$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: b5WEPly/wLxMgPkZ855pu1sS4/ng3DBqYGeAj4HV7Ns= Subject key identifier: 84:86:C2:77:07:E8:C4:38:73:FA:D2:37:52:8E:50:55:F7:B5:43:1A Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 351C Signing time: Sun 02 Nov 2025 14:21:41 +0000 Manifest this update: Sun 02 Nov 2025 14:21:41 +0000 Manifest next update: Sun 09 Nov 2025 14:21:41 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: g+mmGyZSDMoWJPUzzBPWRXPR0uU25r3DPEXPhOuOlUM=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: kSoWVtHpQDZmqJOLsTM1OyzxMP9B0go+eKmJku7wZ+M=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: xIEk46u13Lcmpz8W5GI7/U4Vwo0brhJQ4NAAEPzEgVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Nov 2 14:21:41 2025 GMT Not After : Nov 9 14:21:41 2025 GMT Subject: CN=690768f5-1f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:05:92:2a:78:b3:c8:e3:56:27:c2:2d:92: e9:0e:da:cd:c2:98:e6:0d:aa:49:6a:e9:7d:19:71: 3c:6b:f6:29:30:d1:fe:ec:4c:4d:da:7c:77:e9:84: 6f:30:47:5a:e8:92:e1:ec:0c:80:50:dd:f9:f8:6a: 86:14:23:5f:59:cb:a0:49:38:53:39:a6:43:86:85: 4b:c6:b2:03:a0:0d:a0:37:62:b2:66:b9:94:9c:c0: d6:0f:c6:cf:a5:ff:d7:d0:50:02:2a:e0:a4:15:0b: 4d:cb:f5:72:b6:7a:f5:88:ae:e0:c9:d4:4b:2f:a9: 21:74:95:2f:ab:25:80:32:33:fe:dd:f6:bc:84:60: 2e:f1:8b:26:b6:bc:70:53:18:25:c8:bc:12:ce:a6: 2d:1d:88:15:eb:ba:5a:4f:f1:df:77:a0:33:d2:e0: 8d:5c:7d:d8:58:a7:22:af:5a:17:2e:d0:72:a2:48: ad:5d:1a:05:e6:2b:fb:76:7e:59:68:92:41:01:67: d0:4b:e2:d8:cb:da:a8:e8:71:aa:03:f3:51:b4:d9: c6:61:93:06:cc:be:a2:60:a1:d6:09:3f:8b:d4:d8: 7d:39:aa:cb:1e:0e:1b:90:6c:43:4c:bb:09:f9:34: 25:97:5b:f3:54:33:d8:7e:f1:0d:38:85:c0:7c:1f: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:C2:77:07:E8:C4:38:73:FA:D2:37:52:8E:50:55:F7:B5:43:1A X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1a:ab:f9:31:a4:08:3c:43:71:0d:5c:a3:d4:48:b8:5e:6d: e6:b4:cb:46:a8:e7:2b:a5:04:8b:3b:03:96:d2:5f:19:18:e1: 44:26:10:5f:dd:bb:a7:81:26:8c:5a:d1:e9:89:d4:41:3e:42: fb:71:c7:a1:94:a8:98:84:af:f5:1b:18:c7:d8:58:f2:ce:1d: 8d:e4:f5:7f:94:1f:c4:ca:b4:ce:42:2b:47:bb:af:8b:51:df: bc:31:09:92:b5:90:a6:8f:53:e1:f5:d7:1f:98:2c:bb:ea:cf: 30:2d:1c:f1:96:10:2d:ac:7a:36:57:ea:3e:6e:0e:06:e0:25: 7c:2f:4c:8e:14:ae:82:6a:11:3c:30:45:b4:68:63:bc:88:ea: 75:fc:80:6c:0e:6a:bf:e5:90:e2:b7:a1:d8:98:eb:8a:e4:0b: b6:87:24:0f:00:c6:0d:99:fa:19:a6:d5:8c:e1:ff:be:31:93: f8:49:15:5a:55:c8:90:56:e9:d0:17:f7:90:15:7c:ec:14:59: fc:73:ad:d8:50:96:75:40:be:62:24:1e:9a:93:63:bc:e6:c1: 84:2b:09:81:f8:53:2d:3b:31:f9:26:df:2a:e4:09:25:db:18: ae:d6:35:d7:fe:9b:47:0f:52:56:9b:86:96:62:37:24:24:4b: c1:d8:e7:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUxMTAyMTQyMTQxWhcNMjUxMTA5MTQyMTQxWjAYMRYwFAYD VQQDEw02OTA3NjhmNS0xZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA040Fkip4s8jjVifCLZLpDtrNwpjmDapJaul9GXE8a/YpMNH+7ExN2nx36YRv MEda6JLh7AyAUN35+GqGFCNfWcugSThTOaZDhoVLxrIDoA2gN2KyZrmUnMDWD8bP pf/X0FACKuCkFQtNy/Vytnr1iK7gydRLL6khdJUvqyWAMjP+3fa8hGAu8Ysmtrxw UxglyLwSzqYtHYgV67paT/Hfd6Az0uCNXH3YWKcir1oXLtByokitXRoF5iv7dn5Z aJJBAWfQS+LYy9qo6HGqA/NRtNnGYZMGzL6iYKHWCT+L1Nh9OarLHg4bkGxDTLsJ +TQll1vzVDPYfvENOIXAfB/VCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISGwncH 6MQ4c/rSN1KOUFX3tUMaMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbGqv5MaQIPENxDVyj1Ei4Xm3mtMtGqOcrpQSLOwOW0l8ZGOFEJhBf 3bungSaMWtHpidRBPkL7ccehlKiYhK/1GxjH2Fjyzh2N5PV/lB/EyrTOQitHu6+L Ud+8MQmStZCmj1Ph9dcfmCy76s8wLRzxlhAtrHo2V+o+bg4G4CV8L0yOFK6CahE8 MEW0aGO8iOp1/IBsDmq/5ZDit6HYmOuK5Au2hyQPAMYNmfoZptWM4f++MZP4SRVa VciQVunQF/eQFXzsFFn8c63YUJZ1QL5iJB6ak2O85sGEKwmB+FMtOzH5Jt8q5Akl 2xiu1jXX/ptHD1JWm4aWYjckJEvB2Ofl -----END CERTIFICATE-----Generated at Tue Nov 4 04:04:23 2025 by rpki-client