$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: Z+O4Qewy8gAuSXb6NE/i2wvNqnUtITLOcOE3J92L8RY= Subject key identifier: EB:DE:33:3E:C3:C2:AD:DE:7C:E0:B3:F2:CD:9E:53:10:A6:FC:0B:A4 Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 0151 Signing time: Wed 05 Nov 2025 04:20:24 +0000 Manifest this update: Wed 05 Nov 2025 04:20:24 +0000 Manifest next update: Wed 12 Nov 2025 04:20:24 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: bR9MP069nQSTcPF3x+hijakXDVGCwnKEFTW4IlMf6xc=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Nov 5 04:20:24 2025 GMT Not After : Nov 12 04:20:24 2025 GMT Subject: CN=690ad088-3853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:32:86:e6:fa:5b:48:36:6c:eb:ed:57:2d: 6c:cc:8f:41:f2:5d:f4:ee:f0:c6:db:07:43:22:0f: 0e:5a:4c:ec:e7:8d:13:7d:6c:29:ee:f5:a7:49:13: 3b:db:c0:56:34:7b:78:70:8b:c8:fd:30:49:39:bb: 89:db:03:82:79:75:13:f3:8d:d8:ba:c8:31:38:4a: db:1d:01:c9:97:94:e4:30:06:a9:25:6a:39:36:94: 48:b3:c5:2d:e2:f7:62:b2:c4:3e:24:85:58:f6:e0: fb:2e:e0:54:8a:81:47:3b:12:cc:ec:31:6f:b3:b6: ba:27:5b:d1:69:05:37:42:ab:0c:e8:f3:16:9a:8c: 45:35:cf:ca:28:8b:28:76:fe:2b:50:bd:67:30:33: d9:44:5c:a5:90:bd:1e:d5:44:7e:6f:8c:09:10:cf: 3d:8c:3e:0e:08:68:58:9f:2d:6c:d1:93:20:10:96: 37:6b:73:2d:e4:be:8b:28:91:46:14:de:16:fb:aa: 1f:ca:86:00:98:b8:03:89:2c:47:ca:18:31:0c:08: 1c:18:0c:89:72:30:bd:52:54:41:53:ff:b8:90:93: 80:0f:9a:83:e9:cd:d6:83:38:e8:ee:1f:86:cc:06: 27:67:5c:b8:60:4b:64:ee:b8:34:1c:bf:63:65:26: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DE:33:3E:C3:C2:AD:DE:7C:E0:B3:F2:CD:9E:53:10:A6:FC:0B:A4 X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:0c:b6:be:a4:46:6d:d0:ff:c5:8e:0a:71:09:90:b6:7e:07: 70:f7:f9:b1:51:c6:0a:d3:09:b3:18:2a:8b:00:e5:e6:22:96: e5:3f:73:9d:68:cf:23:66:e0:b0:87:a9:70:58:34:88:06:8a: 0d:79:2f:00:5b:74:cc:50:88:19:a6:3c:4f:38:66:37:ea:d0: c7:36:c7:4e:27:78:27:bf:43:6b:e2:7e:83:e3:fe:e4:b5:c1: 32:bc:b5:7d:e4:a8:f1:61:54:98:7e:26:3b:3a:aa:16:de:f1: 59:ae:a6:76:3a:e8:3f:1b:a0:6f:25:61:5b:44:2e:a5:f5:fe: d3:d4:65:1d:24:31:fb:a0:b5:7d:bf:d1:ef:3d:5a:89:22:36: 9d:86:48:dc:8c:64:d5:57:15:ce:95:66:e6:43:0b:1e:65:30: 5d:57:e6:23:de:82:a5:36:7e:84:80:81:76:e2:98:e8:3d:38: f4:dc:ef:ef:f1:ca:0c:b2:ff:24:a0:88:aa:39:54:dd:0c:91: e2:25:05:0c:65:79:0e:40:ad:c9:8b:fc:5e:e3:c3:5e:1a:f2: 85:41:c2:a4:e3:70:82:9d:be:f3:40:23:98:f7:38:8b:5d:0e: 6f:53:40:e3:19:66:51:d3:df:11:9f:de:49:c7:a6:24:eb:d2: 9c:fb:e7:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUxMTA1MDQyMDI0WhcNMjUxMTEyMDQyMDI0WjAYMRYwFAYD VQQDEw02OTBhZDA4OC0zODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp8yhub6W0g2bOvtVy1szI9B8l307vDG2wdDIg8OWkzs540TfWwp7vWnSRM7 28BWNHt4cIvI/TBJObuJ2wOCeXUT843YusgxOErbHQHJl5TkMAapJWo5NpRIs8Ut 4vdissQ+JIVY9uD7LuBUioFHOxLM7DFvs7a6J1vRaQU3QqsM6PMWmoxFNc/KKIso dv4rUL1nMDPZRFylkL0e1UR+b4wJEM89jD4OCGhYny1s0ZMgEJY3a3Mt5L6LKJFG FN4W+6ofyoYAmLgDiSxHyhgxDAgcGAyJcjC9UlRBU/+4kJOAD5qD6c3Wgzjo7h+G zAYnZ1y4YEtk7rg0HL9jZSaPnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOveMz7D wq3efOCz8s2eUxCm/AukMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBDLa+pEZt0P/FjgpxCZC2fgdw9/mxUcYK0wmzGCqLAOXmIpblP3Od aM8jZuCwh6lwWDSIBooNeS8AW3TMUIgZpjxPOGY36tDHNsdOJ3gnv0Nr4n6D4/7k tcEyvLV95KjxYVSYfiY7OqoW3vFZrqZ2Oug/G6BvJWFbRC6l9f7T1GUdJDH7oLV9 v9HvPVqJIjadhkjcjGTVVxXOlWbmQwseZTBdV+Yj3oKlNn6EgIF24pjoPTj03O/v 8coMsv8koIiqOVTdDJHiJQUMZXkOQK3Ji/xe48NeGvKFQcKk43CCnb7zQCOY9ziL XQ5vU0DjGWZR098Rn95Jx6Yk69Kc++dv -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:14 2025 by rpki-client