$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json) Hash identifier: BB0BrLbxIqlnG771WArAEFyY8b7piUEPP9N+SAWmcs8= Subject key identifier: F5:B2:DA:D8:71:F6:01:6A:0E:81:DA:D4:65:57:E7:DA:BE:C3:11:94 Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft Manifest number: DF Signing time: Mon 03 Nov 2025 05:30:52 +0000 Manifest this update: Mon 03 Nov 2025 05:30:52 +0000 Manifest next update: Mon 10 Nov 2025 05:30:52 +0000 Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: tykMVnEUNT56p6CjidhN79QJ3Yn9/RnQ47UPnC5VGJ0=) 2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: 54Ea1mTVG8VfmRw/L9YxXLSKvOdr6tHDGBcwWayi7ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Validity Not Before: Nov 3 05:30:52 2025 GMT Not After : Nov 10 05:30:52 2025 GMT Subject: CN=69083e0c-f761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:3f:bc:94:41:03:3a:79:0d:2d:23:78:9e: 2a:03:4c:25:f4:d0:02:89:ce:e4:fa:56:70:18:65: a5:38:6b:ad:54:74:9d:07:17:16:8f:29:17:92:39: 93:8b:ab:1f:56:88:4e:f8:1f:44:c8:cd:6b:d2:a3: 73:e2:a9:30:30:0f:79:87:0b:01:1b:28:c2:2c:11: 0c:fa:2e:61:df:19:59:89:85:35:42:ce:45:e1:e5: 90:c4:ed:48:15:8d:2c:5e:51:38:7c:dc:8d:80:ca: 0f:95:ec:8f:3d:79:d2:48:4d:9c:35:1b:ca:9a:ec: c4:e3:cb:f7:00:7c:db:26:37:60:e1:9d:81:60:ad: ac:65:b8:ae:57:62:07:e4:ee:3e:05:d8:17:2f:4d: d0:6e:ae:aa:89:2b:b4:db:4b:3d:ca:17:3c:b2:2b: 8a:ae:2c:26:b4:a0:64:08:36:31:62:10:89:94:b0: c1:34:07:5c:18:cb:b4:d1:0a:39:53:8d:38:41:43: 37:f3:c3:0d:1b:9b:0e:da:33:23:92:b2:f2:1f:ec: bd:0e:9b:cf:14:e7:17:6b:64:7b:b5:d2:d4:3e:b1: 29:b7:11:78:75:de:74:19:37:6c:45:4c:8e:1a:79: e4:a0:10:1f:e9:76:f2:26:2e:24:6d:23:b5:51:bb: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B2:DA:D8:71:F6:01:6A:0E:81:DA:D4:65:57:E7:DA:BE:C3:11:94 X509v3 Authority Key Identifier: keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:38:59:e5:fd:19:44:06:b0:5b:ff:31:97:c9:2f:ce:a3: 21:0a:e8:96:ef:40:80:8a:50:be:61:ff:c2:c9:d7:8a:e6:fb: 8e:58:53:5c:78:d5:9c:f8:d2:a7:89:44:7a:81:e5:36:1f:94: c5:b1:4a:90:73:ae:4f:3a:96:7a:c8:39:86:e4:8d:44:14:58: e5:8e:61:a6:4b:78:7a:6a:82:5b:02:0a:1c:03:a9:20:d9:a1: 4a:c9:54:04:e1:5a:a7:8c:47:1e:d1:22:b5:b8:fc:14:f0:aa: b7:a9:0b:53:10:6b:e2:85:fa:bf:b3:19:a9:d8:96:36:e0:b5: c7:3c:98:9c:3e:9f:f2:11:09:be:a6:33:38:8b:62:59:d1:e0: c9:34:6c:e4:4e:02:a3:b2:cc:b4:89:ce:03:a5:ec:32:94:59: 87:f9:be:57:13:29:99:5e:0f:4a:c0:8b:a4:33:78:16:1c:9c: 6e:e1:89:2e:40:28:51:77:de:bc:ee:7a:ac:1a:a3:49:60:30: 1f:c8:da:bb:d2:9e:d1:7d:96:87:9b:b5:4d:15:f9:7f:3f:10: da:6d:f7:7b:25:06:af:c3:60:77:a1:04:8c:d6:e2:24:08:ad: 24:32:bb:5f:9b:85:65:ab:a9:ed:0f:f9:07:c6:71:ef:2b:d8: d9:41:ca:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCN0UxMTAvBgNVBAUTKDAyREExMzI3RjUyQzQwMjNBMzgyMUFDODc4NTBDOTE3 RDhFODM1MjcwHhcNMjUxMTAzMDUzMDUyWhcNMjUxMTEwMDUzMDUyWjAYMRYwFAYD VQQDEw02OTA4M2UwYy1mNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ8/vJRBAzp5DS0jeJ4qA0wl9NACic7k+lZwGGWlOGutVHSdBxcWjykXkjmT i6sfVohO+B9EyM1r0qNz4qkwMA95hwsBGyjCLBEM+i5h3xlZiYU1Qs5F4eWQxO1I FY0sXlE4fNyNgMoPleyPPXnSSE2cNRvKmuzE48v3AHzbJjdg4Z2BYK2sZbiuV2IH 5O4+BdgXL03Qbq6qiSu020s9yhc8siuKriwmtKBkCDYxYhCJlLDBNAdcGMu00Qo5 U404QUM388MNG5sO2jMjkrLyH+y9DpvPFOcXa2R7tdLUPrEptxF4dd50GTdsRUyO GnnkoBAf6XbyJi4kbSO1UbszmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWy2thx 9gFqDoHa1GVX59q+wxGUMB8GA1UdIwQYMBaAFALaEyf1LEAjo4IayHhQyRfY6DUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI3RS85QzNGRUNEQzY0 REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FDT2pnaHJJZUZESkY5am9O U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F0b1RKX1VzUUNPamdockllRkRKRjlqb05TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI3RS85QzNGRUNEQzY0REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FD T2pnaHJJZUZESkY5am9OU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADJjhZ5f0ZRAawW/8xl8kvzqMhCuiW70CAilC+Yf/CydeK5vuOWFNc eNWc+NKniUR6geU2H5TFsUqQc65POpZ6yDmG5I1EFFjljmGmS3h6aoJbAgocA6kg 2aFKyVQE4VqnjEce0SK1uPwU8Kq3qQtTEGvihfq/sxmp2JY24LXHPJicPp/yEQm+ pjM4i2JZ0eDJNGzkTgKjssy0ic4DpewylFmH+b5XEymZXg9KwIukM3gWHJxu4Yku QChRd9687nqsGqNJYDAfyNq70p7RfZaHm7VNFfl/PxDabfd7JQavw2B3oQSM1uIk CK0kMrtfm4Vlq6ntD/kHxnHvK9jZQcrO -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:07 2025 by rpki-client