$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft File: r1E53KFl4oTVSmzvYft6CRaJGw8.mft (raw, json) Hash identifier: 3hd+7ajMcsN2MlEBDZOT5dX/4+ExOsnfPwZb8+rRssw= Subject key identifier: 27:C8:CD:03:C3:5C:20:5C:B5:C0:59:EE:BE:FF:B9:D5:11:F2:D7:A5 Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F Certificate issuer: /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft Manifest number: 0247 Signing time: Wed 05 Nov 2025 01:52:07 +0000 Manifest this update: Wed 05 Nov 2025 01:52:06 +0000 Manifest next update: Wed 12 Nov 2025 01:52:06 +0000 Files and hashes: 1: r1E53KFl4oTVSmzvYft6CRaJGw8.crl (hash: 0lBodfGchuMWBBLmAQiB04rlgMPxoLP3JFdWKPWdQNs=) 2: 0B237586453311ED9A3F7844C4F9AE02.roa (hash: ozd7QEWzqSc/ZjTprGcRjOYRAvGoQk7Mxlkn94aKvpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918379F, serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F Validity Not Before: Nov 5 01:52:06 2025 GMT Not After : Nov 12 01:52:06 2025 GMT Subject: CN=690aadc7-9eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:69:ac:38:83:03:3b:0f:46:a5:df:95:7c: fd:31:9d:bd:95:f0:a3:35:4d:76:9c:6e:18:32:5e: 0e:e7:25:3d:62:6b:0e:ab:98:48:2e:cd:db:0e:04: 22:bc:1e:b0:d7:39:45:c4:9e:1f:82:f5:1a:94:fc: 2c:4a:8d:26:23:5f:2c:80:e2:2e:18:da:a9:ae:7d: 97:5f:9d:53:59:05:41:24:2f:2d:c6:ed:93:ac:f3: 9a:06:56:6d:b5:ab:00:78:dd:b8:69:b0:69:3a:eb: 35:d4:3f:f8:fc:b3:67:d4:98:79:b4:65:8f:41:27: 8a:3d:74:40:3d:5c:2d:76:16:50:8e:ae:be:ed:45: e0:03:82:1a:dd:39:a5:b9:31:d4:8d:7f:2b:2e:0f: d9:df:83:41:b7:b2:80:04:1a:88:42:0d:8c:a7:ad: c9:37:e8:4f:79:25:81:ad:13:db:b5:5b:1a:68:e8: 70:a6:c3:c9:4e:7f:ab:c8:14:d5:55:db:c3:d7:96: ae:bc:68:77:9d:48:c1:af:5e:49:12:9a:e0:a6:3a: 93:fc:4c:da:04:22:69:6a:b6:ce:bf:35:91:b9:72: cf:16:ec:71:e8:ce:e9:c4:ab:ba:28:bb:1c:c9:ee: ac:db:17:3d:d6:c3:db:68:a1:da:03:92:8d:66:1f: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C8:CD:03:C3:5C:20:5C:B5:C0:59:EE:BE:FF:B9:D5:11:F2:D7:A5 X509v3 Authority Key Identifier: keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:10:9c:aa:f5:57:54:95:d2:68:4a:47:94:1f:4d:2c:b8:fd: 9d:4d:89:98:4f:d2:33:6a:39:fa:2e:2d:bd:e5:2a:e0:10:02: 78:9a:1f:dc:83:1d:fc:a0:dd:d9:7e:d7:70:8e:85:5d:cf:b2: d1:8b:39:fd:7d:41:81:7b:b0:7f:3b:59:48:b4:3c:a7:fe:dc: 99:3f:0c:a9:03:06:24:41:5a:a7:82:3f:fa:a9:4d:cb:62:e2: 3b:b9:a7:9c:7d:00:df:5b:b4:d0:cb:63:77:60:9c:6f:f6:f1: f3:cf:99:5b:f7:32:69:20:38:07:0f:14:61:e1:b1:e3:8b:bc: 54:db:56:ab:98:03:06:a7:37:06:be:42:a9:37:d7:95:88:a1: e5:79:f3:9b:9f:02:ca:fd:cc:e2:a0:88:de:6e:4e:9b:26:84: 5c:6c:9c:ca:86:ad:e7:fd:b5:04:b6:d1:63:59:de:57:f1:8b: c6:b9:23:60:9b:5d:f6:22:6d:e6:d3:a0:cd:2f:34:06:6e:67: ac:3e:a7:60:24:61:c9:46:5a:78:16:50:07:e2:80:a6:2b:06: 44:7a:2c:0f:8d:80:23:7a:1e:5d:0f:a5:d9:a1:39:24:2f:b3: a6:c2:13:46:9b:e1:58:4f:6c:ce:1b:38:90:ee:86:41:e9:c9: ff:ad:ff:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OUYxMTAvBgNVBAUTKEFGNTEzOURDQTE2NUUyODRENTRBNkNFRjYxRkI3QTA5 MTY4OTFCMEYwHhcNMjUxMTA1MDE1MjA2WhcNMjUxMTEyMDE1MjA2WjAYMRYwFAYD VQQDEw02OTBhYWRjNy05ZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnJprDiDAzsPRqXflXz9MZ29lfCjNU12nG4YMl4O5yU9YmsOq5hILs3bDgQi vB6w1zlFxJ4fgvUalPwsSo0mI18sgOIuGNqprn2XX51TWQVBJC8txu2TrPOaBlZt tasAeN24abBpOus11D/4/LNn1Jh5tGWPQSeKPXRAPVwtdhZQjq6+7UXgA4Ia3Tml uTHUjX8rLg/Z34NBt7KABBqIQg2Mp63JN+hPeSWBrRPbtVsaaOhwpsPJTn+ryBTV VdvD15auvGh3nUjBr15JEprgpjqT/EzaBCJparbOvzWRuXLPFuxx6M7pxKu6KLsc ye6s2xc91sPbaKHaA5KNZh+ppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfIzQPD XCBctcBZ7r7/udUR8telMB8GA1UdIwQYMBaAFK9ROdyhZeKE1Ups72H7egkWiRsP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5Ri83NUNFMjcyODQy MTMxMUVEQkUwMTQzMjFDNEY5QUUwMi9yMUU1M0tGbDRvVFZTbXp2WWZ0NkNSYUpH dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxRTUzS0ZsNG9UVlNtenZZZnQ2Q1JhSkd3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc5Ri83NUNFMjcyODQyMTMxMUVEQkUwMTQzMjFDNEY5QUUwMi9yMUU1M0tGbDRv VFZTbXp2WWZ0NkNSYUpHdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNEJyq9VdUldJoSkeUH00suP2dTYmYT9Izajn6Li295SrgEAJ4mh/c gx38oN3ZftdwjoVdz7LRizn9fUGBe7B/O1lItDyn/tyZPwypAwYkQVqngj/6qU3L YuI7uaecfQDfW7TQy2N3YJxv9vHzz5lb9zJpIDgHDxRh4bHji7xU21armAMGpzcG vkKpN9eViKHlefObnwLK/czioIjebk6bJoRcbJzKhq3n/bUEttFjWd5X8YvGuSNg m132Im3m06DNLzQGbmesPqdgJGHJRlp4FlAH4oCmKwZEeiwPjYAjeh5dD6XZoTkk L7OmwhNGm+FYT2zOGziQ7oZB6cn/rf/A -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:35 2025 by rpki-client