$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft File: w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json) Hash identifier: d1DjRdsCri+9SkKc8gToLmNk1F9B8ZVkiYa5qUf995o= Subject key identifier: 94:36:ED:2C:A9:F8:A4:1D:B6:7C:9E:AD:7B:BA:AF:DD:0C:58:84:D0 Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft Manifest number: 014F Signing time: Mon 03 Nov 2025 04:16:16 +0000 Manifest this update: Mon 03 Nov 2025 04:16:15 +0000 Manifest next update: Mon 10 Nov 2025 04:16:15 +0000 Files and hashes: 1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: ZXvVUgUyxEqh+jWcT0mByocaUxRF4feO2d97EEa3udE=) 2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: pN1OWdiGw4OEkjeO/p/GHkPUsCswdzeq2aXMmLYYqcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Validity Not Before: Nov 3 04:16:15 2025 GMT Not After : Nov 10 04:16:15 2025 GMT Subject: CN=69082c8f-749c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0e:f0:be:dd:2b:d1:1f:95:7c:a3:19:ac:69: 6f:4f:a7:4f:93:31:19:1d:97:cb:d6:3f:9f:df:82: 09:81:36:2c:59:f7:d2:ed:e6:18:1c:52:9d:8c:2b: 1b:35:79:8e:64:f5:5f:a2:ea:c2:97:ab:48:f3:0e: 70:4f:c4:69:b8:4f:01:19:8f:de:d3:c5:ea:ed:24: 8b:54:64:40:2e:1b:7d:31:71:8e:e7:65:b2:e7:76: 26:a6:a8:0a:91:7c:47:b9:eb:8e:f3:19:c5:80:77: 81:f5:8b:c5:58:4a:e6:99:79:cc:09:c0:c5:05:89: 55:f0:5d:03:ad:63:42:9c:47:79:a4:4e:6a:39:e4: 8a:ca:6d:ec:6a:fc:71:e5:eb:39:c3:48:43:be:7b: 5e:ca:09:f8:ed:63:0e:28:e0:7f:8c:cd:67:1f:25: 69:c0:52:b0:37:fc:0b:e7:12:98:24:82:62:5d:8a: e8:cd:1d:a6:30:a4:b6:06:12:e6:a9:1c:97:e5:3d: e0:e6:ea:20:74:35:e0:89:a5:44:fd:7c:8b:8c:04: dc:49:54:17:df:e3:5c:5d:a1:ce:3d:1b:84:2c:31: a0:6c:94:cd:c4:75:af:49:7f:88:d6:71:31:41:53: 92:38:8b:ab:fa:9a:aa:de:0e:d4:fd:e3:b1:42:0a: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:36:ED:2C:A9:F8:A4:1D:B6:7C:9E:AD:7B:BA:AF:DD:0C:58:84:D0 X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:57:0f:d9:26:a8:09:ce:27:b9:5a:01:83:d5:5d:19:7e:78: e1:e9:9d:df:ce:94:97:0e:47:a6:90:6c:18:26:ad:0d:60:47: ba:94:a8:31:f2:2c:60:f8:76:97:7f:95:c4:e0:7e:94:97:35: c8:06:e4:f0:5d:e9:b8:6e:08:c7:3f:19:9c:44:a7:7f:fb:f2: 89:56:01:a3:a8:28:63:f6:6c:6b:d5:67:05:d6:30:02:e0:2f: 4e:a1:8d:75:3a:da:42:42:77:19:c1:ff:26:1f:61:23:2e:c3: b2:22:07:31:1e:e6:0e:1d:0b:ad:d2:de:c8:39:10:c4:63:40: 44:02:8a:e7:3a:a9:a9:c8:0c:bb:2c:27:59:fa:89:95:4c:d4: 3f:d4:c1:5e:e5:57:7b:7d:fc:c6:3d:c6:92:d3:78:c1:92:e7: 09:6e:1c:90:ee:fa:be:be:93:ba:af:4e:61:50:05:50:3e:63: b3:c7:85:5a:cd:6e:69:69:8d:81:17:cb:39:49:b9:16:85:71: f1:34:94:95:7b:87:04:4a:b0:f7:35:6b:aa:f4:64:0e:99:8e: 5c:0c:ce:1a:88:9e:d6:fc:60:1d:1d:07:b3:83:1a:4c:55:7c: ac:1e:2e:a4:c2:b5:08:21:02:86:df:af:4f:40:7f:cf:82:8a: 94:93:0e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz NkVBNDVCN0QwHhcNMjUxMTAzMDQxNjE1WhcNMjUxMTEwMDQxNjE1WjAYMRYwFAYD VQQDEw02OTA4MmM4Zi03NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6A7wvt0r0R+VfKMZrGlvT6dPkzEZHZfL1j+f34IJgTYsWffS7eYYHFKdjCsb NXmOZPVfourCl6tI8w5wT8RpuE8BGY/e08Xq7SSLVGRALht9MXGO52Wy53YmpqgK kXxHueuO8xnFgHeB9YvFWErmmXnMCcDFBYlV8F0DrWNCnEd5pE5qOeSKym3savxx 5es5w0hDvnteygn47WMOKOB/jM1nHyVpwFKwN/wL5xKYJIJiXYrozR2mMKS2BhLm qRyX5T3g5uogdDXgiaVE/XyLjATcSVQX3+NcXaHOPRuELDGgbJTNxHWvSX+I1nEx QVOSOIur+pqq3g7U/eOxQgpwWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQ27Syp +KQdtnyerXu6r90MWITQMB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA3MC84MDhCNEQ2Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01 RkZibHpDTVhKSXMyNmtXMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Vw/ZJqgJzie5WgGD1V0Zfnjh6Z3fzpSXDkemkGwYJq0NYEe6lKgx 8ixg+HaXf5XE4H6UlzXIBuTwXem4bgjHPxmcRKd/+/KJVgGjqChj9mxr1WcF1jAC 4C9OoY11OtpCQncZwf8mH2EjLsOyIgcxHuYOHQut0t7IORDEY0BEAornOqmpyAy7 LCdZ+omVTNQ/1MFe5Vd7ffzGPcaS03jBkucJbhyQ7vq+vpO6r05hUAVQPmOzx4Va zW5paY2BF8s5SbkWhXHxNJSVe4cESrD3NWuq9GQOmY5cDM4aiJ7W/GAdHQezgxpM VXysHi6kwrUIIQKG369PQH/PgoqUkw4X -----END CERTIFICATE-----Generated at Tue Nov 4 14:06:09 2025 by rpki-client