$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: ydDZEn8knQ5oTJ1MjTn0otAGhS3ZDR8N5GmRgcq6f6U= Subject key identifier: A7:B6:73:3C:00:14:EC:62:F7:08:53:13:18:5A:24:C5:59:08:80:64 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 0153 Signing time: Mon 03 Nov 2025 04:07:59 +0000 Manifest this update: Mon 03 Nov 2025 04:07:58 +0000 Manifest next update: Mon 10 Nov 2025 04:07:58 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: pdWZLLAtAZ7VCWU5Z/QW9+4bpbCSqbSBuZzwmhDW4dw=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Nov 3 04:07:58 2025 GMT Not After : Nov 10 04:07:58 2025 GMT Subject: CN=69082a9e-3ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:1f:6f:cd:de:1f:8c:cd:3e:d4:e5:9c:16: 22:30:2b:5c:93:b8:30:18:96:cd:b2:ae:73:31:1a: 9e:cb:a4:ed:4c:48:a0:ae:93:0a:78:b9:6e:48:d2: b7:53:fe:9f:e7:3a:a3:7d:3f:c7:3d:13:58:ab:26: bc:e9:98:bc:d3:04:f1:40:70:82:a1:3d:e3:78:bc: 09:ac:85:3c:f9:1c:21:e7:96:e0:f9:f5:f6:7a:33: 94:9a:f6:ce:57:52:0c:a2:6a:2f:46:b6:c9:40:24: 05:a1:4b:f4:0d:8d:d8:6f:5f:bd:30:ce:42:21:cf: e1:05:a0:3f:b3:6d:68:1f:a2:ca:86:e6:78:49:df: 32:e9:f3:80:fb:4f:85:85:28:2c:23:60:8d:10:8c: 1c:57:04:55:d9:8b:14:f0:cc:c0:ba:47:03:a4:99: 41:13:86:8f:e8:86:bc:46:76:a2:a3:02:5a:62:6c: 7a:66:b2:8c:8b:9a:77:b7:33:fa:0a:bb:ed:21:a4: 29:1d:bb:ad:24:99:b4:6a:40:a1:6f:7b:a0:39:15: 4d:39:ee:73:26:61:c5:ec:3a:cd:39:46:a0:0c:7d: 46:9e:69:34:57:49:cf:5f:29:da:17:38:d4:ba:e3: 46:47:ad:af:a8:49:27:87:96:53:a6:a6:ff:00:98: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:73:3C:00:14:EC:62:F7:08:53:13:18:5A:24:C5:59:08:80:64 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d8:ab:a2:f9:66:f1:69:a4:b7:64:fd:bc:b3:52:ca:02:0c: 4e:eb:0c:cb:82:30:4e:fd:52:33:c3:1b:15:da:31:79:d3:ea: 32:23:67:55:71:33:11:a3:cd:03:ac:8e:48:43:6e:f3:64:c0: bf:1c:b0:74:18:a6:23:39:f1:0b:8f:52:d2:75:2f:b8:57:9e: e4:01:3b:a9:2f:15:e6:e1:a5:49:53:92:74:73:5c:2f:50:06: 91:65:35:d0:45:ab:9a:4f:ad:d2:09:c6:fe:bf:21:1f:56:64: 20:d7:25:7a:81:52:20:cc:93:92:1d:d2:04:ee:c1:70:28:d2: b4:74:dc:fc:4f:1d:20:32:bd:ca:c8:f6:14:9c:33:5c:33:39: df:1d:dc:8c:6d:05:d1:f1:2a:51:72:7a:69:37:5e:4e:3b:98: d3:a6:16:7b:38:d9:45:fb:a0:f2:e6:54:ea:50:79:12:2b:75: 56:2f:a1:73:e9:e7:11:a6:67:10:68:d0:5a:17:c2:59:2d:dd: d1:a0:fb:9b:45:4a:34:c2:27:60:24:84:38:2b:f4:5a:e8:b6: a2:19:c1:43:4d:c9:45:9f:c2:9f:e5:8e:3e:8b:1e:b0:5a:c3: cd:27:f3:d8:ff:3f:c0:a7:84:42:d3:06:ec:03:70:41:30:53: 5a:e3:5d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUxMTAzMDQwNzU4WhcNMjUxMTEwMDQwNzU4WjAYMRYwFAYD VQQDEw02OTA4MmE5ZS0zZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAop0fb83eH4zNPtTlnBYiMCtck7gwGJbNsq5zMRqey6TtTEigrpMKeLluSNK3 U/6f5zqjfT/HPRNYqya86Zi80wTxQHCCoT3jeLwJrIU8+Rwh55bg+fX2ejOUmvbO V1IMomovRrbJQCQFoUv0DY3Yb1+9MM5CIc/hBaA/s21oH6LKhuZ4Sd8y6fOA+0+F hSgsI2CNEIwcVwRV2YsU8MzAukcDpJlBE4aP6Ia8RnaiowJaYmx6ZrKMi5p3tzP6 CrvtIaQpHbutJJm0akChb3ugORVNOe5zJmHF7DrNOUagDH1Gnmk0V0nPXynaFzjU uuNGR62vqEknh5ZTpqb/AJgbrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe2czwA FOxi9whTExhaJMVZCIBkMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi2Kui+WbxaaS3ZP28s1LKAgxO6wzLgjBO/VIzwxsV2jF50+oyI2dV cTMRo80DrI5IQ27zZMC/HLB0GKYjOfELj1LSdS+4V57kATupLxXm4aVJU5J0c1wv UAaRZTXQRauaT63SCcb+vyEfVmQg1yV6gVIgzJOSHdIE7sFwKNK0dNz8Tx0gMr3K yPYUnDNcMznfHdyMbQXR8SpRcnppN15OO5jTphZ7ONlF+6Dy5lTqUHkSK3VWL6Fz 6ecRpmcQaNBaF8JZLd3RoPubRUo0widgJIQ4K/Ra6LaiGcFDTclFn8Kf5Y4+ix6w WsPNJ/PY/z/Ap4RC0wbsA3BBMFNa410/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:07 2025 by rpki-client