$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: rVJhNbS+AENSJzHGNu0CW1kPpWnR0tj0oEmgh44gkZA= Subject key identifier: B1:9B:56:19:C0:EE:ED:4B:B3:EF:06:A3:57:AE:04:A2:39:C3:AC:B2 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 04:25:08 +0000 Manifest this update: Mon 03 Nov 2025 04:25:07 +0000 Manifest next update: Mon 10 Nov 2025 04:25:07 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: NlNya847b4k7ysOeL1spgWiBiP3fPCYQIOaAi+oHBmc=) 2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=) 3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Nov 3 04:25:07 2025 GMT Not After : Nov 10 04:25:07 2025 GMT Subject: CN=69082ea3-3a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:a0:bb:5d:89:ad:38:6a:c5:5b:37:86:59: 08:31:82:8c:0b:ef:02:50:60:80:d5:28:76:8e:a6: 44:ff:f6:7d:b5:d3:2d:be:81:5c:58:5c:3d:46:32: 78:03:ec:98:4e:5f:f5:c3:b7:88:c3:01:a3:7a:b9: 31:88:cb:4e:02:3c:ba:5c:f1:ae:a1:51:b0:72:08: fa:28:6d:45:98:2a:13:db:34:97:71:c5:d9:8e:3e: e1:a5:e9:5d:cf:91:38:27:14:69:4a:e0:d1:eb:2d: a6:74:c2:19:a7:b9:cc:14:33:7c:5c:b2:45:11:ba: e9:12:b7:84:b5:e3:c2:06:41:a9:aa:a8:45:34:a4: f3:81:74:e1:c1:d4:9f:df:83:c3:66:fe:94:87:f2: c4:71:ac:3e:f3:93:9a:db:ce:96:e3:72:9b:0d:ee: d5:ad:65:61:81:d7:83:e3:71:22:49:4a:87:02:52: 94:a4:90:85:26:8b:e3:49:c9:5f:a7:a1:cf:03:45: 80:95:94:73:39:7a:2c:e1:28:48:d7:54:47:40:bb: d2:01:99:43:84:59:ac:2b:b1:af:8d:66:7f:78:17: 13:6b:de:a5:4b:60:31:64:5c:49:be:6e:0c:2b:f2: 62:57:14:8a:37:ec:1f:45:d8:4e:ca:30:61:70:93: be:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:56:19:C0:EE:ED:4B:B3:EF:06:A3:57:AE:04:A2:39:C3:AC:B2 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c5:7b:12:67:48:10:15:f8:b9:f2:30:c0:14:85:db:91:ed: 74:cc:03:ea:4c:f0:cd:fe:bf:0a:ba:24:07:f6:9f:a9:10:7e: 55:0d:86:8e:75:b6:b5:88:9b:e3:46:fe:63:fc:3e:e9:ad:37: dc:67:f6:19:a3:a3:aa:c2:ee:fb:37:5a:8a:ba:89:fc:0b:02: 37:23:4e:4d:83:6d:de:06:08:f9:95:f9:4a:94:c3:af:6c:77: 9a:ab:04:ff:33:81:40:96:0e:31:5d:ff:26:a4:e2:eb:ea:54: 59:32:30:78:92:47:8f:fa:41:d6:a2:e6:99:90:1d:60:54:4a: 1a:6e:40:70:06:3a:df:7e:1a:f5:fc:71:bc:cb:b5:81:ed:f4: 78:4f:09:43:d3:08:b0:3f:6e:87:96:b5:7a:70:5b:08:29:cb: 7f:95:61:9c:2c:3c:9b:26:7b:4d:d4:5a:7d:2e:22:10:19:49: 52:0e:64:79:3c:7c:f8:ed:37:59:35:b7:50:e2:eb:c6:a5:f7: a0:a2:d9:fb:5e:33:45:b9:9b:46:5f:88:f7:a5:aa:2e:6c:e3: 41:43:2b:01:02:27:65:60:1c:6e:00:f2:6a:01:3f:06:42:e5: af:0c:09:00:8c:5f:41:9a:5a:eb:27:91:aa:d0:9c:83:96:07: 4c:9a:2e:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUxMTAzMDQyNTA3WhcNMjUxMTEwMDQyNTA3WjAYMRYwFAYD VQQDEw02OTA4MmVhMy0zYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7qgu12JrThqxVs3hlkIMYKMC+8CUGCA1Sh2jqZE//Z9tdMtvoFcWFw9RjJ4 A+yYTl/1w7eIwwGjerkxiMtOAjy6XPGuoVGwcgj6KG1FmCoT2zSXccXZjj7hpeld z5E4JxRpSuDR6y2mdMIZp7nMFDN8XLJFEbrpEreEtePCBkGpqqhFNKTzgXThwdSf 34PDZv6Uh/LEcaw+85Oa286W43KbDe7VrWVhgdeD43EiSUqHAlKUpJCFJovjSclf p6HPA0WAlZRzOXos4ShI11RHQLvSAZlDhFmsK7GvjWZ/eBcTa96lS2AxZFxJvm4M K/JiVxSKN+wfRdhOyjBhcJO+rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGbVhnA 7u1Ls+8Go1euBKI5w6yyMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh V0F5d0M4TWlJSW5FQklybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbxXsSZ0gQFfi58jDAFIXbke10zAPqTPDN/r8KuiQH9p+pEH5VDYaO dba1iJvjRv5j/D7prTfcZ/YZo6Oqwu77N1qKuon8CwI3I05Ng23eBgj5lflKlMOv bHeaqwT/M4FAlg4xXf8mpOLr6lRZMjB4kkeP+kHWouaZkB1gVEoabkBwBjrffhr1 /HG8y7WB7fR4TwlD0wiwP26HlrV6cFsIKct/lWGcLDybJntN1Fp9LiIQGUlSDmR5 PHz47TdZNbdQ4uvGpfegotn7XjNFuZtGX4j3paoubONBQysBAidlYBxuAPJqAT8G QuWvDAkAjF9BmlrrJ5Gq0JyDlgdMmi4w -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:50 2025 by rpki-client