$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: Hq5egF1A8rbiwggfHt1ZTPnbpkAeVGtBZi809JLgfYo= Subject key identifier: B0:2A:17:7F:14:D9:1A:72:B0:22:00:78:38:36:1E:F9:03:C5:05:04 Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: 0145 Signing time: Wed 05 Nov 2025 04:29:03 +0000 Manifest this update: Wed 05 Nov 2025 04:29:03 +0000 Manifest next update: Wed 12 Nov 2025 04:29:03 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: W9+b3Qgb2Moi3S3wxHP7aQhyRO7Wsro6O9/2N92tE88=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Nov 5 04:29:03 2025 GMT Not After : Nov 12 04:29:03 2025 GMT Subject: CN=690ad28f-c09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:49:10:43:6e:d8:5a:82:4a:49:fd:0c:61: 9b:94:05:56:b3:f2:d9:36:90:fb:b3:b5:82:01:9c: 20:e7:5c:d7:5a:fe:91:2f:e6:62:a0:3f:53:11:b1: 23:44:89:4a:3a:9a:11:a4:a0:f2:e6:15:6c:2f:d1: 0c:87:2c:77:af:41:37:2f:b4:02:64:ea:21:9b:45: bc:41:d8:71:15:46:40:6d:ab:f8:3e:8e:9b:3c:d0: d4:37:74:2f:ea:de:f5:60:97:d4:a6:4b:d1:ee:3a: c8:94:42:4b:4d:56:56:ab:8f:ea:fe:a9:76:cd:4d: 8e:c5:a6:04:3f:e9:a6:69:37:e3:64:a6:ac:f4:4e: 9b:df:76:ff:33:97:6a:d8:4d:e3:ce:4e:8c:c3:a2: 84:dd:a0:f6:52:7b:41:3d:3d:91:ac:2d:d6:79:80: 13:c8:32:5d:e2:09:88:15:57:28:36:48:60:01:93: 82:8e:d6:81:e6:9c:91:28:1d:b2:c0:13:4c:4f:ba: 2b:db:cb:db:eb:05:ab:5b:6c:fd:9b:34:ed:b8:4d: 61:10:d0:25:3b:9b:91:b0:a2:5b:2d:da:08:cc:1a: e0:d0:fe:23:7d:da:a0:25:24:43:0c:4c:79:38:c7: 74:fe:d0:e2:f4:e3:c4:03:6a:52:36:8f:1e:cb:5c: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:17:7F:14:D9:1A:72:B0:22:00:78:38:36:1E:F9:03:C5:05:04 X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:53:74:d7:c6:fc:a0:05:89:c3:e9:b7:58:d1:7b:58:80:17: bd:44:a3:11:81:41:dc:58:7f:a7:95:80:b6:04:e7:7a:bf:bd: 2d:57:37:6b:76:0e:6e:26:70:4e:b4:c0:3f:ae:9d:6c:36:82: a5:2b:6f:84:7e:ac:de:65:ca:d6:a9:c1:e2:3a:b4:6d:76:da: 56:8e:f4:ba:59:db:e9:e8:ba:0e:37:d0:1a:22:af:9f:5c:c4: 6b:58:a7:b6:bb:b1:15:70:40:72:b2:29:5a:f6:5a:0e:06:5d: da:1f:70:fe:29:dd:90:f3:ec:06:9f:47:bc:b5:86:80:f9:4d: 24:a7:16:69:27:61:56:c8:21:6a:88:cc:69:96:ce:71:46:aa: 66:ef:61:e4:83:0e:84:1a:7f:3d:f1:8f:20:ea:b0:88:09:a7: 71:4a:25:34:17:93:0e:82:55:92:98:fd:a8:52:78:8c:86:c1: bf:f3:0c:ac:91:21:7f:56:e6:01:56:49:4d:7e:67:4a:fd:76: de:21:c5:e8:75:77:29:4e:de:d1:ce:bc:5b:8f:c8:b0:d8:16: ea:b0:50:4d:39:f0:96:20:8f:c0:93:b9:91:7b:de:54:e6:66: b3:2f:af:5b:e8:93:9c:ee:10:d3:62:66:06:ab:da:13:55:0b: 1c:1f:7f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUxMTA1MDQyOTAzWhcNMjUxMTEyMDQyOTAzWjAYMRYwFAYD VQQDEw02OTBhZDI4Zi1jMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSFJEENu2FqCSkn9DGGblAVWs/LZNpD7s7WCAZwg51zXWv6RL+ZioD9TEbEj RIlKOpoRpKDy5hVsL9EMhyx3r0E3L7QCZOohm0W8QdhxFUZAbav4Po6bPNDUN3Qv 6t71YJfUpkvR7jrIlEJLTVZWq4/q/ql2zU2OxaYEP+mmaTfjZKas9E6b33b/M5dq 2E3jzk6Mw6KE3aD2UntBPT2RrC3WeYATyDJd4gmIFVcoNkhgAZOCjtaB5pyRKB2y wBNMT7or28vb6wWrW2z9mzTtuE1hENAlO5uRsKJbLdoIzBrg0P4jfdqgJSRDDEx5 OMd0/tDi9OPEA2pSNo8ey1winQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAqF38U 2RpysCIAeDg2HvkDxQUEMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbU3TXxvygBYnD6bdY0XtYgBe9RKMRgUHcWH+nlYC2BOd6v70tVzdr dg5uJnBOtMA/rp1sNoKlK2+EfqzeZcrWqcHiOrRtdtpWjvS6Wdvp6LoON9AaIq+f XMRrWKe2u7EVcEBysila9loOBl3aH3D+Kd2Q8+wGn0e8tYaA+U0kpxZpJ2FWyCFq iMxpls5xRqpm72Hkgw6EGn898Y8g6rCICadxSiU0F5MOglWSmP2oUniMhsG/8wys kSF/VuYBVklNfmdK/XbeIcXodXcpTt7Rzrxbj8iw2BbqsFBNOfCWII/Ak7mRe95U 5mazL69b6JOc7hDTYmYGq9oTVQscH3+9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:42 2025 by rpki-client