$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: YuEv2lvHsynPipM9k5QCH0OSjPDv6G2vYEBHSeuKiYg= Subject key identifier: B1:E1:F8:92:F1:43:95:1F:64:2A:D8:2A:97:45:FA:3F:83:5B:25:04 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 0142 Signing time: Wed 05 Nov 2025 04:44:55 +0000 Manifest this update: Wed 05 Nov 2025 04:44:54 +0000 Manifest next update: Wed 12 Nov 2025 04:44:54 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: iXhi/IfLPTsTFianVcvueV3NMSfUOstjiQTAcRmVgaw=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Nov 5 04:44:54 2025 GMT Not After : Nov 12 04:44:54 2025 GMT Subject: CN=690ad646-1934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:9a:0e:ed:61:ac:fb:0c:bb:c6:95:08:92: 16:c2:10:ac:7b:86:83:8a:56:91:36:3c:11:bb:fa: e7:04:6a:c7:35:8b:6e:20:08:cf:9d:44:f1:6a:41: 56:33:7f:20:62:57:2f:15:a4:e8:dc:d6:fc:db:42: b3:dd:c5:82:a4:75:5f:79:eb:6b:ac:65:13:3b:f7: 59:82:67:5e:c6:d4:da:e2:ea:c1:f4:c3:98:ab:c0: 16:36:58:d3:1a:cb:5d:0b:42:32:b3:e9:67:1c:b1: d5:14:32:a0:31:50:a2:8a:58:93:f7:00:0d:d8:a9: 90:26:7f:b6:02:ab:b3:0f:b6:e9:81:08:e2:9a:18: 1b:e5:a9:1f:c8:e0:b5:e8:3e:7a:6c:e7:95:0d:86: 9a:9d:95:a2:ef:f3:3c:7f:7c:37:87:84:c8:fc:c6: 9b:0d:82:f4:58:6d:99:90:a6:62:f0:18:e8:02:60: 3b:0f:fc:4a:4e:52:1a:68:02:47:f9:11:b0:99:ed: 15:10:c6:03:52:29:b2:a2:59:41:52:9d:82:47:46: 50:5f:b7:c2:db:05:70:a0:79:77:6d:cf:c4:e0:97: d5:9a:25:d1:5c:91:72:e0:84:56:06:50:9c:80:cc: bf:59:6b:36:88:69:f8:6d:98:da:0a:d3:85:74:0e: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:F8:92:F1:43:95:1F:64:2A:D8:2A:97:45:FA:3F:83:5B:25:04 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9d:d9:c1:35:f2:17:4e:30:18:b8:f9:37:b3:c0:b9:71:b0: 76:ea:44:36:1e:d4:79:79:9c:cb:77:8b:45:f8:f1:a3:59:29: 50:37:6a:6e:d8:42:16:fd:1f:26:45:31:70:2a:52:a1:49:e8: a6:6d:43:84:a7:ad:2c:0e:ef:c6:76:e4:60:c4:e8:c0:e4:f5: 65:f6:f9:ac:98:50:e5:4f:f9:53:4b:37:cc:48:50:57:db:a3: 56:a3:cb:08:65:57:7d:f7:42:9d:63:9b:f2:d8:45:80:8c:8a: aa:55:fe:a1:17:32:f2:0e:5f:29:f8:46:38:59:99:94:0b:90: 40:11:a7:6c:1f:f7:57:f8:f1:c3:9e:f1:b8:71:53:eb:30:f3: 5b:0d:73:95:71:49:55:c0:22:eb:4e:dd:2d:ba:21:fe:d1:62: 1a:f0:0c:06:a1:29:41:79:e2:64:06:fe:99:1b:2e:44:ca:9c: e1:27:2a:c5:99:56:d8:56:8a:01:24:06:2a:8a:ca:f4:d4:6b: c7:d6:a9:fe:1b:8c:ce:08:a4:e8:94:0f:b6:6a:0e:4c:ba:86: df:be:f9:b8:8f:35:eb:92:65:d6:30:28:be:07:f3:ec:40:32: 2a:90:8a:f5:28:ef:ba:b5:ea:26:8a:2a:b6:67:93:20:0f:f6: 1b:b4:31:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUxMTA1MDQ0NDU0WhcNMjUxMTEyMDQ0NDU0WjAYMRYwFAYD VQQDEw02OTBhZDY0Ni0xOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5SaDu1hrPsMu8aVCJIWwhCse4aDilaRNjwRu/rnBGrHNYtuIAjPnUTxakFW M38gYlcvFaTo3Nb820Kz3cWCpHVfeetrrGUTO/dZgmdextTa4urB9MOYq8AWNljT GstdC0Iys+lnHLHVFDKgMVCiiliT9wAN2KmQJn+2AquzD7bpgQjimhgb5akfyOC1 6D56bOeVDYaanZWi7/M8f3w3h4TI/MabDYL0WG2ZkKZi8BjoAmA7D/xKTlIaaAJH +RGwme0VEMYDUimyollBUp2CR0ZQX7fC2wVwoHl3bc/E4JfVmiXRXJFy4IRWBlCc gMy/WWs2iGn4bZjaCtOFdA60EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHh+JLx Q5UfZCrYKpdF+j+DWyUEMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGndnBNfIXTjAYuPk3s8C5cbB26kQ2HtR5eZzLd4tF+PGjWSlQN2pu 2EIW/R8mRTFwKlKhSeimbUOEp60sDu/GduRgxOjA5PVl9vmsmFDlT/lTSzfMSFBX 26NWo8sIZVd990KdY5vy2EWAjIqqVf6hFzLyDl8p+EY4WZmUC5BAEadsH/dX+PHD nvG4cVPrMPNbDXOVcUlVwCLrTt0tuiH+0WIa8AwGoSlBeeJkBv6ZGy5EypzhJyrF mVbYVooBJAYqisr01GvH1qn+G4zOCKTolA+2ag5Muobfvvm4jzXrkmXWMCi+B/Ps QDIqkIr1KO+6teomiiq2Z5MgD/YbtDHH -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:32 2025 by rpki-client