$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft File: _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json) Hash identifier: R95arLyqbtaMssEIy5uTJZxS6irFKZOWr9l/jSGoERM= Subject key identifier: CA:95:5E:45:6A:8F:48:0D:4C:2D:0D:C6:46:7C:C2:66:BD:A5:D6:2E Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB Certificate issuer: /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft Manifest number: 01E2 Signing time: Mon 27 Oct 2025 05:04:38 +0000 Manifest this update: Mon 27 Oct 2025 05:04:37 +0000 Manifest next update: Mon 03 Nov 2025 05:04:37 +0000 Files and hashes: 1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: +GfRvHeVjcL7w/K9SYNkSgnjydON4AY9WIycTfip9dM=) 2: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: JOQ3FTCOYnFyVjIC1sbOokkZryNT0nxy6ytkaThHIoc=) 3: C724415E35F911EE9F140449C4F9AE02.roa (hash: Pc8IQ1ldo5iSgY4Srlo9JYYY24JrbIJTNy/Hk8PPyVE=) 4: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: U9cevaQb64/vV8AH9HQirRbkVBcH0enCs25PMnDjBWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB Validity Not Before: Oct 27 05:04:37 2025 GMT Not After : Nov 3 05:04:37 2025 GMT Subject: CN=68fefd66-6971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:bc:e8:27:a0:00:d1:78:70:ad:93:73:62: 4c:a5:75:4c:79:9e:a4:f0:51:82:b8:c1:76:70:0d: 79:18:da:73:9c:a9:b5:06:d7:36:e1:ed:1e:93:fa: fd:8d:b7:05:91:7c:df:5e:72:41:73:26:bd:17:28: 32:0b:c4:71:8d:f5:cd:ab:34:64:fc:f1:d1:ff:aa: 59:8c:43:3b:8e:54:be:21:d1:d4:32:1a:f5:a4:43: da:bb:4e:8d:b9:f8:2f:31:c6:3b:04:2a:87:ed:b4: a8:86:7a:09:05:05:c6:4e:d0:53:56:52:c9:97:99: 15:bf:15:75:ae:de:84:65:06:21:f0:ab:35:c4:fc: c0:58:19:f7:5a:c5:f8:4f:0a:46:d9:30:06:ab:9d: 21:72:a8:64:46:4c:3d:47:16:d3:06:5f:2c:49:0a: 01:aa:c5:1c:61:83:e3:e3:f3:e2:e5:fa:74:39:64: 4e:8e:d0:ce:5a:66:c0:63:94:cc:b7:c1:39:07:86: fd:43:0a:9c:6c:1b:cf:43:5c:8c:13:d2:ec:88:7c: 19:8c:d6:86:3d:49:b9:10:61:ef:63:d5:04:7a:b3: 0b:fa:f8:0c:53:55:56:44:33:97:48:78:88:fe:a8: 10:41:dc:90:92:a0:79:61:82:38:c6:49:9d:f2:67: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:95:5E:45:6A:8F:48:0D:4C:2D:0D:C6:46:7C:C2:66:BD:A5:D6:2E X509v3 Authority Key Identifier: keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:25:98:90:ed:16:95:1a:8a:53:29:a3:dc:6f:a3:6f:ff:f9: e1:d3:10:c8:ad:c5:01:fd:3e:b0:31:c4:fc:7e:dc:77:d5:43: dd:7a:fc:a6:fa:b0:a5:3d:c3:86:3b:76:bb:be:52:9e:86:a3: 77:7f:b4:f6:42:b8:20:45:7b:66:b6:84:78:5b:f5:60:7a:cf: b8:22:be:6e:ac:d9:67:45:e4:49:99:c7:d3:21:df:0f:3a:a4: 2b:06:ce:e2:d6:3c:d0:1f:93:4b:a0:36:41:40:18:0c:1b:ae: 68:a6:c1:3e:8f:da:d4:ff:ea:e1:3e:ed:cd:9d:ff:33:80:1f: 28:a9:fa:0a:b0:53:7a:1f:40:ac:89:f3:3b:a8:9e:7f:e5:d0: d8:98:f2:90:8f:48:ce:20:ee:41:3f:6f:e9:dc:33:c5:ea:95: 4b:49:07:03:3e:b5:21:eb:db:10:96:ee:5d:da:8f:c1:c9:32: a6:d1:c0:ab:74:78:7c:84:65:61:88:58:8e:ca:8a:25:f2:73: 96:79:6f:2a:27:dc:12:f3:e3:b6:ad:1c:4d:d0:54:2b:15:da: 56:ae:0d:95:e4:36:c1:a4:90:91:f2:ac:bc:59:2e:c5:d3:18: 38:02:9a:15:f4:a2:71:0d:aa:62:de:13:5d:8b:5e:89:de:a7: 7c:3f:8b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTMxMTAvBgNVBAUTKEZEQkQ0QzBEMzQ0OTJGNUNFQUU0ODc5RTQ3NjI3OTZF NTI3MDA3RUIwHhcNMjUxMDI3MDUwNDM3WhcNMjUxMTAzMDUwNDM3WjAYMRYwFAYD VQQDEw02OGZlZmQ2Ni02OTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqC86CegANF4cK2Tc2JMpXVMeZ6k8FGCuMF2cA15GNpznKm1Btc24e0ek/r9 jbcFkXzfXnJBcya9FygyC8RxjfXNqzRk/PHR/6pZjEM7jlS+IdHUMhr1pEPau06N ufgvMcY7BCqH7bSohnoJBQXGTtBTVlLJl5kVvxV1rt6EZQYh8Ks1xPzAWBn3WsX4 TwpG2TAGq50hcqhkRkw9RxbTBl8sSQoBqsUcYYPj4/Pi5fp0OWROjtDOWmbAY5TM t8E5B4b9QwqcbBvPQ1yME9LsiHwZjNaGPUm5EGHvY9UEerML+vgMU1VWRDOXSHiI /qgQQdyQkqB5YYI4xkmd8mfJlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqVXkVq j0gNTC0NxkZ8wma9pdYuMB8GA1UdIwQYMBaAFP29TA00SS9c6uSHnkdieW5ScAfr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1My9ENTg2RjhGMDMw NzExMUVFODU0NkEzMkZDNEY5QUUwMi9fYjFNRFRSSkwxenE1SWVlUjJKNWJsSndC LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iMU1EVFJKTDF6cTVJZWVSMko1YmxKd0Itcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ1My9ENTg2RjhGMDMwNzExMUVFODU0NkEzMkZDNEY5QUUwMi9fYjFNRFRSSkwx enE1SWVlUjJKNWJsSndCLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUJZiQ7RaVGopTKaPcb6Nv//nh0xDIrcUB/T6wMcT8ftx31UPdevym +rClPcOGO3a7vlKehqN3f7T2QrggRXtmtoR4W/Vges+4Ir5urNlnReRJmcfTId8P OqQrBs7i1jzQH5NLoDZBQBgMG65opsE+j9rU/+rhPu3Nnf8zgB8oqfoKsFN6H0Cs ifM7qJ5/5dDYmPKQj0jOIO5BP2/p3DPF6pVLSQcDPrUh69sQlu5d2o/ByTKm0cCr dHh8hGVhiFiOyool8nOWeW8qJ9wS8+O2rRxN0FQrFdpWrg2V5DbBpJCR8qy8WS7F 0xg4ApoV9KJxDapi3hNdi16J3qd8P4uK -----END CERTIFICATE-----Generated at Wed Oct 29 00:57:14 2025 by rpki-client