$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft File: wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json) Hash identifier: QdCOboc6WJ3WEJHFrVdPdwFNVyDo9tDe/ZAVccnBvd0= Subject key identifier: 59:D5:E9:D5:95:E5:7F:2E:95:BA:9A:70:2E:22:81:5E:90:40:39:03 Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D Certificate issuer: /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft Manifest number: 06D8 Signing time: Tue 04 Nov 2025 22:06:17 +0000 Manifest this update: Tue 04 Nov 2025 22:06:16 +0000 Manifest next update: Tue 11 Nov 2025 22:06:16 +0000 Files and hashes: 1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: FJ+F3PSIOF2PgfZZSO1IlajAd7Ak6C9L0FX7CW5JVfY=) 2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: 7I2G/hN0Fa3HUj7sGDHCqmaUYDxqe3fLWkw77NWZoq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Validity Not Before: Nov 4 22:06:16 2025 GMT Not After : Nov 11 22:06:16 2025 GMT Subject: CN=690a78d8-0f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:35:1b:cd:be:35:5f:09:12:9d:73:06:6c: dc:e2:8d:3e:71:1b:7b:4c:34:d6:fe:a8:64:b8:68: 90:7d:93:6d:e1:42:f4:96:72:b8:e9:70:1f:74:30: a6:90:a0:48:31:3f:72:4c:dd:cc:f1:19:3f:dc:fd: 8a:00:7c:fe:d4:61:6d:ab:d3:05:3f:8b:d7:4c:5c: 5c:69:96:c0:85:68:22:b2:0d:df:b8:b8:f3:0f:de: c9:89:e3:de:b1:f2:2c:81:7b:8d:42:d5:e7:5a:da: 3c:a4:1e:41:d8:b8:be:f7:23:d9:e8:8a:16:6c:54: a9:a9:5a:f8:73:0a:88:74:56:7b:7d:30:eb:f0:81: e3:9e:93:4b:5a:f4:41:d7:e9:a5:79:fe:30:44:da: e1:52:94:98:a2:32:7f:5f:8b:34:d4:8d:9e:35:c3: 96:b9:08:39:d5:11:92:88:b3:65:58:90:79:2c:6e: 39:7f:01:43:9e:9f:92:35:d6:93:19:c1:1d:42:68: 2e:a0:92:de:ec:e4:fd:98:76:48:23:38:8c:7a:3a: 41:7c:56:6e:c9:34:7c:f7:9e:53:a6:3b:ef:c5:c4: bb:a6:d8:c5:76:64:2e:ce:77:c8:6b:2c:d6:45:cc: c5:ae:b6:04:61:17:cf:8e:ee:87:a9:76:89:af:0f: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:E9:D5:95:E5:7F:2E:95:BA:9A:70:2E:22:81:5E:90:40:39:03 X509v3 Authority Key Identifier: keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9b:9a:f7:b6:13:46:b5:2f:93:60:44:48:06:3b:4f:d5:63: 6e:1e:59:72:f2:d9:da:90:65:ee:a7:19:99:59:de:b6:92:40: b5:2e:e3:ad:1a:5b:05:7f:77:6a:63:fc:28:1c:24:fd:d3:c5: eb:e9:60:19:5e:43:80:af:34:96:ab:05:9e:16:12:88:d3:e2: eb:0c:4b:dd:44:b8:3d:d7:2e:da:71:14:d3:8e:68:18:ef:aa: 1d:8b:87:9f:04:a1:a9:33:96:26:81:20:c5:69:b5:af:8e:2b: ef:eb:dd:51:a2:b3:75:44:4a:cd:4f:34:4a:46:3a:a5:da:45: 18:91:7a:2f:dd:5a:dd:f9:57:b1:a6:97:3d:69:f4:34:8e:42: bf:86:19:d3:51:b7:ea:94:d9:74:78:fc:43:70:0a:3b:06:16: 2a:ed:bd:1e:34:6c:0f:d8:c6:e4:08:a5:c6:1c:4d:9b:0d:79: e7:ab:ef:f2:a8:b8:84:3e:f7:50:d7:b6:fd:88:e7:f6:ce:d6: d6:4f:68:fa:ee:59:41:08:a9:4c:94:88:25:ad:58:ff:86:f4: 5b:2c:68:60:8b:6a:2c:93:1d:c1:f8:16:99:9a:6b:26:d6:d8: 45:50:6a:40:d5:e9:f2:0f:d1:7c:a9:76:d8:63:14:f3:71:98: 87:57:7c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBM0UxMTAvBgNVBAUTKEMxM0Q4RjgyQjNEM0NFNDc0NjUzNTQwRTUzNjVDNEM5 MDg5NEMwM0QwHhcNMjUxMTA0MjIwNjE2WhcNMjUxMTExMjIwNjE2WjAYMRYwFAYD VQQDEw02OTBhNzhkOC0wZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6M1G82+NV8JEp1zBmzc4o0+cRt7TDTW/qhkuGiQfZNt4UL0lnK46XAfdDCm kKBIMT9yTN3M8Rk/3P2KAHz+1GFtq9MFP4vXTFxcaZbAhWgisg3fuLjzD97JiePe sfIsgXuNQtXnWto8pB5B2Li+9yPZ6IoWbFSpqVr4cwqIdFZ7fTDr8IHjnpNLWvRB 1+mlef4wRNrhUpSYojJ/X4s01I2eNcOWuQg51RGSiLNlWJB5LG45fwFDnp+SNdaT GcEdQmguoJLe7OT9mHZIIziMejpBfFZuyTR8955TpjvvxcS7ptjFdmQuznfIayzW RczFrrYEYRfPju6HqXaJrw9XWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnV6dWV 5X8ulbqacC4igV6QQDkDMB8GA1UdIwQYMBaAFME9j4Kz085HRlNUDlNlxMkIlMA9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREEzRS80MjI2ODc0ODcz NDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHprZEdVMVFPVTJYRXlRaVV3 RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUMlBnclBUemtkR1UxUU9VMlhFeVFpVXdEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REEzRS80MjI2ODc0ODczNDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHpr ZEdVMVFPVTJYRXlRaVV3RDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUm5r3thNGtS+TYERIBjtP1WNuHlly8tnakGXupxmZWd62kkC1LuOt GlsFf3dqY/woHCT908Xr6WAZXkOArzSWqwWeFhKI0+LrDEvdRLg91y7acRTTjmgY 76odi4efBKGpM5YmgSDFabWvjivv691RorN1RErNTzRKRjql2kUYkXov3Vrd+Vex ppc9afQ0jkK/hhnTUbfqlNl0ePxDcAo7BhYq7b0eNGwP2MbkCKXGHE2bDXnnq+/y qLiEPvdQ17b9iOf2ztbWT2j67llBCKlMlIglrVj/hvRbLGhgi2oskx3B+BaZmmsm 1thFUGpA1enyD9F8qXbYYxTzcZiHV3wg -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:38 2025 by rpki-client