$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft File: w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json) Hash identifier: kjthlnC0UGD9dMIFDAb+3nxXcHLNvTKFJj9nTcoh3BY= Subject key identifier: 72:0B:FD:F1:0F:F4:FA:85:D8:7B:CE:0C:B2:47:82:5C:94:E0:24:61 Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft Manifest number: 0150 Signing time: Wed 05 Nov 2025 04:25:10 +0000 Manifest this update: Wed 05 Nov 2025 04:25:10 +0000 Manifest next update: Wed 12 Nov 2025 04:25:10 +0000 Files and hashes: 1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: e+vSDWjNjh6GlYhdf0pl4q4ZegHOnm85CU4HZfubBXQ=) 2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: pN1OWdiGw4OEkjeO/p/GHkPUsCswdzeq2aXMmLYYqcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Validity Not Before: Nov 5 04:25:10 2025 GMT Not After : Nov 12 04:25:10 2025 GMT Subject: CN=690ad1a6-ecc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:d7:5a:c7:ad:b1:d3:af:b5:60:0e:fc:81: 78:da:39:9b:0a:e6:b1:3c:0d:1e:49:b8:90:15:6b: 37:6c:9c:95:98:98:ab:40:8b:a1:6e:6f:1d:1a:ba: fa:c6:4a:a3:80:8b:e0:94:67:c5:70:4a:04:ba:56: 28:ee:e3:b8:86:d1:cb:4c:36:fe:96:99:95:a9:56: 01:56:9a:b8:1c:c6:97:69:a8:60:64:2a:ae:2a:ff: c6:df:fd:b1:36:f0:1f:e9:43:fd:89:41:ad:0b:86: 9a:81:22:fa:e7:ad:d3:0f:e8:f6:7d:af:fa:08:10: 25:29:32:d6:9b:c5:3b:33:8f:bc:63:5f:02:d1:25: 9c:c7:81:1c:fc:68:56:cf:69:ed:e3:f7:fd:6b:5a: 8b:0c:f2:04:73:70:a5:3a:d4:c8:51:9a:1d:13:25: 4e:3f:16:1f:9d:0e:8d:92:c5:a2:cb:d7:7e:83:2f: d5:a8:37:2a:8a:57:30:96:12:55:9a:d4:25:f3:b8: 12:13:32:aa:ab:5e:98:d0:bc:0e:8c:f0:27:d0:a8: 28:12:cd:ea:cb:60:3a:bd:48:55:82:ce:0a:10:de: 2f:04:a9:9d:af:b9:ac:de:17:fd:47:5f:66:fc:0e: 43:48:f1:07:b0:9c:1d:bf:6f:c0:64:ff:bf:af:e4: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0B:FD:F1:0F:F4:FA:85:D8:7B:CE:0C:B2:47:82:5C:94:E0:24:61 X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f5:2c:89:1a:5e:b8:f0:25:7d:bf:61:98:5f:32:b4:ac:30: ce:fb:9f:cb:f0:19:cf:46:a7:ff:e9:42:9b:89:fd:fe:9c:7b: a3:cb:73:a2:8f:61:3a:0a:69:93:33:9e:7a:36:37:6d:1f:1a: fc:0d:48:4f:42:99:7d:3f:23:8a:84:0c:08:b3:29:53:b9:19: 1c:ee:1c:f0:c9:68:07:5c:62:f6:4e:4c:c7:ac:17:8b:5c:34: bd:76:3a:93:3d:a8:d9:eb:b4:3f:20:8c:06:74:89:56:86:6e: 29:e5:96:b3:6f:99:ee:59:b6:64:f0:be:bc:48:07:4b:34:8f: b7:2a:7d:27:f8:85:81:0b:63:2f:e4:68:ad:61:48:38:28:04: fa:e2:cb:aa:fa:05:d5:1f:c9:f3:b9:a5:fb:e8:4b:d9:d2:30: f7:3f:0b:db:89:51:bb:5e:cd:5a:85:bd:f2:5d:6e:2a:8c:e1: 9a:03:a0:6c:bc:22:db:09:c9:33:cd:f2:22:02:62:75:f0:17: bb:ad:e0:92:52:e9:95:a2:05:93:63:c6:79:87:09:7f:a8:b5: 66:cb:6f:14:ad:90:9c:0d:7e:63:a0:63:6c:bf:99:3d:8c:c9: ab:23:b7:a1:1d:4a:bf:76:bb:c3:10:a8:a2:a7:d0:64:23:9f: b7:91:f9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz NkVBNDVCN0QwHhcNMjUxMTA1MDQyNTEwWhcNMjUxMTEyMDQyNTEwWjAYMRYwFAYD VQQDEw02OTBhZDFhNi1lY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjzXWsetsdOvtWAO/IF42jmbCuaxPA0eSbiQFWs3bJyVmJirQIuhbm8dGrr6 xkqjgIvglGfFcEoEulYo7uO4htHLTDb+lpmVqVYBVpq4HMaXaahgZCquKv/G3/2x NvAf6UP9iUGtC4aagSL6563TD+j2fa/6CBAlKTLWm8U7M4+8Y18C0SWcx4Ec/GhW z2nt4/f9a1qLDPIEc3ClOtTIUZodEyVOPxYfnQ6NksWiy9d+gy/VqDcqilcwlhJV mtQl87gSEzKqq16Y0LwOjPAn0KgoEs3qy2A6vUhVgs4KEN4vBKmdr7ms3hf9R19m /A5DSPEHsJwdv2/AZP+/r+T+mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIL/fEP 9PqF2HvODLJHglyU4CRhMB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA3MC84MDhCNEQ2Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01 RkZibHpDTVhKSXMyNmtXMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+9SyJGl648CV9v2GYXzK0rDDO+5/L8BnPRqf/6UKbif3+nHujy3Oi j2E6CmmTM556NjdtHxr8DUhPQpl9PyOKhAwIsylTuRkc7hzwyWgHXGL2TkzHrBeL XDS9djqTPajZ67Q/IIwGdIlWhm4p5Zazb5nuWbZk8L68SAdLNI+3Kn0n+IWBC2Mv 5GitYUg4KAT64suq+gXVH8nzuaX76EvZ0jD3PwvbiVG7Xs1ahb3yXW4qjOGaA6Bs vCLbCckzzfIiAmJ18Be7reCSUumVogWTY8Z5hwl/qLVmy28UrZCcDX5joGNsv5k9 jMmrI7ehHUq/drvDEKiip9BkI5+3kfm0 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:01 2025 by rpki-client