2:7f: a0:35:41:c2:af:32:40:13:17:3c:b7:34:21:c7:5a:84:5d:07: 19:d5:58:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDU4ODExMC8GA1UEBRMoODgyODU5RDUyMzAxRjAxNTcxRDlENENGOTUzRjQ1RTA3 NUUwOUE5ODAeFw0yNTEwMjcxMDE0MjRaFw0yNTExMDMxMDE0MjRaMBgxFjAUBgNV BAMTDTY4ZmY0NjAwLTA3N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7JdPRU+bMrva/mmdZHH+tIlmQFiVNkhidqh0ndVnphqLZy+Pfx0Dxi0i/Rvke VhAVvDRTel/mRobUpd5P7WjOc7DhDqkY+Y9U9mv4apqhnCKrpa91EE9fhRY6aqdQ mq7vY4/J/av4kwep1gd+yk3SVUG0TLYhJcv5jY+RMc/bdABCJ5h8PFytM+UaZpuB aLYz+7sQ4f8OFWYVAD6h+QhyE2MTzXvYdi8HJK4PAsnbxrcjISPSMDb5HZXq3Yvt UkGQO5hbC/T/HnhfWNw0q0WgGwpWxttuD2BeL7nCoqTLOnbweCE2ukx0jFz1rHg1 q6kcZ6wfgqcsQWfKMYIum37vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ6Cnm2UJ YUU1f2Qxtujrj6Xwji4wHwYDVR0jBBgwFoAUiChZ1SMB8BVx2dTPlT9F4HXgmpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTg4L0JGN0Q1RTc2N0JG MzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUNoWjFTTUI4QlZ4MmRUUGxUOUY0SFhnbXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE NTg4L0JGN0Q1RTc2N0JGMzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJW eDJkVFBsVDlGNEhYZ21wZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMk2XGvkBAPg9nWpm9ELbluu26F7HgXg7m8S1KCAACFNhvHMGv1gZt9b 7WfQ78smfxmHgaPV5etkIka+oiCTa+yoAnkNJ4nK1DUB5X4tUHuVvX45YV91JIoN 8FrQdn2PygrszPvrgIbMOxRM/0ISi3cozG8l0HukvRE16dYemCGtBPLl9lv8Emwn GlmBRF8Ruqik1a5PpWN2U8YSx/f0ymtKfyAJVJKybMdQ89zUt7N8wWGn+KXICt2E YRpoHXUtaK1Qc50QvX63S4XvEm5l4t7uxiWoQgUu8Oc6GnByzuszmAE4qOaGHTPi f6A1QcKvMkATFzy3NCHHWoRdBxnVWCg= -----END CERTIFICATE-----Generated at Mon Oct 27 21:43:17 2025 by rpki-client