$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json) Hash identifier: Jj1kRe1hoZtcjSikn5nIe5pH5Kqf9imKBiJ3jpxkN+o= Subject key identifier: 5C:3F:AC:E1:67:C7:F8:69:1C:C9:FB:01:7B:14:C0:A7:46:42:E3:B6 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 1838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft Manifest number: 17C7 Signing time: Tue 04 Nov 2025 16:40:43 +0000 Manifest this update: Tue 04 Nov 2025 16:40:42 +0000 Manifest next update: Tue 11 Nov 2025 16:40:42 +0000 Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: U2p0DfLi5QPVUpHc+X0OXxpm+BrWkACvCLIbpgBL5mw=) 2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: l9PAtv4FmfKEbsr39kSblkIdk4l36jBShaU/yhiu3EA=) 3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: pRnYMFn3MsmdKZMCcupGBS8xip66wFsc4Vhu+CVQM8s=) 4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: Ki+ZYv+WbFodfUBA0Z9kcHIRNA0D2B2/Fqh0gMIddSg=) 5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: 1XIBkz1xrsmaIEUuPCKysFF+5jDC/AbJdnY6h8iCmzA=) 6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: hvb2MvDqDZHyf0+HzbtgqnM+oZrlIejX067xarW4vdo=) 7: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: Q50guEdFQrac2WGNIOWOMwAPEusnnVtr+0WbjS+0Iw8=) 8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: 6dC3vmSVGgmkSh9nUR6cyWb5UZYgtCMEtbXtHWZQ+Ms=) 9: 696975861A3611EEA597E872C4F9AE02.roa (hash: oIGClTM3lHim9PRA3fKoX8EMPndg1+r8p0Zu4BUJRhA=) 10: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: K/ybxERnMroT+/HivxwCKoEx2WZjUMXQikxQf2o4Wtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6200 (0x1838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: Nov 4 16:40:42 2025 GMT Not After : Nov 11 16:40:42 2025 GMT Subject: CN=690a2c8b-79d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:c5:52:7d:49:72:f1:e2:f0:14:63:e8:a1: 40:a6:29:58:9d:fb:2e:ef:c6:fe:34:a7:16:0b:63: d6:3b:30:af:5e:50:9b:6a:e5:a8:09:54:7e:80:2a: 51:bf:95:62:12:60:d5:b6:37:97:7e:86:97:44:35: 4e:b6:79:9d:33:e0:4f:05:ca:3e:77:75:b2:d7:6d: 00:60:28:7c:64:39:88:2e:41:ea:74:36:2c:73:ff: 0a:29:73:65:19:3d:d2:bd:8d:f3:0f:33:1f:51:a9: 97:d8:86:d2:c8:6b:a4:97:ac:16:29:70:be:34:53: 4b:91:65:5f:d2:c6:ae:91:61:32:8a:c0:5a:71:d4: d4:65:21:8b:a6:aa:39:f8:5f:7d:2e:bc:14:89:76: cb:4e:9b:37:10:cb:21:a4:4f:54:8d:54:4a:40:b1: ab:e4:69:c2:1d:db:30:88:04:b4:9d:14:e8:61:31: 8f:4a:c4:ce:c6:ea:94:fe:d2:fd:93:a6:44:08:ea: e8:c1:3a:9e:1e:a9:ef:a8:f9:4a:ea:79:a5:40:44: 62:a0:f0:75:98:d7:48:93:38:3e:d2:74:fd:dc:39: 57:ba:f6:f6:8b:a9:8d:83:21:20:fc:94:7f:90:ad: 93:52:d5:b2:22:b4:01:aa:48:ec:b9:89:3e:1d:0b: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3F:AC:E1:67:C7:F8:69:1C:C9:FB:01:7B:14:C0:A7:46:42:E3:B6 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f0:da:5b:90:2d:52:1c:c8:3b:ca:64:db:fe:3b:18:ae:17: f8:1b:53:04:c7:88:0c:5a:50:4f:9d:e3:14:ff:de:64:62:68: 25:ec:30:aa:f7:ef:e0:2d:ee:44:1c:cf:26:6c:68:85:c3:b2: 86:62:6e:b2:32:31:fc:71:67:5f:b7:12:70:4b:25:c0:a6:b1: ee:26:f2:5e:3e:b9:a4:1c:09:ca:58:9c:f5:8a:a1:7c:b2:65: 1e:2f:90:87:b8:67:11:6e:f7:1e:a3:66:8a:49:3a:5c:17:d8: 6a:cd:e0:00:ee:dc:de:6c:69:02:97:be:0f:79:a5:96:4b:61: 7e:c1:be:92:75:00:27:f2:96:72:ae:bb:27:3b:6d:b3:b9:37: 79:9a:9c:80:68:81:3e:4c:e0:83:3b:77:07:e0:ba:98:ec:46: 4b:48:07:54:e5:ce:92:13:96:1d:77:68:6f:ce:82:8b:bd:80: 39:1e:a6:aa:06:ac:b2:c4:e0:4b:86:8d:3d:9a:97:79:16:e2: 53:b0:83:19:45:35:e5:a5:83:01:b3:a6:91:ae:f2:f4:a4:14: 5d:68:22:2f:fa:3e:91:62:83:4d:f3:f2:8d:58:35:e7:e6:b1: 95:11:75:fe:78:b3:ba:96:b4:da:f2:66:3e:b9:8f:4a:77:90: a5:c4:98:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUxMTA0MTY0MDQyWhcNMjUxMTExMTY0MDQyWjAYMRYwFAYD VQQDEw02OTBhMmM4Yi03OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOLFUn1JcvHi8BRj6KFApilYnfsu78b+NKcWC2PWOzCvXlCbauWoCVR+gCpR v5ViEmDVtjeXfoaXRDVOtnmdM+BPBco+d3Wy120AYCh8ZDmILkHqdDYsc/8KKXNl GT3SvY3zDzMfUamX2IbSyGukl6wWKXC+NFNLkWVf0saukWEyisBacdTUZSGLpqo5 +F99LrwUiXbLTps3EMshpE9UjVRKQLGr5GnCHdswiAS0nRToYTGPSsTOxuqU/tL9 k6ZECOrowTqeHqnvqPlK6nmlQERioPB1mNdIkzg+0nT93DlXuvb2i6mNgyEg/JR/ kK2TUtWyIrQBqkjsuYk+HQvJIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw/rOFn x/hpHMn7AXsUwKdGQuO2MB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI8NpbkC1SHMg7ymTb/jsYrhf4G1MEx4gMWlBPneMU/95kYmgl7DCq 9+/gLe5EHM8mbGiFw7KGYm6yMjH8cWdftxJwSyXAprHuJvJePrmkHAnKWJz1iqF8 smUeL5CHuGcRbvceo2aKSTpcF9hqzeAA7tzebGkCl74PeaWWS2F+wb6SdQAn8pZy rrsnO22zuTd5mpyAaIE+TOCDO3cH4LqY7EZLSAdU5c6SE5Ydd2hvzoKLvYA5Hqaq BqyyxOBLho09mpd5FuJTsIMZRTXlpYMBs6aRrvL0pBRdaCIv+j6RYoNN8/KNWDXn 5rGVEXX+eLO6lrTa8mY+uY9Kd5ClxJgy -----END CERTIFICATE-----Generated at Tue Nov 4 20:05:24 2025 by rpki-client