$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: vyfzMS8xmreIrumI4zYWg3WmjbN4MrHkpvi7HBDfCeo= Subject key identifier: 63:9E:C0:04:75:B4:EC:85:7D:CC:74:E8:B4:95:DD:0D:90:88:57:F9 Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 098E Signing time: Sun 02 Nov 2025 20:01:20 +0000 Manifest this update: Sun 02 Nov 2025 20:01:19 +0000 Manifest next update: Sun 09 Nov 2025 20:01:19 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 2VSkYazSNWhU0INbm0kkBfyx06ZTegzc9n5FWXJus5I=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Nov 2 20:01:19 2025 GMT Not After : Nov 9 20:01:19 2025 GMT Subject: CN=6907b88f-86ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:af:fe:45:21:ea:57:d4:00:df:e9:4e:be: 15:94:10:c3:b6:13:b0:9b:38:ad:dd:00:cb:5d:79: dc:1a:1c:8f:a0:b1:94:6f:d8:ef:42:8b:fd:3d:83: 22:1b:8a:7b:5d:25:fa:16:3d:b4:64:75:bb:f5:96: ba:f9:43:e1:17:35:71:f7:37:6d:77:68:74:60:40: a1:ee:90:00:a8:04:8e:22:a8:56:e8:b3:24:66:1b: e0:59:97:00:2c:52:b2:98:8c:25:77:59:8c:42:7f: 0f:2e:6c:ef:82:c2:ff:d9:74:8e:7d:a4:d4:20:93: 26:e9:32:c1:20:74:48:cc:8a:79:f4:33:91:40:ec: c4:ce:eb:46:bc:06:cd:73:06:82:fd:f4:52:c4:95: 24:9a:ab:c6:f6:f3:5a:4b:55:8e:49:9e:77:f9:65: 63:1b:ad:1e:4a:f5:34:4f:25:8a:c1:6d:ca:a0:3e: 1c:45:9f:b1:85:11:d5:85:b7:21:2a:e1:a4:4a:c7: 56:88:0e:62:03:00:8f:77:cb:f7:b1:a5:22:6f:5a: 17:b9:24:7e:04:41:9f:3a:bc:68:a1:6a:74:17:31: 1c:47:48:54:ed:fe:9e:c8:48:66:4d:f6:eb:29:fb: ae:31:cf:3a:82:5e:a2:4e:70:22:a3:8b:b6:aa:4c: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:C0:04:75:B4:EC:85:7D:CC:74:E8:B4:95:DD:0D:90:88:57:F9 X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f1:c6:e8:84:ee:3a:60:17:74:9d:aa:74:79:41:4f:4a:09: d9:31:b1:e9:65:2d:65:8a:5f:53:50:9d:67:4d:db:78:cc:fd: 31:83:4d:8d:29:9f:2e:22:e8:a5:72:7b:05:4e:92:28:e1:e5: 80:f7:bb:ca:a3:37:dd:ff:25:22:c6:48:3b:b7:79:55:cd:87: 46:62:27:4c:cf:7b:e4:6b:43:18:f1:5d:e2:60:3a:fb:82:81: 11:8e:27:e5:01:92:c7:a7:5a:6f:40:21:2b:4b:4a:51:11:30: 70:a0:44:f6:b2:37:c6:84:04:5c:07:23:4c:d1:a4:bc:5e:e5: 71:04:a1:f2:fc:62:8e:58:e7:0f:0e:98:4d:9c:76:cb:a8:90: 5f:96:71:61:c6:4e:33:8b:b5:51:93:e7:84:a7:18:87:67:60: 70:44:b1:24:96:1d:c0:b5:23:53:a4:6c:3b:ff:a1:e5:5b:46: 74:fe:6e:ce:37:ce:54:6c:eb:90:d4:30:be:0c:e6:88:d6:87: 4c:60:d0:f1:68:53:dc:13:89:a2:c2:08:ad:3c:a7:75:95:79: fa:16:82:67:94:96:e5:0a:cd:53:c1:1f:95:4d:51:3f:74:84: be:7f:23:5a:0b:1b:9f:f5:87:54:e0:7c:00:10:ce:eb:e9:33: eb:a4:50:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUxMTAyMjAwMTE5WhcNMjUxMTA5MjAwMTE5WjAYMRYwFAYD VQQDEw02OTA3Yjg4Zi04NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDuv/kUh6lfUAN/pTr4VlBDDthOwmzit3QDLXXncGhyPoLGUb9jvQov9PYMi G4p7XSX6Fj20ZHW79Za6+UPhFzVx9zdtd2h0YECh7pAAqASOIqhW6LMkZhvgWZcA LFKymIwld1mMQn8PLmzvgsL/2XSOfaTUIJMm6TLBIHRIzIp59DORQOzEzutGvAbN cwaC/fRSxJUkmqvG9vNaS1WOSZ53+WVjG60eSvU0TyWKwW3KoD4cRZ+xhRHVhbch KuGkSsdWiA5iAwCPd8v3saUib1oXuSR+BEGfOrxooWp0FzEcR0hU7f6eyEhmTfbr KfuuMc86gl6iTnAio4u2qkxzKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOewAR1 tOyFfcx06LSV3Q2QiFf5MB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB88cbohO46YBd0nap0eUFPSgnZMbHpZS1lil9TUJ1nTdt4zP0xg02N KZ8uIuilcnsFTpIo4eWA97vKozfd/yUixkg7t3lVzYdGYidMz3vka0MY8V3iYDr7 goERjiflAZLHp1pvQCErS0pRETBwoET2sjfGhARcByNM0aS8XuVxBKHy/GKOWOcP DphNnHbLqJBflnFhxk4zi7VRk+eEpxiHZ2BwRLEklh3AtSNTpGw7/6HlW0Z0/m7O N85UbOuQ1DC+DOaI1odMYNDxaFPcE4miwgitPKd1lXn6FoJnlJblCs1TwR+VTVE/ dIS+fyNaCxuf9YdU4HwAEM7r6TPrpFAG -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:48 2025 by rpki-client