$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: 8FohLcXqywC+5cqZRoz2RV9DTQiQrgyCgITr7Ttzi7M= Subject key identifier: F0:42:A6:4D:83:75:5A:BC:B5:80:C1:F9:56:2D:44:73:4D:BD:0A:A9 Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: B1 Signing time: Wed 05 Nov 2025 06:18:52 +0000 Manifest this update: Wed 05 Nov 2025 06:18:52 +0000 Manifest next update: Wed 12 Nov 2025 06:18:52 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: Y3aN2WwjjKHBOcfxjT89G4AdhU91Nd9xTnefI0NvMFI=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: Nov 5 06:18:52 2025 GMT Not After : Nov 12 06:18:52 2025 GMT Subject: CN=690aec4c-ff58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:00:10:54:76:9e:24:b6:5a:49:29:20:94: aa:22:73:cc:54:0a:42:bf:a8:86:17:9e:19:fc:4a: 73:99:a8:73:22:43:f1:45:87:17:39:16:d5:4b:c8: a3:48:13:ff:92:2c:fb:7a:87:f2:79:fb:0d:a0:5b: 8a:29:ef:a8:b0:35:ea:ca:94:ab:80:2d:8c:6c:dd: 9c:9c:6c:97:dc:1e:f5:ff:3f:56:0f:7c:6d:e9:c0: a3:13:2d:e9:3c:2a:59:36:ae:f0:a6:c4:b6:8b:e0: bd:39:8f:8a:bf:41:09:c2:8a:d9:5f:08:2e:89:80: 1c:8e:56:21:dc:57:e5:c8:35:bb:d5:45:46:fe:01: e4:ce:66:af:e6:e4:ad:8f:b5:5c:6b:cb:d9:4c:d8: 10:d9:88:fb:24:5f:db:f7:1a:7f:a4:e1:2c:54:b6: 95:22:ab:d9:9e:4b:dc:5f:7c:11:d5:36:f4:ac:5f: e5:61:ca:c3:4b:8c:50:1b:4c:b6:d4:6a:61:aa:db: 29:18:af:e4:ca:7b:4b:9f:f2:47:59:a2:cf:b6:36: 0a:6a:cf:30:e2:3c:20:5d:fb:e5:40:83:aa:7e:58: c6:b4:c3:0e:e3:82:32:3d:7e:25:4c:f3:d6:f5:e5: e0:1e:59:57:63:14:22:46:20:22:dd:92:d2:b5:4e: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:A6:4D:83:75:5A:BC:B5:80:C1:F9:56:2D:44:73:4D:BD:0A:A9 X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:27:3e:23:3a:05:c5:8b:68:0e:21:cc:f9:6b:1e:20:5f:6b: be:58:a6:67:45:81:02:36:0a:c8:43:e0:0c:8e:1b:46:d4:58: 11:f4:00:48:89:69:6f:e4:fe:e1:65:cc:58:cb:52:6b:a0:cd: ca:0b:b3:de:33:54:8b:e3:7f:5f:da:54:72:16:76:2e:08:7d: 5d:34:ca:8b:b3:28:27:a8:8b:9d:b1:63:d6:2e:85:13:b8:89: 0a:53:0b:33:73:3d:01:2f:6a:5f:34:4b:b5:3e:87:55:18:f1: da:79:0f:73:a8:83:77:2c:40:c8:7f:46:7a:f1:99:47:2e:ba: 0c:e1:94:a7:b7:fa:96:5f:b6:2b:cc:1b:b2:7e:5a:9e:bb:7a: a3:ba:94:07:d0:ee:cd:a8:71:42:54:50:9e:5b:fd:11:a9:27: 63:ec:84:b4:5a:e5:84:56:be:ad:32:54:8e:51:61:a3:59:22: 86:d7:98:73:92:0f:83:d2:65:c2:67:6e:00:2a:28:ae:4c:04: 7c:ed:39:35:a2:9a:1f:bd:16:7b:2d:96:51:a0:cd:69:93:d8: 80:93:96:13:ff:71:2d:5a:87:e5:3c:48:8f:bf:98:19:05:dd: 7c:f5:15:85:ad:cd:a7:d5:a7:88:df:84:74:ce:20:6f:d2:49: 3a:78:00:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKEIwMjc5NUQyRTA5RTNBQUEzRTM2RDJCNTkyRDJFMEU5 RkJCN0VGQkQwHhcNMjUxMTA1MDYxODUyWhcNMjUxMTEyMDYxODUyWjAYMRYwFAYD VQQDEw02OTBhZWM0Yy1mZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3cAEFR2niS2WkkpIJSqInPMVApCv6iGF54Z/EpzmahzIkPxRYcXORbVS8ij SBP/kiz7eofyefsNoFuKKe+osDXqypSrgC2MbN2cnGyX3B71/z9WD3xt6cCjEy3p PCpZNq7wpsS2i+C9OY+Kv0EJworZXwguiYAcjlYh3FflyDW71UVG/gHkzmav5uSt j7Vca8vZTNgQ2Yj7JF/b9xp/pOEsVLaVIqvZnkvcX3wR1Tb0rF/lYcrDS4xQG0y2 1GphqtspGK/kyntLn/JHWaLPtjYKas8w4jwgXfvlQIOqfljGtMMO44IyPX4lTPPW 9eXgHllXYxQiRiAi3ZLStU7TlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBCpk2D dVq8tYDB+VYtRHNNvQqpMB8GA1UdIwQYMBaAFLAnldLgnjqqPjbStZLS4On7t++9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8zNzMzNEJFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9xby1OdEsxa3RMZzZmdTM3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8zNzMzNEJFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9x by1OdEsxa3RMZzZmdTM3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeJz4jOgXFi2gOIcz5ax4gX2u+WKZnRYECNgrIQ+AMjhtG1FgR9ABI iWlv5P7hZcxYy1JroM3KC7PeM1SL439f2lRyFnYuCH1dNMqLsygnqIudsWPWLoUT uIkKUwszcz0BL2pfNEu1PodVGPHaeQ9zqIN3LEDIf0Z68ZlHLroM4ZSnt/qWX7Yr zBuyflqeu3qjupQH0O7NqHFCVFCeW/0RqSdj7IS0WuWEVr6tMlSOUWGjWSKG15hz kg+D0mXCZ24AKiiuTAR87Tk1opofvRZ7LZZRoM1pk9iAk5YT/3EtWoflPEiPv5gZ Bd189RWFrc2n1aeI34R0ziBv0kk6eAD9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:57 2025 by rpki-client