$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: NO5dtuIpgDqsuUXt10Ytfb87giM9EkmpUhu6IotghZI= Subject key identifier: DC:4F:A8:14:00:BF:B7:2E:4C:8B:3F:E4:13:BC:2A:61:B8:E8:9B:CF Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: 0146 Signing time: Mon 03 Nov 2025 04:20:25 +0000 Manifest this update: Mon 03 Nov 2025 04:20:25 +0000 Manifest next update: Mon 10 Nov 2025 04:20:25 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: P+9FbynexKYy1vO8DMzD32TFPEIKA1F02FwmyTWclYg=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Nov 3 04:20:25 2025 GMT Not After : Nov 10 04:20:25 2025 GMT Subject: CN=69082d89-a58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:1b:e0:c6:55:95:c4:b7:c5:a5:0e:9e:ed: 5c:83:5c:2f:5b:aa:f6:59:57:83:f7:dc:b1:75:c1: d7:ca:aa:68:49:5f:34:65:c1:36:0f:3f:1b:e8:d7: 37:e9:76:e7:57:d5:e7:b6:62:4d:d8:a9:c0:e4:bb: 38:34:09:38:28:b4:d6:a4:14:ef:a5:46:10:74:32: 88:af:9b:3a:ed:56:d4:1e:df:e8:49:7b:1e:f5:c6: bb:32:f8:b1:ed:2f:3a:84:e4:61:99:8e:34:d4:e9: db:a7:03:cc:df:ff:eb:5b:e5:ac:d1:d7:7d:3f:74: 64:fe:ae:09:4a:64:b9:a6:ea:7b:b1:7c:56:96:5e: 3d:9d:1f:fc:eb:d8:5d:1c:a8:c3:fe:17:e1:ed:cf: b2:71:a8:b5:6d:b7:c5:93:22:1d:54:85:08:06:08: 3e:76:db:62:1a:6c:9b:a0:d7:26:e6:47:f5:77:e0: b9:9a:0d:6b:52:c7:1e:21:02:bb:e3:57:78:36:8d: 8e:6a:9d:d6:ef:24:d9:3c:8a:c5:7d:06:8a:f6:83: 08:25:72:ce:43:7f:a8:27:ac:3f:a5:65:2c:0f:ee: 70:1e:ae:eb:e8:c4:f9:83:77:ed:22:bd:44:0c:d0: 74:41:87:e9:76:83:25:ae:24:66:df:bd:e1:f3:9f: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:A8:14:00:BF:B7:2E:4C:8B:3F:E4:13:BC:2A:61:B8:E8:9B:CF X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:33:0e:6b:50:6c:03:b8:51:64:ac:07:2a:02:72:e4:25:85: a4:98:b4:c6:f5:4f:ee:a3:5e:1b:6c:3e:d1:ba:42:97:4d:0c: 11:74:f5:8c:bb:6f:22:54:eb:4c:6b:13:b3:2f:b7:66:f8:0d: f2:e5:7d:ac:33:f4:01:4e:b4:8e:4c:12:2c:03:8c:f9:e1:72: 01:ec:c6:91:c2:1a:c5:18:0b:0b:ae:cf:71:64:66:3f:87:88: 2e:d1:c0:d0:b9:a5:f1:71:64:1d:82:bb:a7:41:70:69:81:5f: 8d:33:b0:66:f1:22:1c:25:17:cb:0b:34:af:27:31:55:da:10: cf:78:95:16:4a:21:d5:c1:fe:79:bb:22:dc:37:0a:42:b0:02: 56:fd:7a:fd:9f:fe:a8:c3:27:d1:9b:5f:0e:24:40:7e:c4:6e: e5:6c:4b:03:0f:70:f9:d0:e0:62:00:db:1a:cb:8e:ff:da:0d: 90:10:55:eb:51:90:f2:2a:ae:94:f9:98:e4:a2:11:f6:2d:37: 02:78:9c:d6:33:a9:d6:03:d8:f9:12:af:dc:96:6a:14:c1:0d: e4:00:8a:66:fb:4f:1b:2a:94:2e:65:cb:0b:93:21:eb:d2:17: 88:c3:43:2f:19:40:ae:70:b0:72:29:71:6e:e3:f1:60:84:62: 28:30:a3:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUxMTAzMDQyMDI1WhcNMjUxMTEwMDQyMDI1WjAYMRYwFAYD VQQDEw02OTA4MmQ4OS1hNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H4b4MZVlcS3xaUOnu1cg1wvW6r2WVeD99yxdcHXyqpoSV80ZcE2Dz8b6Nc3 6XbnV9XntmJN2KnA5Ls4NAk4KLTWpBTvpUYQdDKIr5s67VbUHt/oSXse9ca7Mvix 7S86hORhmY401OnbpwPM3//rW+Ws0dd9P3Rk/q4JSmS5pup7sXxWll49nR/869hd HKjD/hfh7c+ycai1bbfFkyIdVIUIBgg+dttiGmyboNcm5kf1d+C5mg1rUsceIQK7 41d4No2Oap3W7yTZPIrFfQaK9oMIJXLOQ3+oJ6w/pWUsD+5wHq7r6MT5g3ftIr1E DNB0QYfpdoMlriRm373h858Q+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxPqBQA v7cuTIs/5BO8KmG46JvPMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRMw5rUGwDuFFkrAcqAnLkJYWkmLTG9U/uo14bbD7RukKXTQwRdPWM u28iVOtMaxOzL7dm+A3y5X2sM/QBTrSOTBIsA4z54XIB7MaRwhrFGAsLrs9xZGY/ h4gu0cDQuaXxcWQdgrunQXBpgV+NM7Bm8SIcJRfLCzSvJzFV2hDPeJUWSiHVwf55 uyLcNwpCsAJW/Xr9n/6owyfRm18OJEB+xG7lbEsDD3D50OBiANsay47/2g2QEFXr UZDyKq6U+ZjkohH2LTcCeJzWM6nWA9j5Eq/clmoUwQ3kAIpm+08bKpQuZcsLkyHr 0heIw0MvGUCucLByKXFu4/FghGIoMKOa -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:36 2025 by rpki-client