$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft File: atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json) Hash identifier: 9gqJ1xar/+iLXZql4Tt/9VPDyI5Ex+yRdWQxQ9P7gdg= Subject key identifier: 0B:BA:4F:1D:15:90:C5:B5:4E:55:D0:80:01:49:2F:61:AD:98:90:1A Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D Certificate issuer: /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft Manifest number: 0153 Signing time: Mon 03 Nov 2025 04:16:30 +0000 Manifest this update: Mon 03 Nov 2025 04:16:30 +0000 Manifest next update: Mon 10 Nov 2025 04:16:30 +0000 Files and hashes: 1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: NZZupnHrbQjdO0YxIqwzjLXGIrndfC4ggxkyfzAYQOo=) 2: 0A3010E62EFE11F0B225630AC4F9AE02.roa (hash: SL+u5xNb94LlIO3MGszlS8G25kmb10774LbEot0uqXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Validity Not Before: Nov 3 04:16:30 2025 GMT Not After : Nov 10 04:16:30 2025 GMT Subject: CN=69082c9e-e911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0f:52:ce:67:e3:34:a5:63:91:12:85:02:0b: d9:49:a2:bc:2c:c9:03:22:52:f9:47:c7:ac:e9:61: 23:bf:e7:5b:4b:65:fb:90:71:a2:e1:5d:e1:c1:19: 47:1d:cd:e4:07:c8:35:90:69:ba:f4:7b:a2:96:0c: 17:cd:1b:28:ed:22:12:11:4f:7c:a3:f9:ce:93:e6: 58:dc:e5:19:1e:a0:84:7b:29:6c:4d:ba:8e:fe:3d: 14:e6:5d:35:ac:7c:10:8d:35:7a:b2:6d:70:c5:d7: 29:93:c3:d7:41:6b:4d:5d:18:e4:82:3b:c7:6e:d0: c9:74:11:c6:37:d5:9c:79:d3:e3:97:df:82:77:c0: 9f:4d:dd:e8:bc:fe:15:f5:9d:d0:ec:0e:e9:bf:a9: f3:2d:d1:8d:ad:91:b0:49:cc:1a:bd:5e:12:33:39: 30:cc:b8:07:38:e3:90:df:a7:19:9c:13:b4:34:bf: 79:f0:fc:4c:d7:35:3a:55:ad:0f:0c:e9:2e:60:6d: 1b:e5:93:32:1f:93:b5:22:ee:cc:f3:93:14:6b:52: 69:06:7c:d1:1c:cc:f7:00:a4:ef:91:c2:12:43:87: df:68:b6:de:5c:63:d8:70:75:51:83:d4:01:e1:01: f1:28:53:1c:22:bc:35:30:13:b8:03:d0:80:07:5c: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:4F:1D:15:90:C5:B5:4E:55:D0:80:01:49:2F:61:AD:98:90:1A X509v3 Authority Key Identifier: keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c8:d3:d7:ce:c1:a8:ce:c3:4d:0f:9d:bd:c9:23:75:9c:75: 94:2e:9f:9b:5c:a5:09:2c:8b:a0:76:8f:3e:e9:cf:0a:6a:32: c0:74:9c:f9:4d:c6:2d:6c:b6:6e:e2:81:0d:c9:19:12:6c:1a: 42:a7:96:26:7e:57:eb:12:90:18:65:7c:66:52:ae:04:2e:f7: eb:4a:4a:ca:75:91:05:47:77:79:6a:13:83:92:eb:90:b9:bc: f2:d2:b9:83:7a:0c:aa:e8:67:f0:66:15:36:27:31:c3:b1:59: 77:b7:f1:69:af:ff:c9:0b:b4:1c:7f:aa:f8:cb:39:a6:7e:23: eb:65:67:fa:04:d4:e9:99:58:d1:b7:61:67:6f:c8:22:81:de: 18:73:72:6c:6f:bc:ee:01:3d:58:80:f3:99:3c:64:e1:70:97: 3a:51:40:78:93:e3:ec:cd:18:7b:9d:ae:f3:59:41:05:9a:a7: 5d:27:d6:3b:d0:58:7d:d5:e9:37:e8:b0:98:86:75:73:0e:b9: 72:27:95:3d:98:e3:67:62:b8:55:ae:c3:48:bc:77:c7:cd:83: 04:2e:13:42:99:09:54:77:c3:81:ce:30:10:0d:10:7d:cd:c8: 10:73:c3:c3:8c:a1:84:a9:fe:5f:dc:72:8e:7d:a5:40:d6:e8: 94:e3:48:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4RkMxMTAvBgNVBAUTKDZBREFGQkEyOTk2ODMwQzUxRDY4MUMzMjEyRDA0QjVD NzI0QzEzMUQwHhcNMjUxMTAzMDQxNjMwWhcNMjUxMTEwMDQxNjMwWjAYMRYwFAYD VQQDEw02OTA4MmM5ZS1lOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7g9SzmfjNKVjkRKFAgvZSaK8LMkDIlL5R8es6WEjv+dbS2X7kHGi4V3hwRlH Hc3kB8g1kGm69HuilgwXzRso7SISEU98o/nOk+ZY3OUZHqCEeylsTbqO/j0U5l01 rHwQjTV6sm1wxdcpk8PXQWtNXRjkgjvHbtDJdBHGN9WcedPjl9+Cd8CfTd3ovP4V 9Z3Q7A7pv6nzLdGNrZGwScwavV4SMzkwzLgHOOOQ36cZnBO0NL958PxM1zU6Va0P DOkuYG0b5ZMyH5O1Iu7M85MUa1JpBnzRHMz3AKTvkcISQ4ffaLbeXGPYcHVRg9QB 4QHxKFMcIrw1MBO4A9CAB1z5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu6Tx0V kMW1TlXQgAFJL2GtmJAaMB8GA1UdIwQYMBaAFGra+6KZaDDFHWgcMhLQS1xyTBMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhGQy9GNzM5QTRGOEJE MTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01NVWRhQnd5RXRCTFhISk1F eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0cjdvcGxvTU1VZGFCd3lFdEJMWEhKTUV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhGQy9GNzM5QTRGOEJEMTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01N VWRhQnd5RXRCTFhISk1FeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANyNPXzsGozsNND529ySN1nHWULp+bXKUJLIugdo8+6c8KajLAdJz5 TcYtbLZu4oENyRkSbBpCp5YmflfrEpAYZXxmUq4ELvfrSkrKdZEFR3d5ahODkuuQ ubzy0rmDegyq6GfwZhU2JzHDsVl3t/Fpr//JC7Qcf6r4yzmmfiPrZWf6BNTpmVjR t2Fnb8gigd4Yc3Jsb7zuAT1YgPOZPGThcJc6UUB4k+PszRh7na7zWUEFmqddJ9Y7 0Fh91ek36LCYhnVzDrlyJ5U9mONnYrhVrsNIvHfHzYMELhNCmQlUd8OBzjAQDRB9 zcgQc8PDjKGEqf5f3HKOfaVA1uiU40g7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:51 2025 by rpki-client