$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: YjQqIC7hHvambrDKjaG56i1PpsAfuLpwsytneUprhpo= Subject key identifier: 80:F2:40:2A:B0:8B:A0:A0:6E:42:7E:91:F4:74:8E:00:EC:97:68:58 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 0154 Signing time: Mon 03 Nov 2025 04:12:39 +0000 Manifest this update: Mon 03 Nov 2025 04:12:38 +0000 Manifest next update: Mon 10 Nov 2025 04:12:38 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: 62TiIV+28SVShejwgeK2xZpLyrhQSph8Qi53Pomi2vE=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Nov 3 04:12:38 2025 GMT Not After : Nov 10 04:12:38 2025 GMT Subject: CN=69082bb7-a61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:e0:0b:db:9e:b3:ae:99:1d:7b:d3:21:94: 9f:fc:57:69:a2:75:b4:37:f3:4a:f1:89:95:5b:b7: 42:f4:57:2c:8f:1a:12:4e:1f:7e:c9:4a:99:d2:22: bb:c1:af:39:c1:42:b0:27:0f:b2:44:bf:aa:8b:e1: e1:05:d0:de:33:77:70:a5:3f:4e:85:a5:2a:e8:04: cd:b3:a4:51:67:0e:9a:ac:52:8f:0c:28:f0:a4:26: d7:56:27:11:fe:9e:49:2f:f5:ab:bb:8f:a1:e9:36: 71:25:e4:af:fa:b5:e2:b3:14:e9:6d:8d:e7:be:fe: d5:ee:1b:a8:7a:f9:79:14:a5:29:0f:2d:27:a4:c1: a4:bf:84:46:8f:3d:72:41:1c:6a:20:64:2d:19:a3: 9b:84:d0:6c:40:35:11:20:8e:96:59:2f:b3:d1:5a: 85:20:df:73:88:38:e8:05:88:34:4b:7f:99:71:20: 22:d3:65:7f:d9:f0:fa:70:15:bf:72:b7:0a:a0:c9: 91:f3:7a:81:66:45:a8:3a:97:e8:d0:ee:7f:60:8d: 86:08:14:5d:c6:bb:58:5b:66:17:a7:12:24:06:91: 0a:1d:a1:6b:07:1c:df:f9:a0:49:53:9e:91:e9:5a: f1:2c:9c:94:83:20:aa:d4:52:71:3a:f7:d3:64:2e: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F2:40:2A:B0:8B:A0:A0:6E:42:7E:91:F4:74:8E:00:EC:97:68:58 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:75:43:e1:a1:27:10:4e:59:02:20:0c:44:9c:78:96:49:21: a0:b4:9c:2b:3a:9d:3b:20:71:68:8e:93:0a:1e:60:2b:2d:e4: 15:ba:85:8f:ac:8a:e7:c6:89:55:32:f9:d1:f1:72:2a:1b:d1: 05:8f:1e:5b:4c:be:cb:ce:30:db:88:da:f3:2e:cf:7f:e9:3e: 9b:39:34:9f:80:d4:e4:36:6c:74:18:9c:00:65:d5:29:1d:4b: c3:bb:a9:d0:e7:3f:34:f2:5f:99:27:73:e1:c8:6c:4a:23:c7: b9:bc:cc:64:47:b6:cf:b2:5e:32:40:29:ce:62:cf:2a:0b:0c: ca:69:a5:d3:8c:33:7c:26:32:c1:05:0d:ea:64:e6:e5:dc:94: 1e:16:9c:29:ee:2b:ca:39:a7:6a:1c:73:f9:aa:90:0d:19:d2: 2c:c5:0c:6c:af:67:3b:48:85:c2:65:e5:81:68:1c:83:68:76: e8:cd:0a:ec:20:dd:96:4a:7e:73:03:d3:04:c4:72:dc:d3:50: 7b:7a:1a:09:1a:be:bf:e1:cf:97:99:bb:ab:98:5c:20:89:43: 6c:f8:ad:42:e6:84:b2:85:95:cd:e6:3b:f4:c0:4a:db:a5:52: 57:ac:f5:fd:df:07:36:71:13:7c:1c:5f:75:e2:b7:db:4d:5c: fd:45:31:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUxMTAzMDQxMjM4WhcNMjUxMTEwMDQxMjM4WjAYMRYwFAYD VQQDEw02OTA4MmJiNy1hNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyPgC9ues66ZHXvTIZSf/FdponW0N/NK8YmVW7dC9FcsjxoSTh9+yUqZ0iK7 wa85wUKwJw+yRL+qi+HhBdDeM3dwpT9OhaUq6ATNs6RRZw6arFKPDCjwpCbXVicR /p5JL/Wru4+h6TZxJeSv+rXisxTpbY3nvv7V7huoevl5FKUpDy0npMGkv4RGjz1y QRxqIGQtGaObhNBsQDURII6WWS+z0VqFIN9ziDjoBYg0S3+ZcSAi02V/2fD6cBW/ crcKoMmR83qBZkWoOpfo0O5/YI2GCBRdxrtYW2YXpxIkBpEKHaFrBxzf+aBJU56R 6VrxLJyUgyCq1FJxOvfTZC5UJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDyQCqw i6CgbkJ+kfR0jgDsl2hYMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVdUPhoScQTlkCIAxEnHiWSSGgtJwrOp07IHFojpMKHmArLeQVuoWP rIrnxolVMvnR8XIqG9EFjx5bTL7LzjDbiNrzLs9/6T6bOTSfgNTkNmx0GJwAZdUp HUvDu6nQ5z808l+ZJ3PhyGxKI8e5vMxkR7bPsl4yQCnOYs8qCwzKaaXTjDN8JjLB BQ3qZObl3JQeFpwp7ivKOadqHHP5qpANGdIsxQxsr2c7SIXCZeWBaByDaHbozQrs IN2WSn5zA9MExHLc01B7ehoJGr6/4c+XmburmFwgiUNs+K1C5oSyhZXN5jv0wErb pVJXrPX93wc2cRN8HF914rfbTVz9RTGM -----END CERTIFICATE-----Generated at Wed Nov 5 01:51:08 2025 by rpki-client