$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: Lf5pZ4Bnh+OMAoZZcHlrcqB1L7RflEij4rRv0Ll9kYA= Subject key identifier: 1A:01:BE:2E:1D:75:B1:80:03:66:7C:DC:FF:96:2A:D3:55:02:D6:0D Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 02F9 Signing time: Wed 05 Nov 2025 01:19:32 +0000 Manifest this update: Wed 05 Nov 2025 01:19:31 +0000 Manifest next update: Wed 12 Nov 2025 01:19:31 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: OCrpO1pm5cecNVewNYsdjWH6Yv+pj8BGNDOkNHZrKC4=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Nov 5 01:19:31 2025 GMT Not After : Nov 12 01:19:31 2025 GMT Subject: CN=690aa624-10db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:ef:1c:11:0b:58:e4:d3:5d:c9:2b:ef:50: 4f:c6:90:a4:56:e2:d5:a6:42:01:f0:85:0f:75:e7: d7:ad:a0:b6:31:8d:9c:46:4c:6c:bb:e8:58:7b:d0: 50:eb:b4:32:7d:66:af:4c:af:35:d3:d4:a7:f2:68: 6f:ef:10:82:cc:2d:e0:3e:af:3f:aa:d2:31:04:b2: 4f:31:44:32:84:1a:01:45:1a:94:09:a2:a5:97:25: ff:c9:15:d5:e5:cd:65:94:46:1e:37:80:ed:28:3e: 40:e5:bc:a0:eb:91:05:5d:b2:5d:ed:b7:f8:39:2c: c8:38:03:43:60:b2:43:48:26:eb:f5:0a:9a:4a:89: aa:42:b4:1b:da:a5:a1:40:26:2c:7d:0b:e8:02:ac: 60:4a:17:f5:82:dc:84:ae:50:c3:88:b9:74:c9:d2: 8e:7a:76:15:1a:e5:df:b3:92:b2:a8:f4:4b:c6:49: cd:46:ec:1f:d1:fb:f3:da:f9:5e:de:02:0a:87:d4: 06:8f:e5:34:c8:dd:ad:da:90:3b:a9:24:29:75:fb: 70:94:64:36:ab:8d:08:f7:02:29:22:c9:c0:14:51: ea:02:22:60:72:04:2a:96:9e:10:cf:ea:9c:83:29: 9f:e2:16:0f:d5:30:63:47:91:9c:42:ca:f7:18:87: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:01:BE:2E:1D:75:B1:80:03:66:7C:DC:FF:96:2A:D3:55:02:D6:0D X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:49:13:a4:05:97:fc:c5:9e:54:f7:f1:18:87:24:11:f4:e5: c5:a2:af:16:0e:8f:95:01:b1:07:9c:9b:82:4e:c6:4d:4a:b5: 06:f7:53:71:c9:89:8e:d6:43:ed:35:06:68:5f:2e:7b:85:61: ca:31:85:f7:cc:10:6d:ae:8e:22:04:95:ce:6f:58:60:5f:12: cf:c7:08:84:6a:3b:93:d2:65:74:5b:fe:73:7f:37:0d:6c:24: 80:ba:54:5a:5a:cd:b1:4a:79:7e:80:f1:f1:13:10:b0:7c:be: 87:5a:d3:23:00:de:c3:2f:3b:0a:9a:8d:82:d0:ad:cd:9c:4f: 0e:7d:f3:44:d9:27:48:49:c7:8d:5b:64:f0:d7:7e:22:88:47: 33:e4:f4:3a:26:64:54:31:11:be:93:28:5a:be:66:08:b6:1a: bc:f6:90:11:83:37:cd:55:7a:b1:a6:9e:dd:ce:81:22:ae:d6: 5d:18:4f:46:80:a2:c5:44:d9:6b:ad:bf:ad:fe:62:ed:dc:37: 95:cd:60:18:af:f8:37:59:02:71:ce:ee:15:b9:85:ad:fb:63: 5a:4b:f8:f6:bd:5c:96:4d:aa:4b:66:38:f0:ae:d6:46:02:a5: 2d:5a:09:bb:7a:a5:69:06:e1:f1:69:e4:a9:1c:c4:07:5d:07: 7d:86:1f:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUxMTA1MDExOTMxWhcNMjUxMTEyMDExOTMxWjAYMRYwFAYD VQQDEw02OTBhYTYyNC0xMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFnvHBELWOTTXckr71BPxpCkVuLVpkIB8IUPdefXraC2MY2cRkxsu+hYe9BQ 67QyfWavTK8109Sn8mhv7xCCzC3gPq8/qtIxBLJPMUQyhBoBRRqUCaKllyX/yRXV 5c1llEYeN4DtKD5A5byg65EFXbJd7bf4OSzIOANDYLJDSCbr9QqaSomqQrQb2qWh QCYsfQvoAqxgShf1gtyErlDDiLl0ydKOenYVGuXfs5KyqPRLxknNRuwf0fvz2vle 3gIKh9QGj+U0yN2t2pA7qSQpdftwlGQ2q40I9wIpIsnAFFHqAiJgcgQqlp4Qz+qc gymf4hYP1TBjR5GcQsr3GIeTMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoBvi4d dbGAA2Z83P+WKtNVAtYNMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAySROkBZf8xZ5U9/EYhyQR9OXFoq8WDo+VAbEHnJuCTsZNSrUG91Nx yYmO1kPtNQZoXy57hWHKMYX3zBBtro4iBJXOb1hgXxLPxwiEajuT0mV0W/5zfzcN bCSAulRaWs2xSnl+gPHxExCwfL6HWtMjAN7DLzsKmo2C0K3NnE8OffNE2SdISceN W2Tw134iiEcz5PQ6JmRUMRG+kyhavmYIthq89pARgzfNVXqxpp7dzoEirtZdGE9G gKLFRNlrrb+t/mLt3DeVzWAYr/g3WQJxzu4VuYWt+2NaS/j2vVyWTapLZjjwrtZG AqUtWgm7eqVpBuHxaeSpHMQHXQd9hh/Y -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:29 2025 by rpki-client