$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json) Hash identifier: P1kmT4W/EAg0ftJzE6WoO+leCP6kzXMfA4IvlE6OCsw= Subject key identifier: 27:DB:B1:F7:21:17:95:FE:64:FB:8B:82:94:82:B6:39:F1:D0:2A:55 Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft Manifest number: 0146 Signing time: Mon 03 Nov 2025 04:24:59 +0000 Manifest this update: Mon 03 Nov 2025 04:24:58 +0000 Manifest next update: Mon 10 Nov 2025 04:24:58 +0000 Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: fmnwe4new0iYpm0vKpc6vhFA+D71KHJfOGLhrRtNM8k=) 2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: 0FUmFGEae/WI4oEvQ4bozFrCGWW/xCiGwTH0VQcaeIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Validity Not Before: Nov 3 04:24:58 2025 GMT Not After : Nov 10 04:24:58 2025 GMT Subject: CN=69082e9b-9030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:1c:2d:f5:6a:83:fd:ba:46:c7:30:fa:85: 33:56:40:11:e4:a0:d5:95:6a:19:ce:bb:82:ba:39: f3:b4:5c:37:6a:04:4d:3e:10:65:0a:d2:8f:d0:c4: 75:5b:eb:0d:29:1f:72:83:78:72:81:a4:5f:54:02: 49:0d:36:a5:8e:f5:d0:b2:70:dd:ed:e2:60:48:d6: b5:bc:08:ee:0a:42:c9:1e:ad:fd:6f:65:07:fe:40: e4:56:a4:f5:3f:fd:4f:89:42:ed:59:af:41:1b:01: 01:42:70:5b:fd:5b:59:a6:8a:92:a6:45:e7:56:25: 51:6a:a0:40:f6:3d:06:8a:a3:e3:b1:a5:3a:b4:06: 12:57:56:f0:04:7b:74:09:68:7e:af:31:08:5f:54: 10:d2:21:20:f3:83:40:6f:1e:8c:48:a1:5e:be:46: 6d:0f:11:6d:7b:a2:54:0e:25:cd:2e:4a:9f:10:ac: fc:5d:7f:4a:b0:ff:9a:44:7e:42:a5:24:5d:2f:c7: 45:ea:34:28:c5:81:54:30:bb:bb:81:45:13:4f:8c: 35:f7:08:67:9d:57:25:c3:3d:db:17:4d:8a:0d:b7: 38:68:36:37:e3:79:c8:85:06:91:28:8e:59:d4:df: e9:f6:1b:3a:bb:1c:89:8c:e5:ee:2c:a1:ac:1f:2e: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DB:B1:F7:21:17:95:FE:64:FB:8B:82:94:82:B6:39:F1:D0:2A:55 X509v3 Authority Key Identifier: keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:81:52:f6:bc:4b:6e:dd:da:39:71:54:72:7d:99:e2:69:b6: ad:9b:e0:0f:10:4f:50:29:13:1f:dd:a9:c8:cf:a2:96:b0:df: a8:79:27:af:f2:1f:4b:af:af:7d:fa:b6:de:82:76:d4:32:ce: 1d:58:42:7b:23:02:db:b0:ca:ff:4f:8a:a1:2a:2e:95:e1:6f: bf:7d:84:e1:9f:1e:5a:f1:3a:21:69:e7:79:76:f8:4d:df:b4: 6d:21:17:c1:03:19:42:44:ac:38:f1:ba:f9:2d:5e:3b:7d:96: eb:76:df:7f:e7:ff:d6:2b:76:c9:ef:55:56:0c:0c:ec:f6:55: 6c:de:42:e5:ae:f3:06:da:76:4f:d3:b5:ca:eb:28:a7:f1:54: 0e:97:19:44:d7:9a:7c:32:2e:a3:8b:a7:88:68:59:8b:50:f0: 79:68:7b:b6:88:92:7f:6b:4b:94:cb:99:b4:60:66:9d:be:c6: 16:89:71:7f:ab:49:3a:c6:52:5a:5b:16:11:5d:2e:c1:54:af: 4d:c0:61:4f:a1:59:60:c7:4e:d6:db:8d:69:2d:99:e0:ac:6b: b3:16:d0:5d:09:07:06:83:97:af:a7:53:bb:8f:16:ee:6d:22: 4d:ee:2c:e2:ab:f4:5c:f4:47:2f:f3:99:5a:16:93:12:78:75: 6c:3c:c7:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4 NjBDQzg1NkYwHhcNMjUxMTAzMDQyNDU4WhcNMjUxMTEwMDQyNDU4WjAYMRYwFAYD VQQDEw02OTA4MmU5Yi05MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aAcLfVqg/26Rscw+oUzVkAR5KDVlWoZzruCujnztFw3agRNPhBlCtKP0MR1 W+sNKR9yg3hygaRfVAJJDTaljvXQsnDd7eJgSNa1vAjuCkLJHq39b2UH/kDkVqT1 P/1PiULtWa9BGwEBQnBb/VtZpoqSpkXnViVRaqBA9j0GiqPjsaU6tAYSV1bwBHt0 CWh+rzEIX1QQ0iEg84NAbx6MSKFevkZtDxFte6JUDiXNLkqfEKz8XX9KsP+aRH5C pSRdL8dF6jQoxYFUMLu7gUUTT4w19whnnVclwz3bF02KDbc4aDY343nIhQaRKI5Z 1N/p9hs6uxyJjOXuLKGsHy7HyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfbsfch F5X+ZPuLgpSCtjnx0CpVMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr NjBvSmV5bTZWWGVHRE1oVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3gVL2vEtu3do5cVRyfZniabatm+APEE9QKRMf3anIz6KWsN+oeSev 8h9Lr699+rbegnbUMs4dWEJ7IwLbsMr/T4qhKi6V4W+/fYThnx5a8Tohaed5dvhN 37RtIRfBAxlCRKw48br5LV47fZbrdt9/5//WK3bJ71VWDAzs9lVs3kLlrvMG2nZP 07XK6yin8VQOlxlE15p8Mi6ji6eIaFmLUPB5aHu2iJJ/a0uUy5m0YGadvsYWiXF/ q0k6xlJaWxYRXS7BVK9NwGFPoVlgx07W241pLZngrGuzFtBdCQcGg5evp1O7jxbu bSJN7iziq/Rc9Ecv85laFpMSeHVsPMf+ -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:00 2025 by rpki-client