$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: nBL4yDmVjs6YatqA5RK1ee6qxsZg+8ZIikHK5hscSmk= Subject key identifier: 5F:99:19:AA:C0:AC:31:D8:32:0A:DC:63:96:7C:6B:C3:05:5E:CB:53 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 0145 Signing time: Wed 05 Nov 2025 04:31:41 +0000 Manifest this update: Wed 05 Nov 2025 04:31:41 +0000 Manifest next update: Wed 12 Nov 2025 04:31:41 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: Utu7HKOD7IIfj4ltmSbxipQLK73vKzJu1WPm97NizNg=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Nov 5 04:31:41 2025 GMT Not After : Nov 12 04:31:41 2025 GMT Subject: CN=690ad32d-aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:ec:96:e2:13:b7:4b:e1:a9:a1:6f:9e:ae: 41:84:b7:7b:1e:1f:19:ff:4f:22:01:d4:6f:33:db: ce:e1:c4:70:9a:72:90:af:c9:81:17:4b:bb:11:13: 41:01:bf:f0:3b:ef:54:a1:56:9f:9f:43:ed:31:fc: 95:3b:c4:69:a9:30:fd:02:fe:83:8e:4c:2d:68:21: b6:cc:32:53:16:c5:e6:4c:45:b9:89:65:b2:75:ae: 83:11:78:0b:83:1b:6b:0b:64:de:75:7f:e8:90:6d: 0d:91:f0:73:aa:e5:f9:7b:c8:9e:31:7e:85:31:af: 84:ed:d6:31:90:d8:23:ae:ba:49:48:fb:b3:82:c2: ef:0f:4d:3d:e0:2c:6c:91:62:41:f9:e5:8a:e5:fc: 80:94:99:c6:20:3d:83:b1:a1:10:e5:53:a0:0c:a3: 0f:dc:91:51:3b:1d:79:a6:15:bf:c0:57:ac:f5:f2: a9:42:60:46:30:87:a7:3e:74:27:40:90:d2:24:09: ae:74:0e:4a:bc:52:cc:51:e1:b3:c1:8c:34:0d:f0: 0c:cb:c8:e3:a5:79:70:45:c0:30:38:1a:a8:b1:52: 31:e5:a4:52:b3:e1:21:93:3b:1b:11:04:4f:8f:af: 7a:fc:1c:16:82:d6:88:ea:9b:85:5f:19:55:67:41: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:99:19:AA:C0:AC:31:D8:32:0A:DC:63:96:7C:6B:C3:05:5E:CB:53 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:26:f2:d9:71:77:ff:02:7a:2f:8a:23:3c:87:80:47:98:d4: 84:70:2a:1c:15:50:e2:e0:33:cd:f7:e1:1b:f1:f3:65:25:65: f7:b2:98:52:df:cf:2c:77:d4:10:07:79:a4:9c:4a:2b:78:aa: 84:f2:11:ca:5c:dd:d0:41:6c:a6:33:cc:e4:b5:40:ce:8b:cc: a8:bf:a4:3a:bf:29:1f:95:01:a7:01:a8:ce:73:2d:44:57:d7: ec:62:4f:d5:45:78:ba:8c:0c:8d:b9:95:bf:28:fa:09:85:49: f1:c8:99:ff:65:a0:ec:60:3d:b9:ad:6a:65:d6:7b:4d:4e:81: 09:67:25:71:b8:f5:2f:85:78:57:be:16:0b:cf:e7:c8:eb:8b: a7:2f:a3:80:1e:ee:48:40:d5:6b:7b:90:48:3a:7a:6a:f1:30: 66:0b:39:4c:48:5a:87:6d:a5:ea:0b:51:80:fe:67:e2:54:55: 53:15:28:fc:5e:fc:31:2b:4d:3d:c8:57:74:cb:e2:0e:54:eb: 67:58:4f:3b:e8:33:0d:0c:b4:58:c0:ce:33:af:10:66:12:e8: d5:f9:c7:d7:3b:0f:80:62:70:e0:2d:a2:86:9d:24:11:99:07: 57:f9:b7:6f:24:52:4a:59:50:07:a1:5c:f4:ff:28:0d:b1:1d: 05:5d:dd:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjUxMTA1MDQzMTQxWhcNMjUxMTEyMDQzMTQxWjAYMRYwFAYD VQQDEw02OTBhZDMyZC1hYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj7sluITt0vhqaFvnq5BhLd7Hh8Z/08iAdRvM9vO4cRwmnKQr8mBF0u7ERNB Ab/wO+9UoVafn0PtMfyVO8RpqTD9Av6DjkwtaCG2zDJTFsXmTEW5iWWyda6DEXgL gxtrC2TedX/okG0NkfBzquX5e8ieMX6FMa+E7dYxkNgjrrpJSPuzgsLvD0094Cxs kWJB+eWK5fyAlJnGID2DsaEQ5VOgDKMP3JFROx15phW/wFes9fKpQmBGMIenPnQn QJDSJAmudA5KvFLMUeGzwYw0DfAMy8jjpXlwRcAwOBqosVIx5aRSs+EhkzsbEQRP j696/BwWgtaI6puFXxlVZ0GwMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+ZGarA rDHYMgrcY5Z8a8MFXstTMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwJvLZcXf/AnoviiM8h4BHmNSEcCocFVDi4DPN9+Eb8fNlJWX3sphS 388sd9QQB3mknEoreKqE8hHKXN3QQWymM8zktUDOi8yov6Q6vykflQGnAajOcy1E V9fsYk/VRXi6jAyNuZW/KPoJhUnxyJn/ZaDsYD25rWpl1ntNToEJZyVxuPUvhXhX vhYLz+fI64unL6OAHu5IQNVre5BIOnpq8TBmCzlMSFqHbaXqC1GA/mfiVFVTFSj8 XvwxK009yFd0y+IOVOtnWE876DMNDLRYwM4zrxBmEujV+cfXOw+AYnDgLaKGnSQR mQdX+bdvJFJKWVAHoVz0/ygNsR0FXd0X -----END CERTIFICATE-----Generated at Thu Nov 6 03:03:58 2025 by rpki-client