$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: FNz/+kt2uSyy/lbBTVR1pawSTxKFnSaxS3Y7PsYmkkk= Subject key identifier: 57:F2:95:3B:56:27:13:15:1B:4C:A5:DB:F1:F4:BA:B5:81:48:5F:D2 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 18B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 18A1 Signing time: Tue 04 Nov 2025 16:34:20 +0000 Manifest this update: Tue 04 Nov 2025 16:34:19 +0000 Manifest next update: Tue 11 Nov 2025 16:34:19 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: rOmNVLsTjn1DZ/78UA2Otbt+BL9Sgpab0OAQpdkJDAA=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6322 (0x18b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Nov 4 16:34:19 2025 GMT Not After : Nov 11 16:34:19 2025 GMT Subject: CN=690a2b0b-3001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:d2:52:8b:8e:74:ea:2b:ef:15:fc:aa:8d: fc:d2:43:7b:0c:30:05:be:4d:03:e9:24:86:d9:ca: c5:3a:6d:38:75:f6:84:fe:42:30:55:7b:26:31:85: 40:aa:9f:37:50:e2:29:6b:42:63:94:92:8a:d3:d3: f1:12:dd:c1:09:fb:7e:3f:c3:ae:70:c7:10:58:e8: 73:ee:49:7f:b0:d8:fb:ed:95:7c:cb:7f:3b:41:28: b8:73:49:c7:e5:02:c8:1f:b7:c7:d6:cc:b0:b2:bb: 97:da:b9:89:7b:63:97:20:c5:52:db:73:aa:44:c1: 1b:b9:e3:93:bf:80:07:a3:77:26:2f:36:a4:c0:5a: bf:32:ba:00:11:ff:b1:21:bb:46:12:46:51:d3:0d: 36:47:97:fb:b1:41:57:4b:43:d0:e4:d3:b5:52:38: 35:95:31:29:2e:4d:38:08:4c:60:5d:c9:8b:41:03: 89:5f:64:51:0a:92:d8:ea:29:d4:67:ec:2e:05:0e: 5a:79:6b:cc:cb:ec:f4:bd:e8:49:b8:f8:25:60:b6: 5c:24:74:84:30:f4:53:b8:3c:06:18:a7:31:38:c2: b0:7e:b2:d0:37:6b:27:36:59:f7:6f:83:9d:e0:8a: 51:c6:58:cb:44:1e:1e:a1:d2:27:b6:db:2e:dd:d8: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F2:95:3B:56:27:13:15:1B:4C:A5:DB:F1:F4:BA:B5:81:48:5F:D2 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f6:f7:c4:75:21:08:88:cd:23:5a:11:59:83:e2:54:93:cf: 84:97:fe:06:75:51:86:cf:06:92:03:d2:21:1d:d5:9a:cf:51: c3:5c:82:0c:c5:da:64:32:8d:2d:94:ab:86:76:43:fa:ed:c6: c6:d0:d0:37:17:d3:e0:af:5f:8a:ae:ee:45:d1:58:72:5d:47: 80:9a:89:6b:41:a1:9b:5c:39:8a:52:3f:c1:e0:01:fb:da:5e: 65:9d:10:fc:65:33:9f:6b:6b:03:de:be:0f:a9:8e:1a:7e:b2: 4a:77:c6:28:cc:61:c9:2b:5e:59:29:35:c7:80:2c:64:0b:d6: 29:f0:22:24:97:db:4c:ad:4c:36:02:c8:58:12:fb:1b:d0:47: c6:f3:f5:71:a9:8c:35:31:45:ad:e3:58:cd:2c:1f:f6:67:7d: 19:16:35:28:a0:2b:9f:0c:1e:de:44:8b:41:fd:22:4c:49:6c: a9:1c:7c:c1:2e:74:9e:37:d3:47:5b:38:e3:e7:03:79:ac:96: d8:43:71:bf:5c:78:2c:a1:4e:7b:30:fe:db:f5:03:7a:1b:86: 03:ee:67:1c:38:17:97:de:48:87:9c:75:cf:81:51:5a:bd:85: 08:44:29:58:4d:dc:54:fd:0b:54:26:6f:99:64:63:18:60:3f: 03:fb:64:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUxMTA0MTYzNDE5WhcNMjUxMTExMTYzNDE5WjAYMRYwFAYD VQQDEw02OTBhMmIwYi0zMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllPSUouOdOor7xX8qo380kN7DDAFvk0D6SSG2crFOm04dfaE/kIwVXsmMYVA qp83UOIpa0JjlJKK09PxEt3BCft+P8OucMcQWOhz7kl/sNj77ZV8y387QSi4c0nH 5QLIH7fH1sywsruX2rmJe2OXIMVS23OqRMEbueOTv4AHo3cmLzakwFq/MroAEf+x IbtGEkZR0w02R5f7sUFXS0PQ5NO1Ujg1lTEpLk04CExgXcmLQQOJX2RRCpLY6inU Z+wuBQ5aeWvMy+z0vehJuPglYLZcJHSEMPRTuDwGGKcxOMKwfrLQN2snNln3b4Od 4IpRxljLRB4eodInttsu3djH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfylTtW JxMVG0yl2/H0urWBSF/SMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp9vfEdSEIiM0jWhFZg+JUk8+El/4GdVGGzwaSA9IhHdWaz1HDXIIM xdpkMo0tlKuGdkP67cbG0NA3F9Pgr1+Kru5F0VhyXUeAmolrQaGbXDmKUj/B4AH7 2l5lnRD8ZTOfa2sD3r4PqY4afrJKd8YozGHJK15ZKTXHgCxkC9Yp8CIkl9tMrUw2 AshYEvsb0EfG8/VxqYw1MUWt41jNLB/2Z30ZFjUooCufDB7eRItB/SJMSWypHHzB LnSeN9NHWzjj5wN5rJbYQ3G/XHgsoU57MP7b9QN6G4YD7mccOBeX3kiHnHXPgVFa vYUIRClYTdxU/QtUJm+ZZGMYYD8D+2QK -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:58 2025 by rpki-client