$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json) Hash identifier: b1+uKf5J3C9FSnC2+MxpWJOaGMMeVLjBzVGvlELljU4= Subject key identifier: 2D:1C:CE:8E:7A:F2:C6:DA:61:A4:62:F7:3F:5E:9A:0D:8E:F2:1C:F5 Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 18D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft Manifest number: 184F Signing time: Tue 04 Nov 2025 16:40:32 +0000 Manifest this update: Tue 04 Nov 2025 16:40:32 +0000 Manifest next update: Tue 11 Nov 2025 16:40:32 +0000 Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: jsgt26cllZmbjGBZmXjnUNZyfqZB+nV0azgKsrNeffk=) 2: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: jVYeb9g2m40LD4Q1oPGlGRKw/uMUZMJLfgY/Gg0QUQY=) 3: B5DB52CC9D1011F09A72EC59C4F9AE02.roa (hash: 9YSLoTRO4Ns8stByN7f/874px1/OEXnNV2wYXHHXF1I=) 4: EF885538C28B11EBBF310469C4F9AE02.roa (hash: RF/S4KRa0Daxc1wRMUy6rkjMc6TZCjTUC2lD+JidsGI=) 5: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: dGp7Ax6FXsyNirWLeSH+pdfHFVVCgwpUbTOMHSuAyCQ=) 6: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: pg4ZOtHk71fFYiWtwRC9KYE71kipcICOVJv+rLCIgqs=) 7: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: 4QaTtqJ6fCb5Gkmj3dPd7fei5dnVQ+bqBH21oxNpxXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: Nov 4 16:40:32 2025 GMT Not After : Nov 11 16:40:32 2025 GMT Subject: CN=690a2c80-8bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:9d:38:6a:04:04:4c:f8:ae:c7:3a:08:42: 7f:96:6c:97:d5:03:3e:ab:d1:fd:d9:eb:2b:a6:4c: 4e:bb:3c:7c:d7:f5:fc:67:24:01:92:46:fa:00:9d: 04:59:df:6d:a3:29:ac:a3:5a:e9:85:24:2a:23:98: bc:cc:61:05:36:20:1b:db:e5:3d:46:43:69:e9:01: 9b:ad:55:ba:f2:2d:30:ce:3c:00:32:25:c0:90:9f: 6f:be:9d:ea:a4:c2:c6:ca:9d:71:ff:c4:64:d6:61: f8:09:40:5d:3a:25:e7:06:e4:bd:36:34:ba:98:53: 6c:db:c4:de:62:e8:1a:17:bb:8c:e4:e3:2b:da:f6: 04:f5:b8:40:c4:91:b1:c4:a3:09:71:96:95:62:2a: 0e:7c:c5:66:c0:5a:65:16:5d:f9:01:32:c8:a4:84: a4:6d:5d:4d:8e:3b:6b:cc:d5:87:9f:30:1e:e5:d1: a3:24:fa:67:48:6d:aa:3f:99:02:57:41:4a:b0:d6: f5:8a:b3:92:85:5d:59:f0:0a:bc:16:2e:01:fa:72: 36:75:3c:c1:30:94:f5:82:29:1b:6a:e3:b9:7e:63: cd:ee:35:4d:9f:90:7d:ca:19:14:17:0a:a7:ca:19: d5:68:c1:f2:38:10:66:d2:e2:f8:82:7b:d0:b1:da: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:CE:8E:7A:F2:C6:DA:61:A4:62:F7:3F:5E:9A:0D:8E:F2:1C:F5 X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8c:b1:f8:3c:f5:64:55:1f:2d:b4:fd:8b:6c:91:ca:8f:91: 66:82:cb:09:fb:ef:58:38:01:45:c5:af:91:cd:1a:7d:2a:be: 2e:43:c5:99:ef:46:2b:e6:11:d1:50:d2:ea:81:9b:97:85:63: 44:46:f5:2d:f6:a2:ac:40:58:d5:9a:11:c5:0e:8c:b2:67:e7: 18:5f:f8:00:40:78:71:21:9c:e0:a0:90:21:ce:0a:df:3e:08: 5a:a0:e3:14:bc:ad:3f:66:28:31:82:21:5b:43:f3:19:40:8f: c4:81:72:51:49:48:ee:a1:5f:ba:41:7b:f4:97:e5:f8:00:53: c8:d4:2c:e4:78:7e:96:9b:25:ac:81:dc:ce:da:68:2d:0f:ee: a9:c8:cd:ea:27:d6:41:bd:77:1b:ae:0b:f3:34:e5:1f:6e:60: 9a:2a:7b:12:e1:58:34:c1:e8:ea:03:56:3f:66:67:82:fb:a7: cd:4f:b6:66:0e:9a:14:94:90:b6:e8:e2:34:bf:55:4f:34:70: 00:d6:6d:c8:9d:85:be:b5:3e:02:1b:f4:70:6e:7f:00:c2:7f: a7:d1:bb:02:5a:27:b1:c4:a1:ae:69:a8:2a:d5:22:82:61:8f: 93:38:6f:54:0d:2c:fa:65:2c:cd:31:3d:99:03:2d:09:74:2a: b3:c1:f7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUxMTA0MTY0MDMyWhcNMjUxMTExMTY0MDMyWjAYMRYwFAYD VQQDEw02OTBhMmM4MC04YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeCdOGoEBEz4rsc6CEJ/lmyX1QM+q9H92esrpkxOuzx81/X8ZyQBkkb6AJ0E Wd9toymso1rphSQqI5i8zGEFNiAb2+U9RkNp6QGbrVW68i0wzjwAMiXAkJ9vvp3q pMLGyp1x/8Rk1mH4CUBdOiXnBuS9NjS6mFNs28TeYugaF7uM5OMr2vYE9bhAxJGx xKMJcZaVYioOfMVmwFplFl35ATLIpISkbV1NjjtrzNWHnzAe5dGjJPpnSG2qP5kC V0FKsNb1irOShV1Z8Aq8Fi4B+nI2dTzBMJT1gikbauO5fmPN7jVNn5B9yhkUFwqn yhnVaMHyOBBm0uL4gnvQsdrVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0czo56 8sbaYaRi9z9emg2O8hz1MB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi82MjhERTUwMkRGMjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1P VXRsZWlkUUwzMkN5WGJhYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4jLH4PPVkVR8ttP2LbJHKj5FmgssJ++9YOAFFxa+RzRp9Kr4uQ8WZ 70Yr5hHRUNLqgZuXhWNERvUt9qKsQFjVmhHFDoyyZ+cYX/gAQHhxIZzgoJAhzgrf PghaoOMUvK0/ZigxgiFbQ/MZQI/EgXJRSUjuoV+6QXv0l+X4AFPI1CzkeH6WmyWs gdzO2mgtD+6pyM3qJ9ZBvXcbrgvzNOUfbmCaKnsS4Vg0wejqA1Y/ZmeC+6fNT7Zm DpoUlJC26OI0v1VPNHAA1m3InYW+tT4CG/Rwbn8Awn+n0bsCWiexxKGuaagq1SKC YY+TOG9UDSz6ZSzNMT2ZAy0JdCqzwffo -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:08 2025 by rpki-client