$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: DRtIfLQi3AxtlOJfu3iQfoSDwTRUoQxhlFJN0jDL8xE= Subject key identifier: EF:3C:EE:E0:37:1D:6A:0A:E2:71:26:4A:07:C2:E9:19:F0:26:72:74 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 0154 Signing time: Wed 05 Nov 2025 04:16:34 +0000 Manifest this update: Wed 05 Nov 2025 04:16:33 +0000 Manifest next update: Wed 12 Nov 2025 04:16:33 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: SRIN6gGtT+OyZxi2fZoZ2bFY4OkFQ84/iit0z62HB4U=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Nov 5 04:16:33 2025 GMT Not After : Nov 12 04:16:33 2025 GMT Subject: CN=690acfa1-5a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:92:ca:5b:64:8a:4b:18:b2:ba:c1:4a:a2: 57:08:6d:68:53:10:a0:32:33:79:ff:47:a1:70:26: 14:bd:80:7d:43:39:13:4f:cf:89:f2:aa:86:89:f1: a2:77:d1:63:5b:94:08:b1:3a:8f:06:52:d9:3e:c8: 28:aa:da:0c:95:ea:f0:d0:73:09:92:f8:b0:c6:27: 85:0c:9d:a9:64:71:12:cd:a6:77:c6:55:bc:20:62: d5:13:c3:6f:3d:f5:e1:91:4e:b8:91:83:29:a8:a7: e8:09:39:4a:db:6b:01:5e:99:0e:70:c9:97:e0:20: d9:0c:11:d1:d4:0e:01:83:c0:25:92:29:05:ac:97: bd:c4:9a:8c:ff:ae:0c:13:17:ed:d7:84:ba:16:0f: 43:eb:86:42:a3:93:8e:31:a8:f5:36:f1:09:e7:8b: 87:df:97:d8:84:d3:4b:93:35:79:8e:2b:5a:5b:6e: 1f:6d:4a:45:cc:d6:4f:3c:84:22:51:b0:1b:38:d7: 5f:57:2f:44:99:16:0e:68:c1:fc:7a:c7:c9:e2:7a: 26:e3:6d:4b:89:0e:a4:27:28:7f:b3:24:b2:5c:9c: 8f:92:ff:c7:d5:cf:35:49:7a:da:9e:f5:49:f9:36: c0:5f:27:4d:e4:d5:20:ab:ac:6a:2a:c6:a1:d4:b2: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3C:EE:E0:37:1D:6A:0A:E2:71:26:4A:07:C2:E9:19:F0:26:72:74 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5f:fb:36:c0:a0:91:9a:3a:b3:73:dd:5e:3b:64:c0:61:51: 5b:ca:ed:8d:40:57:f3:b8:21:4b:d8:67:32:87:83:d1:6d:4d: 74:92:79:8c:0d:8c:58:22:bf:dd:bd:56:48:02:5c:9d:8c:12: 36:9a:36:11:23:01:44:f5:bc:f9:74:87:05:ad:92:5d:32:81: fc:70:5a:3f:5a:1f:f2:f1:4e:b1:c5:2d:8a:93:f6:09:c0:59: ae:bb:b3:61:ac:8c:9a:72:c4:e1:ba:db:0b:61:b0:8d:4b:b2: fa:1b:8c:ca:2e:f1:dd:6a:cb:8f:9d:ae:db:45:a5:87:6a:e4: 99:a8:83:89:0c:7c:43:63:cd:4d:e9:68:c6:85:1b:9c:d8:18: 46:14:ab:fc:52:69:f3:7b:7b:3b:c3:0f:b6:bd:3b:e4:e6:59: 2d:dd:93:c6:57:70:0f:90:1d:95:da:79:56:99:87:32:c7:bd: e2:03:af:b5:fc:1e:dc:69:47:7a:3a:dd:17:a5:1b:9d:06:41: 5b:ff:8a:f4:e4:96:90:ec:21:fb:50:e0:cd:03:97:c3:ab:c3: 5f:e6:61:7c:b1:4a:e2:e7:47:74:3b:3e:35:bc:54:bb:29:eb: e0:cb:98:89:3d:63:5a:a0:74:da:32:6d:b3:72:c9:af:8a:93: 04:a8:b9:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUxMTA1MDQxNjMzWhcNMjUxMTEyMDQxNjMzWjAYMRYwFAYD VQQDEw02OTBhY2ZhMS01YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15KSyltkiksYsrrBSqJXCG1oUxCgMjN5/0ehcCYUvYB9QzkTT8+J8qqGifGi d9FjW5QIsTqPBlLZPsgoqtoMlerw0HMJkviwxieFDJ2pZHESzaZ3xlW8IGLVE8Nv PfXhkU64kYMpqKfoCTlK22sBXpkOcMmX4CDZDBHR1A4Bg8AlkikFrJe9xJqM/64M Exft14S6Fg9D64ZCo5OOMaj1NvEJ54uH35fYhNNLkzV5jitaW24fbUpFzNZPPIQi UbAbONdfVy9EmRYOaMH8esfJ4nom421LiQ6kJyh/sySyXJyPkv/H1c81SXranvVJ +TbAXydN5NUgq6xqKsah1LI+jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO887uA3 HWoK4nEmSgfC6RnwJnJ0MB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9X/s2wKCRmjqzc91eO2TAYVFbyu2NQFfzuCFL2Gcyh4PRbU10knmM DYxYIr/dvVZIAlydjBI2mjYRIwFE9bz5dIcFrZJdMoH8cFo/Wh/y8U6xxS2Kk/YJ wFmuu7NhrIyacsThutsLYbCNS7L6G4zKLvHdasuPna7bRaWHauSZqIOJDHxDY81N 6WjGhRuc2BhGFKv8Umnze3s7ww+2vTvk5lkt3ZPGV3APkB2V2nlWmYcyx73iA6+1 /B7caUd6Ot0XpRudBkFb/4r05JaQ7CH7UODNA5fDq8Nf5mF8sUri50d0Oz41vFS7 Kevgy5iJPWNaoHTaMm2zcsmvipMEqLm/ -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:10 2025 by rpki-client