$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: r723kyEvH9BqnzeCZkU9442EZft+59hSSa+eB2g1GBs= Subject key identifier: 1D:C7:05:EA:BC:D3:30:E1:7F:26:0E:C5:AB:43:C5:52:69:DC:FB:00 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 018E Signing time: Wed 05 Nov 2025 04:48:20 +0000 Manifest this update: Wed 05 Nov 2025 04:48:20 +0000 Manifest next update: Wed 12 Nov 2025 04:48:20 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: wulFrxpFz/RfkmmAvHieePsa5yRke1SHMZ83Gb9mo9I=) 2: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: XpEdNMaKGtUEN6hIgRHzqxQfHq0kQwSpdYHVdb7TK5A=) 3: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: 4jQKo5E0XfC+Bh102tpwq0SPDRbmpx2RDfSXwme/Vtk=) 4: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo=) 5: D1825C02598911F0848EA472C4F9AE02.roa (hash: 6FiZKuLIgUtIYIA1D6XNL/A4ah2P8QXaPUVRBeti7CE=) 6: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: M7jRTXUUxsXllPmDL18I1jFn9NqYlH0GKE7w5Dxvhe0=) 7: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0=) 8: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: nBxiatkIvna62kGHJDpRTxWGzVu/8J7M6fdEO+/Y3Ws=) 9: CBEC43BC932B11F08BD91747C4F9AE02.roa (hash: V+OUZSxYitOzVRYE726/EhLXKHzPEh6/R4A0AhCOdak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Nov 5 04:48:20 2025 GMT Not After : Nov 12 04:48:20 2025 GMT Subject: CN=690ad714-9266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:4d:e1:81:60:6e:98:7d:0d:94:04:2c:99: 05:fb:6c:a3:20:5f:fd:fb:56:64:b0:27:74:e5:4e: 2f:4b:5c:db:44:47:cd:43:e7:11:ec:14:c1:b0:5a: 33:a9:d9:12:a3:dc:d8:05:a4:a3:0d:01:23:d7:35: b5:1d:e7:47:fa:e7:95:8b:fe:73:b5:72:67:53:d9: 39:e6:80:ae:07:a7:7d:7a:64:93:19:68:35:b0:22: 0a:31:5a:bc:4f:4e:8e:68:2b:f4:2e:bd:bf:9f:67: b1:5b:e4:c1:c6:89:9d:90:02:17:29:19:62:0a:c2: 1d:b6:fc:ef:a9:8d:90:2c:9e:65:74:d9:05:f3:9c: e8:90:2e:37:b8:35:a1:65:30:43:06:7c:8d:cd:d4: 16:0d:d7:8d:58:2c:36:bb:27:4b:e5:2e:36:56:e7: 5c:19:3a:bc:a2:78:30:2f:ad:df:7c:93:35:72:39: 3d:25:ca:6d:6f:2f:58:94:b2:da:2b:9a:f7:6a:33: bd:9e:9e:c3:60:17:ea:fd:67:23:5a:80:7b:73:9b: 1f:73:0e:a2:f5:84:a0:74:30:0c:23:ea:be:ae:ee: 7f:15:00:1c:e3:6f:80:ae:8f:f9:e1:85:43:8a:9b: 1e:b6:cd:9b:85:8f:4d:2a:2d:1b:78:18:15:0f:09: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:05:EA:BC:D3:30:E1:7F:26:0E:C5:AB:43:C5:52:69:DC:FB:00 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a5:18:e5:ab:99:13:be:8f:9f:aa:d1:af:a3:29:03:e0:21: 73:a4:59:a0:72:32:96:3c:3f:70:f1:4b:a7:ca:2e:0a:f3:99: 39:29:b9:b3:fe:2f:4b:c4:99:a5:07:cc:75:b8:76:fb:30:6f: 18:c2:b6:7f:f5:0d:b8:d4:0a:13:5a:41:de:99:7a:56:8f:5d: 66:7f:e5:fe:4e:ab:30:a9:e3:9b:a2:8a:4b:fe:62:b6:6f:82: 84:49:81:25:28:1c:68:33:41:33:33:52:d5:60:d2:cb:dd:25: 06:93:2a:c7:52:d8:40:a0:ee:5c:1d:ba:f9:48:9e:91:bd:b3: 2f:33:93:2d:27:ef:76:54:1e:8f:24:07:a8:b8:5b:5b:12:87: 68:0e:22:f9:11:f3:52:36:46:ef:ae:e6:85:7a:74:d1:7d:49: 37:2b:20:cf:95:37:53:ef:c0:72:0d:c3:a7:87:69:a7:45:d9: 1c:76:e8:65:81:6a:48:12:42:5e:fe:cd:8f:78:48:34:28:aa: 53:6f:89:d9:5f:3a:0e:aa:05:b2:34:38:10:3b:2b:37:e2:f3: d6:5a:af:6c:29:92:70:18:e1:1f:37:4b:8f:2d:ab:fd:90:44: 41:84:06:92:9e:ae:4d:1f:0a:db:4e:01:59:cf:48:6a:ec:17: 2f:7d:a6:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUxMTA1MDQ0ODIwWhcNMjUxMTEyMDQ0ODIwWjAYMRYwFAYD VQQDEw02OTBhZDcxNC05MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv29N4YFgbph9DZQELJkF+2yjIF/9+1ZksCd05U4vS1zbREfNQ+cR7BTBsFoz qdkSo9zYBaSjDQEj1zW1HedH+ueVi/5ztXJnU9k55oCuB6d9emSTGWg1sCIKMVq8 T06OaCv0Lr2/n2exW+TBxomdkAIXKRliCsIdtvzvqY2QLJ5ldNkF85zokC43uDWh ZTBDBnyNzdQWDdeNWCw2uydL5S42VudcGTq8ongwL63ffJM1cjk9Jcptby9YlLLa K5r3ajO9np7DYBfq/WcjWoB7c5sfcw6i9YSgdDAMI+q+ru5/FQAc42+Aro/54YVD ipsets2bhY9NKi0beBgVDwlNFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3HBeq8 0zDhfyYOxatDxVJp3PsAMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAopRjlq5kTvo+fqtGvoykD4CFzpFmgcjKWPD9w8Uunyi4K85k5Kbmz /i9LxJmlB8x1uHb7MG8YwrZ/9Q241AoTWkHemXpWj11mf+X+TqswqeOboopL/mK2 b4KESYElKBxoM0EzM1LVYNLL3SUGkyrHUthAoO5cHbr5SJ6RvbMvM5MtJ+92VB6P JAeouFtbEodoDiL5EfNSNkbvruaFenTRfUk3KyDPlTdT78ByDcOnh2mnRdkcduhl gWpIEkJe/s2PeEg0KKpTb4nZXzoOqgWyNDgQOys34vPWWq9sKZJwGOEfN0uPLav9 kERBhAaSnq5NHwrbTgFZz0hq7Bcvfaan -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:43 2025 by rpki-client