$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json) Hash identifier: +SQUnTFTfIX0zDRKUGluPpdORSY+5L5Ggwm+0FL8GgM= Subject key identifier: FE:2E:1A:AD:A7:44:88:5B:56:43:D2:5A:8E:EA:00:77:65:95:3D:E1 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 21737750D4EB6EAD65EB33AB6F5A5C4A4E761592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft Manifest number: 0677 Signing time: Wed 05 Nov 2025 07:28:05 +0000 Manifest this update: Wed 05 Nov 2025 07:23:05 +0000 Manifest next update: Thu 06 Nov 2025 10:20:05 +0000 Files and hashes: 1: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: 4avXLObPatCXD4wcOzJCDE3t2fT7xz20RqEDfGJ3VXo=) 2: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=) 3: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: ZoLzi5Xd5utb1AI63IXWGz+aVO82OnCDuPInrqLocDM=) 4: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=) 5: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=) 6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=) 7: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=) 8: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:73:77:50:d4:eb:6e:ad:65:eb:33:ab:6f:5a:5c:4a:4e:76:15:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Nov 5 07:23:05 2025 GMT Not After : Nov 6 10:20:05 2025 GMT Subject: CN=FE2E1AADA744885B5643D25A8EEA007765953DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:22:3d:70:83:99:62:43:13:02:73:36:01: 7d:b6:fa:08:4e:30:dc:d0:e7:33:9d:34:02:5a:85: 3b:26:c0:2c:02:0f:b3:a0:0e:ff:81:19:50:d1:0c: 44:b2:7e:1f:ff:66:27:c0:35:d8:e4:e4:db:03:34: 96:4b:a1:21:0b:26:c8:04:48:d7:a4:03:71:e2:28: 14:54:bc:9f:76:2a:6f:94:8e:4f:24:a1:e5:3a:d5: 59:64:f7:e8:34:bc:5b:02:5f:17:6d:b7:c7:09:1d: 89:ec:e5:68:da:ac:00:91:20:eb:91:31:65:67:94: b3:be:81:a7:e0:e2:6e:a4:c5:f8:05:da:1a:f7:33: 73:19:3a:2a:45:2f:cd:33:da:6c:9d:09:c2:d0:5c: 07:1d:25:5a:6d:c5:02:44:58:8f:ff:e0:5e:73:23: 8f:36:fe:86:fa:dd:f3:53:7d:82:ff:51:76:14:f9: 32:ba:ba:22:99:23:c6:42:3d:a9:3d:34:41:2b:cf: cb:9c:27:ef:c7:52:b7:93:0d:7b:39:61:3e:05:57: 94:64:7e:f9:bb:1b:69:14:73:f0:90:37:84:37:e0: f6:fd:4f:80:75:32:e3:55:25:9f:78:ed:0e:bf:cc: 14:37:59:7d:25:15:be:2d:58:8c:04:83:3a:cd:fc: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:1A:AD:A7:44:88:5B:56:43:D2:5A:8E:EA:00:77:65:95:3D:E1 X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3c:db:69:af:18:e3:b1:d2:04:a0:6c:07:be:b5:1b:52:98: 35:50:9b:37:a1:28:65:8d:7c:b6:29:c6:a7:86:18:ea:5b:e5: f3:9a:3b:2c:29:20:1a:38:ef:6f:06:3a:cf:aa:7f:f7:92:aa: 5a:4e:b9:59:1a:ea:43:01:cf:41:ea:71:31:44:88:77:a3:c4: 7a:56:8b:e6:c0:0b:52:5c:10:c1:61:f8:0a:e6:b8:13:41:10: e2:c8:0e:74:56:51:f1:6d:3d:1b:08:f1:f6:ca:71:37:e7:c5: 28:35:f8:b5:cb:db:33:01:f4:f3:cf:5c:17:29:c8:23:0a:54: d2:4b:73:b3:87:28:35:4d:db:47:56:d4:32:d8:86:76:90:da: b7:14:98:35:8d:08:7e:ba:02:da:04:f6:df:31:c5:22:50:b4: 59:3c:d4:70:8d:2f:65:b5:5f:67:ef:f2:aa:07:e3:e3:21:cd: 6f:ff:18:e5:49:96:2d:bc:51:39:b2:1a:b3:8b:5b:d1:9b:72: 7f:f5:ef:d2:c4:1f:1e:88:ae:dc:47:ca:ef:cd:c4:60:1d:22: ea:84:8a:c0:bd:6d:17:bc:92:0e:be:35:85:bd:07:50:da:a3: 7d:d6:2b:dc:8f:04:e0:26:1a:de:de:1f:39:32:c2:8e:11:cc: 66:53:3d:0a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIXN3UNTrbq1l6zOrb1pcSk52FZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI1MTEwNTA3MjMwNVoX DTI1MTEwNjEwMjAwNVowMzExMC8GA1UEAxMoRkUyRTFBQURBNzQ0ODg1QjU2NDNE MjVBOEVFQTAwNzc2NTk1M0RFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIUxIj1wg5liQxMCczYBfbb6CE4w3NDnM500AlqFOybALAIPs6AO/4EZUNEM RLJ+H/9mJ8A12OTk2wM0lkuhIQsmyARI16QDceIoFFS8n3Yqb5SOTySh5TrVWWT3 6DS8WwJfF223xwkdiezlaNqsAJEg65ExZWeUs76Bp+DibqTF+AXaGvczcxk6KkUv zTPabJ0JwtBcBx0lWm3FAkRYj//gXnMjjzb+hvrd81N9gv9RdhT5Mrq6IpkjxkI9 qT00QSvPy5wn78dSt5MNezlhPgVXlGR++bsbaRRz8JA3hDfg9v1PgHUy41Uln3jt Dr/MFDdZfSUVvi1YjASDOs38SGUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBT+Lhqt p0SIW1ZD0lqO6gB3ZZU94TAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMy9CMThGOTg5OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAhDzbaa8Y47HSBKBsB761G1KYNVCbN6EoZY18tinGp4YY6lvl 85o7LCkgGjjvbwY6z6p/95KqWk65WRrqQwHPQepxMUSId6PEelaL5sALUlwQwWH4 Cua4E0EQ4sgOdFZR8W09Gwjx9spxN+fFKDX4tcvbMwH0889cFynIIwpU0ktzs4co NU3bR1bUMtiGdpDatxSYNY0IfroC2gT23zHFIlC0WTzUcI0vZbVfZ+/yqgfj4yHN b/8Y5UmWLbxRObIas4tb0Ztyf/Xv0sQfHoiu3EfK783EYB0i6oSKwL1tF7ySDr41 hb0HUNqjfdYr3I8E4CYa3t4fOTLCjhHMZlM9Cg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:57 2025 by rpki-client