$ rpki-client -vvvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: Q19kJFINN7PfAgcfz6gJAVRu82z/S7+Wvjv2up/gAbk= Subject key identifier: 70:D4:1E:84:21:4A:2A:03:13:2F:26:B5:C5:D1:B6:F3:A7:4C:FF:AD Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 0419 Signing time: Fri 25 Sep 2026 00:15:46 +0000 Manifest this update: Fri 25 Sep 2026 00:15:46 +0000 Manifest next update: Fri 02 Oct 2026 00:15:46 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: xaD1eGeY5u594t/pgwpDg/9y/wEk3j+O13qTA5FCZfI=) 2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Sep 25 00:15:46 2026 GMT Not After : Oct 2 00:15:46 2026 GMT Subject: CN=6ab5bd32-539b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:6c:be:66:b7:a5:76:3c:70:6d:f6:22:00: a2:1c:ba:46:91:fd:66:73:b9:39:20:98:6c:96:b5: 4e:36:d9:3b:dd:39:28:2e:be:b5:19:34:44:05:dd: c8:58:20:f3:a4:95:22:4d:d5:c1:a0:10:62:74:4f: 4e:83:b1:34:18:34:8a:6a:d8:2e:98:d6:33:35:7d: cc:1f:70:63:e1:24:c2:06:49:e5:03:13:21:df:e4: 8a:df:fd:21:36:56:7c:a4:90:15:0b:c5:32:78:7f: 54:eb:47:fd:91:e5:78:0e:0c:be:a7:ed:c6:1b:a9: fc:73:e6:8d:79:b3:ec:cb:57:ab:2d:ea:39:9f:97: 2e:3f:9f:04:09:d6:08:76:df:9c:96:c1:17:fd:14: f3:44:b1:6d:47:41:49:38:42:8b:7c:4d:92:7b:d4: 75:6f:7f:b5:c2:47:ff:62:52:87:20:8a:5f:be:a9: 2a:98:f3:1a:71:45:b3:47:f9:cf:35:6b:5a:30:7a: d7:18:d1:72:53:6b:8a:a1:a4:55:06:d1:f3:1c:27: da:02:63:92:4e:a0:1a:3b:56:42:b2:d9:d0:c6:84: 5a:32:66:f9:e0:f3:c8:b4:1c:63:6c:77:c8:d1:03: a1:57:45:f1:2a:54:da:7c:25:68:35:e1:c7:25:03: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D4:1E:84:21:4A:2A:03:13:2F:26:B5:C5:D1:B6:F3:A7:4C:FF:AD X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:9c:a6:69:a8:8c:96:4d:61:cd:f8:a1:dd:ee:05:e9:87:f6: 71:7f:4b:a1:9b:f9:36:0b:94:d2:ce:27:b5:dc:87:e8:7f:f4: ce:96:39:98:a9:b2:ef:04:d5:95:b2:21:cc:92:ca:e3:2c:08: c4:8b:2b:e3:1b:59:37:c8:9d:8e:05:26:31:c8:13:ab:eb:5a: c4:ce:fc:59:b1:8b:04:52:6a:32:ec:57:fc:65:92:00:47:27: db:c8:47:75:d7:bb:b4:01:91:96:17:15:d9:de:b9:3b:86:73: 74:35:ed:d1:d7:6d:b8:5e:f7:89:60:bf:ac:1a:b0:37:fd:fc: 29:18:b3:f6:e9:4a:a1:31:ef:da:75:82:4e:8c:c9:76:d8:53: b0:3e:82:34:9a:c7:7d:73:35:9c:b4:ad:1f:72:ad:c6:75:a1: a1:b6:a2:46:6d:b4:32:4e:f3:60:3e:8a:85:b9:71:ad:f8:2c: 53:24:4a:2a:e1:4b:4c:5f:79:4d:ff:34:8c:6d:09:d4:a2:31: fb:a0:e2:cb:b5:23:d3:e4:d4:bb:f1:5c:c9:28:0b:5e:10:42: b5:fb:4d:c7:e9:29:8b:64:13:d7:7b:66:83:1e:51:1c:0c:65: 15:97:65:19:2a:9a:e5:be:ad:22:13:37:54:31:59:bf:c5:c3: 1c:c2:22:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwOTI1MDAxNTQ2WhcNMjYxMDAyMDAxNTQ2WjAYMRYwFAYD VQQDEw02YWI1YmQzMi01MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T5svma3pXY8cG32IgCiHLpGkf1mc7k5IJhslrVONtk73TkoLr61GTREBd3I WCDzpJUiTdXBoBBidE9Og7E0GDSKatgumNYzNX3MH3Bj4STCBknlAxMh3+SK3/0h NlZ8pJAVC8UyeH9U60f9keV4Dgy+p+3GG6n8c+aNebPsy1erLeo5n5cuP58ECdYI dt+clsEX/RTzRLFtR0FJOEKLfE2Se9R1b3+1wkf/YlKHIIpfvqkqmPMacUWzR/nP NWtaMHrXGNFyU2uKoaRVBtHzHCfaAmOSTqAaO1ZCstnQxoRaMmb54PPItBxjbHfI 0QOhV0XxKlTafCVoNeHHJQOjfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDUHoQh SioDEy8mtcXRtvOnTP+tMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyJymaaiMlk1hzfih3e4F6Yf2cX9LoZv5NguU0s4ntdyH6H/0zpY5mKmy7wTV lbIhzJLK4ywIxIsr4xtZN8idjgUmMcgTq+taxM78WbGLBFJqMuxX/GWSAEcn28hH dde7tAGRlhcV2d65O4ZzdDXt0ddtuF73iWC/rBqwN/38KRiz9ulKoTHv2nWCTozJ dthTsD6CNJrHfXM1nLStH3KtxnWhobaiRm20Mk7zYD6KhblxrfgsUyRKKuFLTF95 Tf80jG0J1KIx+6Diy7Uj0+TUu/FcySgLXhBCtftNx+kpi2QT13tmgx5RHAxlFZdl GSqa5b6tIhM3VDFZv8XDHMIiZA== -----END CERTIFICATE-----Generated at Sat Sep 26 14:02:20 2026 by rpki-client