$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: RBNAofOlTPrG/364udZw3ZBShZxCw81404p5QQ6FGU0= Subject key identifier: 0E:37:4F:F2:A5:20:C4:CB:C9:27:E0:47:05:2B:E3:44:C2:A8:6F:C8 Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1C25 Signing time: Tue 04 Nov 2025 16:19:38 +0000 Manifest this update: Tue 04 Nov 2025 16:19:37 +0000 Manifest next update: Tue 11 Nov 2025 16:19:37 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: SmMewNxA8w66yzmJW6Rq0LOsJl9YIZG6jsOLf+z39n0=) 2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=) 3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=) 4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7239 (0x1c47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Nov 4 16:19:37 2025 GMT Not After : Nov 11 16:19:37 2025 GMT Subject: CN=690a2799-8aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:a2:d4:d7:87:e1:17:d4:84:b9:a1:ea:57: ac:94:54:eb:3a:89:de:cd:66:0f:fb:c4:1c:90:91: 26:69:81:45:8c:26:40:4b:f7:56:00:bb:85:0e:2d: 6e:8c:b2:7b:9a:18:73:d4:32:b4:4e:f0:44:82:0f: 73:0d:31:18:8d:31:c8:9b:82:c3:9f:ba:fe:0d:24: d3:4c:96:e9:70:13:b5:41:f6:0d:52:9a:dd:b7:6c: 65:c1:2e:70:3a:3b:7e:81:a6:80:b8:50:0c:9b:73: aa:95:b9:7d:65:33:0f:bc:db:0a:37:8f:a6:56:27: d0:fb:d3:81:3a:42:14:7d:ba:7c:a4:4f:24:e2:90: d6:7e:b2:0d:e5:69:e1:04:79:b3:82:ee:a3:17:be: d7:f2:35:f8:84:40:6d:c1:f6:ff:22:34:14:83:34: e1:fc:0a:5e:be:6f:b0:5b:56:ad:5b:cb:af:25:ff: 51:bd:a4:ba:52:35:43:c1:00:c3:52:05:7b:e5:60: 08:2c:35:02:69:f3:cb:b9:95:52:6e:3c:7b:28:c4: 91:92:61:05:7f:45:15:9c:e3:04:4c:65:a5:8a:ea: 29:e1:71:c5:78:c2:e0:d8:41:7a:f2:c3:2b:bb:fa: aa:64:63:bf:68:11:25:46:f9:dc:7b:31:65:39:61: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:4F:F2:A5:20:C4:CB:C9:27:E0:47:05:2B:E3:44:C2:A8:6F:C8 X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c5:4d:37:63:02:b4:d6:bc:bf:d2:e9:11:76:03:91:95:f6: 96:69:e1:8d:a5:fa:30:86:4f:9f:a5:a8:e9:82:c0:a3:3c:e2: eb:1b:6f:62:4f:f8:54:d0:e8:f1:ac:80:9c:a2:8f:b1:65:6a: ec:bd:13:b2:d3:fd:c2:7d:3c:08:3a:d1:14:81:20:fe:29:4d: e0:1b:08:3c:ad:e4:ef:de:92:f5:87:c3:60:fd:b8:51:0d:1e: 85:3a:db:f9:10:df:5b:bf:36:19:a2:1f:c4:9d:5f:7f:5d:29: f6:f2:3a:ac:c5:f4:2e:8f:bf:65:0b:a9:92:12:a9:a4:ba:80: de:f3:01:57:20:b2:04:05:63:d0:5a:a9:64:ca:b2:88:bb:6d: 7a:64:cd:9a:7f:3d:22:51:36:45:aa:a2:39:20:8e:18:9b:b3: 04:5f:f2:af:4d:19:be:46:51:b1:95:0d:e9:0f:a8:ab:30:a8: c9:4f:57:0e:fb:59:2c:32:cb:c4:e4:4f:ae:66:28:d9:ef:5f: 25:05:3f:10:5d:9a:a1:85:51:c6:7a:2b:d9:da:24:6f:57:aa: d2:39:a2:6c:c1:08:4a:96:15:47:48:af:80:75:9b:47:fc:d9: 85:c7:43:ff:69:e6:a1:43:8b:c1:7d:61:86:49:5b:49:46:d2: 23:6c:51:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjUxMTA0MTYxOTM3WhcNMjUxMTExMTYxOTM3WjAYMRYwFAYD VQQDEw02OTBhMjc5OS04YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdyi1NeH4RfUhLmh6leslFTrOonezWYP+8QckJEmaYFFjCZAS/dWALuFDi1u jLJ7mhhz1DK0TvBEgg9zDTEYjTHIm4LDn7r+DSTTTJbpcBO1QfYNUprdt2xlwS5w Ojt+gaaAuFAMm3Oqlbl9ZTMPvNsKN4+mVifQ+9OBOkIUfbp8pE8k4pDWfrIN5Wnh BHmzgu6jF77X8jX4hEBtwfb/IjQUgzTh/Apevm+wW1atW8uvJf9RvaS6UjVDwQDD UgV75WAILDUCafPLuZVSbjx7KMSRkmEFf0UVnOMETGWliuop4XHFeMLg2EF68sMr u/qqZGO/aBElRvncezFlOWFIQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA43T/Kl IMTLySfgRwUr40TCqG/IMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvxU03YwK01ry/0ukRdgORlfaWaeGNpfowhk+fpajpgsCjPOLrG29i T/hU0OjxrICcoo+xZWrsvROy0/3CfTwIOtEUgSD+KU3gGwg8reTv3pL1h8Ng/bhR DR6FOtv5EN9bvzYZoh/EnV9/XSn28jqsxfQuj79lC6mSEqmkuoDe8wFXILIEBWPQ WqlkyrKIu216ZM2afz0iUTZFqqI5II4Ym7MEX/KvTRm+RlGxlQ3pD6irMKjJT1cO +1ksMsvE5E+uZijZ718lBT8QXZqhhVHGeivZ2iRvV6rSOaJswQhKlhVHSK+AdZtH /NmFx0P/aeahQ4vBfWGGSVtJRtIjbFH+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:56 2025 by rpki-client