$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft File: o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json) Hash identifier: zLg81AcJcJJpkvTg7266Oj6mgQja6ek7JBXHm/MNxZ8= Subject key identifier: B0:2B:56:7C:C6:4F:A3:8C:6D:AA:46:60:C1:8A:19:F5:66:E4:F6:4A Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft Manifest number: 0128 Signing time: Wed 05 Nov 2025 04:52:40 +0000 Manifest this update: Wed 05 Nov 2025 04:52:39 +0000 Manifest next update: Wed 12 Nov 2025 04:52:39 +0000 Files and hashes: 1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: b575i8aCEeYitZdTymlFIZncMNv3B/beS/1qe9DRnJM=) 2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: Nov 5 04:52:39 2025 GMT Not After : Nov 12 04:52:39 2025 GMT Subject: CN=690ad817-f086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:d7:9e:15:8b:66:08:f3:19:02:bc:6d:7f: a1:7c:d5:19:31:74:20:82:f7:23:6b:12:e8:28:fe: 0a:53:95:a6:e5:a0:70:4c:06:b2:88:45:08:e5:cf: 91:64:c6:51:de:c9:55:db:8b:de:a0:f6:24:84:d5: 0b:94:7d:b6:58:68:4f:ba:32:77:c4:83:a8:df:04: b0:74:52:2c:be:d0:be:ed:91:bd:09:4e:82:34:2b: eb:3c:b2:b1:e2:9c:22:00:a5:1f:fa:9e:6d:be:7a: 52:1c:a0:20:11:a1:32:11:17:49:1c:6b:f7:31:5a: f4:26:6a:02:56:b8:b7:d2:25:21:e5:f5:45:0c:b2: 6c:3b:d2:f1:8d:75:4d:d3:f5:68:0a:82:68:fe:08: ca:5b:75:8e:e8:4d:95:cf:15:c4:16:a7:95:79:46: d3:85:23:e7:6b:22:9b:06:c9:3e:f6:4e:ab:9b:20: 44:97:bb:41:e2:89:22:15:82:6a:6a:c2:d5:55:5d: 95:19:3f:70:fe:ad:28:9f:78:d1:21:8a:67:77:7f: 30:da:c4:60:8a:fb:ab:27:be:30:5b:da:c4:7e:9a: 51:24:69:8d:6b:82:51:82:85:05:3a:0f:82:48:6f: d9:d3:c1:49:4a:69:c6:1c:95:3e:75:56:df:fe:82: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2B:56:7C:C6:4F:A3:8C:6D:AA:46:60:C1:8A:19:F5:66:E4:F6:4A X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f3:c4:2e:a4:f3:13:55:40:f9:60:28:59:01:81:c3:d7:54: 31:52:54:dd:54:ca:b1:91:ff:e7:18:b9:be:30:67:c2:82:49: 7c:a8:85:c8:7f:df:26:92:95:3b:20:84:7b:8c:ba:78:ad:b7: 7d:f9:d3:29:39:f1:f0:4e:76:de:92:02:d7:2c:58:36:60:08: 50:68:b9:d7:11:9e:2c:24:48:4b:c7:97:49:99:8a:29:b8:a0: 28:47:03:38:b6:ba:ad:a2:f0:5c:e7:7d:6c:11:79:8d:fe:b1: a1:ed:12:15:7f:3a:7a:3d:85:44:54:02:6e:f2:80:77:4e:0f: 9e:6d:b5:53:67:68:29:11:1e:8c:51:a7:20:f2:ff:24:b0:4e: 33:27:d9:e7:e5:8c:fb:09:7b:b7:17:23:2a:f0:12:10:3d:7c: 07:ef:dc:bf:73:56:19:9b:04:a5:6d:ba:b8:f7:74:26:97:ce: 6a:cb:af:c3:7e:47:e5:1a:be:81:6b:7b:b0:7b:90:33:49:93: 95:9f:a3:36:fc:f2:35:ea:fa:7c:c4:96:7e:95:06:ee:9a:f0: 3b:db:f8:35:f9:a1:2e:52:53:da:dc:f4:91:da:88:4f:de:95: bf:24:7d:ec:f6:c4:23:58:32:84:56:8d:4d:04:cc:4b:c6:a2: 4b:64:4a:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMEYxMTAvBgNVBAUTKEEzRUI1MUQyOTk5QkJCNDQ2NTlCRERBNkJFMUUxMEZB NTUxRTIyNjUwHhcNMjUxMTA1MDQ1MjM5WhcNMjUxMTEyMDQ1MjM5WjAYMRYwFAYD VQQDEw02OTBhZDgxNy1mMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb7XnhWLZgjzGQK8bX+hfNUZMXQggvcjaxLoKP4KU5Wm5aBwTAayiEUI5c+R ZMZR3slV24veoPYkhNULlH22WGhPujJ3xIOo3wSwdFIsvtC+7ZG9CU6CNCvrPLKx 4pwiAKUf+p5tvnpSHKAgEaEyERdJHGv3MVr0JmoCVri30iUh5fVFDLJsO9LxjXVN 0/VoCoJo/gjKW3WO6E2VzxXEFqeVeUbThSPnayKbBsk+9k6rmyBEl7tB4okiFYJq asLVVV2VGT9w/q0on3jRIYpnd38w2sRgivurJ74wW9rEfppRJGmNa4JRgoUFOg+C SG/Z08FJSmnGHJU+dVbf/oJ+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLArVnzG T6OMbapGYMGKGfVm5PZKMB8GA1UdIwQYMBaAFKPrUdKZm7tEZZvdpr4eEPpVHiJl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwRi85QTc1ODBDOEZE NEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUwUmxtOTJtdmg0US1sVWVJ bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUltVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzEwRi85QTc1ODBDOEZENEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUw UmxtOTJtdmg0US1sVWVJbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl88QupPMTVUD5YChZAYHD11QxUlTdVMqxkf/nGLm+MGfCgkl8qIXI f98mkpU7IIR7jLp4rbd9+dMpOfHwTnbekgLXLFg2YAhQaLnXEZ4sJEhLx5dJmYop uKAoRwM4trqtovBc531sEXmN/rGh7RIVfzp6PYVEVAJu8oB3Tg+ebbVTZ2gpER6M Uacg8v8ksE4zJ9nn5Yz7CXu3FyMq8BIQPXwH79y/c1YZmwSlbbq493Qml85qy6/D fkflGr6Ba3uwe5AzSZOVn6M2/PI16vp8xJZ+lQbumvA72/g1+aEuUlPa3PSR2ohP 3pW/JH3s9sQjWDKEVo1NBMxLxqJLZEq9 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:14 2025 by rpki-client