$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: qhYyKsdChg3VD958G739VIaaJXwvspDxaAATaGPhCss= Subject key identifier: 63:E9:40:05:C3:00:F5:B7:BD:0D:1B:26:CB:9F:9F:F8:BE:9A:82:9B Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: 0144 Signing time: Mon 03 Nov 2025 04:20:03 +0000 Manifest this update: Mon 03 Nov 2025 04:20:02 +0000 Manifest next update: Mon 10 Nov 2025 04:20:02 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: z8+6l/zTO8XTHiYjvP7NEhHQ/B+WWHd3+3z0T8Dlgws=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Nov 3 04:20:02 2025 GMT Not After : Nov 10 04:20:02 2025 GMT Subject: CN=69082d72-6b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:fc:d9:68:92:75:aa:34:f3:41:a4:c7:b9: 9b:01:42:98:8a:15:06:91:99:2b:a8:e9:f8:f2:69: 09:5f:b6:40:73:af:9c:4e:da:c3:64:48:da:7d:72: 1d:a5:41:d0:34:24:00:77:ed:f4:61:98:df:18:60: 3d:2d:fd:89:e7:9a:d4:d3:06:83:11:87:bc:b1:9e: a3:69:24:db:2e:f3:43:a0:04:07:7b:af:5e:e3:ac: 4b:62:32:fd:ad:10:e2:08:0a:51:72:29:54:0e:da: b1:43:07:df:05:27:2b:76:b0:e4:2d:a1:5a:e0:48: 79:7b:10:a0:9e:6a:f5:df:b6:5f:2d:82:57:86:ed: 68:09:e0:03:7c:15:57:ed:04:dd:7f:8c:b6:21:37: 83:a2:22:52:99:3f:de:ae:68:a0:b8:e4:06:79:fe: 6c:9b:4a:be:bc:c2:f2:38:3d:92:72:4a:97:ae:8f: ba:39:fd:aa:60:71:8d:52:41:44:d0:63:f5:d3:1f: bc:0d:18:21:b1:07:14:de:49:a6:59:96:19:4c:dc: 7f:ab:11:01:29:a0:73:9e:1d:0c:05:75:17:d3:62: ff:2d:30:51:bf:5c:ef:5b:f9:f6:ba:22:e8:d0:a6: 9c:a9:5f:de:8c:db:9c:72:d5:2e:20:be:84:d8:11: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:40:05:C3:00:F5:B7:BD:0D:1B:26:CB:9F:9F:F8:BE:9A:82:9B X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:9d:f3:9a:ad:57:6c:d5:8e:ff:15:9f:2a:d3:d5:51:43:05: 6c:1c:64:93:f6:20:ee:fa:62:24:e7:1d:45:8a:77:4f:8a:63: 85:2d:66:26:e3:0c:0a:59:ce:3e:69:d5:08:1d:69:fb:63:8c: d1:43:83:87:fb:2a:cd:a8:8a:5a:df:87:80:3a:6f:6b:3f:fd: 5e:4b:f0:cc:6d:59:cd:a2:62:0c:a1:c8:c1:07:04:af:d0:4a: bf:c4:51:e3:c9:d5:f3:8e:4b:f4:41:b3:7f:4b:8e:c1:72:48: 3f:fa:4e:d2:2a:82:60:c0:82:15:2d:45:88:d5:74:51:23:2f: 84:99:4e:d4:15:ea:26:57:d0:9b:97:5a:13:68:57:27:0a:9f: fa:c9:74:b6:52:1c:21:35:9d:da:5e:85:a5:96:02:6c:6e:3e: f7:b8:c8:15:6f:f4:52:c4:ac:9f:86:a5:70:3a:ff:3b:11:c0: 62:59:8e:48:92:c9:da:ee:9e:0a:3b:84:26:2b:8d:4b:e8:e7: 00:fc:1d:7f:68:40:b7:17:0c:78:04:d6:eb:5a:59:41:de:70: 61:31:e5:2c:ff:93:ec:31:0c:2a:c6:64:d1:b3:fe:2d:7b:ef: 77:0f:8a:38:0f:13:cc:bc:05:38:d8:81:92:73:d5:6e:0d:b1: fc:b4:f1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUxMTAzMDQyMDAyWhcNMjUxMTEwMDQyMDAyWjAYMRYwFAYD VQQDEw02OTA4MmQ3Mi02YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mD82WiSdao080Gkx7mbAUKYihUGkZkrqOn48mkJX7ZAc6+cTtrDZEjafXId pUHQNCQAd+30YZjfGGA9Lf2J55rU0waDEYe8sZ6jaSTbLvNDoAQHe69e46xLYjL9 rRDiCApRcilUDtqxQwffBScrdrDkLaFa4Eh5exCgnmr137ZfLYJXhu1oCeADfBVX 7QTdf4y2ITeDoiJSmT/ermiguOQGef5sm0q+vMLyOD2SckqXro+6Of2qYHGNUkFE 0GP10x+8DRghsQcU3kmmWZYZTNx/qxEBKaBznh0MBXUX02L/LTBRv1zvW/n2uiLo 0KacqV/ejNucctUuIL6E2BGUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPpQAXD APW3vQ0bJsufn/i+moKbMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRnfOarVds1Y7/FZ8q09VRQwVsHGST9iDu+mIk5x1FindPimOFLWYm 4wwKWc4+adUIHWn7Y4zRQ4OH+yrNqIpa34eAOm9rP/1eS/DMbVnNomIMocjBBwSv 0Eq/xFHjydXzjkv0QbN/S47Bckg/+k7SKoJgwIIVLUWI1XRRIy+EmU7UFeomV9Cb l1oTaFcnCp/6yXS2UhwhNZ3aXoWllgJsbj73uMgVb/RSxKyfhqVwOv87EcBiWY5I ksna7p4KO4QmK41L6OcA/B1/aEC3Fwx4BNbrWllB3nBhMeUs/5PsMQwqxmTRs/4t e+93D4o4DxPMvAU42IGSc9VuDbH8tPHe -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:30 2025 by rpki-client