$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: XEFy0t54dcfO2vXD4lP6rEf+0M2mdBU5Yk0uSF5bHYY= Subject key identifier: 21:1D:FF:27:5C:17:65:EF:8E:95:EB:C5:5A:D9:C1:2C:C8:F0:C8:8B Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: 0158 Signing time: Wed 05 Nov 2025 04:18:49 +0000 Manifest this update: Wed 05 Nov 2025 04:18:49 +0000 Manifest next update: Wed 12 Nov 2025 04:18:49 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: N9ok3tPdDic6rrj3KUOTxIYjGnHD8J3DJV5q14Fh/9k=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Nov 5 04:18:49 2025 GMT Not After : Nov 12 04:18:49 2025 GMT Subject: CN=690ad029-3388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:72:15:75:6b:16:06:4d:cb:c4:ee:e0:33: ea:2a:2a:63:1b:c6:08:4d:78:59:67:98:0d:56:e6: 41:a7:b1:af:2d:14:97:85:71:bc:66:c3:aa:79:76: f3:a0:1f:84:62:bd:b3:4e:5a:d0:3d:f6:79:18:b3: c1:a2:52:2b:91:2a:a3:dd:ea:fa:0b:84:32:a1:aa: 38:ec:39:f9:d3:fc:29:43:d1:81:c7:80:07:45:99: 1e:a6:c5:1a:ff:55:6a:6c:e8:15:f9:20:e0:dd:5c: 7d:90:f4:4d:3b:40:e7:05:79:52:48:59:76:38:79: fc:f7:63:48:58:de:e4:17:fe:c3:39:06:7d:93:d6: c5:8c:c6:7e:2e:49:15:f6:34:47:6c:6e:3d:38:eb: f0:c9:44:d8:24:e0:75:b7:f2:fe:cd:2a:93:e3:1b: 0a:2f:53:0a:6f:78:b4:2c:e8:a9:f3:90:d2:60:33: ff:c0:6f:63:5b:bf:b6:bf:27:86:76:a3:b8:7b:ee: 6a:de:62:08:da:f5:94:1e:37:a2:0e:95:2c:ae:18: ac:fa:d1:8f:5d:c0:58:b3:b0:35:be:1b:a8:b3:2f: e2:9c:69:c7:30:55:b2:1f:77:fd:0e:d8:a6:7d:a9: 12:df:d4:9d:37:20:17:3f:5b:40:cd:91:3d:10:c6: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1D:FF:27:5C:17:65:EF:8E:95:EB:C5:5A:D9:C1:2C:C8:F0:C8:8B X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:55:81:26:71:27:c8:33:64:ac:8f:48:61:e5:22:24:4e:55: f2:81:b2:58:51:6d:cd:25:88:0f:01:27:c8:0d:1a:68:aa:2f: b1:c5:58:d3:7f:31:00:36:14:f7:98:57:19:d8:d3:40:da:ba: 98:5e:63:94:d4:db:0b:b4:e9:7f:f2:8c:98:2d:f9:43:73:aa: 03:df:ea:f7:73:34:74:ef:d9:14:b4:8b:19:f1:a8:fa:80:20: b1:50:5d:9c:a9:92:7c:86:2d:cf:67:4a:28:b3:72:c7:18:d4: 53:45:43:d8:9c:b2:94:b9:30:a3:c7:96:60:5b:aa:00:be:f5: 5a:e2:b2:5f:b5:6f:8e:f1:d6:79:6c:48:0c:df:39:38:5b:59: 8a:93:ec:a7:24:ed:9d:81:3f:e3:4f:83:7b:96:83:27:05:50: ba:60:ec:d3:b7:48:28:73:fb:7f:05:c6:01:df:81:0f:bb:7a: f0:ce:77:82:39:ad:f9:e4:36:c7:75:0e:d4:25:c7:26:66:94: ac:4c:31:c7:a4:0f:04:ca:cd:9c:5c:02:58:46:61:c6:a4:ad: 8f:2d:3c:f3:1b:30:07:e9:f4:e9:01:9a:3d:cd:ff:08:c1:ed: 77:b0:a9:79:2a:46:ee:b5:0b:07:a7:f9:66:ee:57:fd:55:5d: 8d:8c:de:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUxMTA1MDQxODQ5WhcNMjUxMTEyMDQxODQ5WjAYMRYwFAYD VQQDEw02OTBhZDAyOS0zMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN9yFXVrFgZNy8Tu4DPqKipjG8YITXhZZ5gNVuZBp7GvLRSXhXG8ZsOqeXbz oB+EYr2zTlrQPfZ5GLPBolIrkSqj3er6C4Qyoao47Dn50/wpQ9GBx4AHRZkepsUa /1VqbOgV+SDg3Vx9kPRNO0DnBXlSSFl2OHn892NIWN7kF/7DOQZ9k9bFjMZ+LkkV 9jRHbG49OOvwyUTYJOB1t/L+zSqT4xsKL1MKb3i0LOip85DSYDP/wG9jW7+2vyeG dqO4e+5q3mII2vWUHjeiDpUsrhis+tGPXcBYs7A1vhuosy/inGnHMFWyH3f9Dtim fakS39SdNyAXP1tAzZE9EMYplwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEd/ydc F2XvjpXrxVrZwSzI8MiLMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZVYEmcSfIM2Ssj0hh5SIkTlXygbJYUW3NJYgPASfIDRpoqi+xxVjT fzEANhT3mFcZ2NNA2rqYXmOU1NsLtOl/8oyYLflDc6oD3+r3czR079kUtIsZ8aj6 gCCxUF2cqZJ8hi3PZ0oos3LHGNRTRUPYnLKUuTCjx5ZgW6oAvvVa4rJftW+O8dZ5 bEgM3zk4W1mKk+ynJO2dgT/jT4N7loMnBVC6YOzTt0goc/t/BcYB34EPu3rwzneC Oa355DbHdQ7UJccmZpSsTDHHpA8Eys2cXAJYRmHGpK2PLTzzGzAH6fTpAZo9zf8I we13sKl5KkbutQsHp/lm7lf9VV2NjN7a -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:40 2025 by rpki-client