$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: bRkTPtjCD8aJpOhMQnnBT598mPZwqO16tvw5CJQF0PI= Subject key identifier: D6:10:02:FD:55:BD:51:01:83:1D:3C:81:11:FC:88:3A:EA:07:A7:73 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 18B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 18A0 Signing time: Sun 02 Nov 2025 16:28:59 +0000 Manifest this update: Sun 02 Nov 2025 16:28:59 +0000 Manifest next update: Sun 09 Nov 2025 16:28:59 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: LmizXkxXrHC1s/HwyFsp5DmkGJeSfRlNH18+J9DDCls=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6321 (0x18b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Nov 2 16:28:59 2025 GMT Not After : Nov 9 16:28:59 2025 GMT Subject: CN=690786cb-b2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:4b:23:d6:25:e8:ce:58:3d:61:7d:a6:a8: 31:b3:2f:70:27:9e:f5:29:f2:b9:b3:50:25:56:b4: 7e:77:6f:e0:95:90:b6:bd:84:f4:ec:99:c5:b5:ac: fa:01:5f:ad:30:c9:21:98:0c:6c:04:7e:d4:49:e7: ed:34:cc:67:cc:6c:05:01:3b:bf:36:97:22:dc:7e: 43:d4:41:ce:aa:a7:0b:27:ed:dd:0f:75:7c:ba:7e: e4:34:25:96:14:97:aa:de:d8:77:17:4f:df:9f:05: 48:42:d8:1f:2c:7a:c2:e3:c0:b3:2c:d3:72:a1:55: d6:8b:10:ad:ed:99:4f:49:f9:b3:8b:a3:df:f2:0c: 8a:da:2d:a6:95:80:45:65:85:94:86:72:e7:02:3b: bf:11:54:8b:56:5d:cf:e0:69:e5:8a:53:73:ea:50: 9d:62:b5:ff:cf:d1:69:2e:32:4d:d3:f3:2c:da:ba: dc:60:ba:7e:5e:3a:ad:fe:6d:42:d9:22:12:f4:4a: 8b:67:c1:a7:19:ee:c0:0e:51:51:1f:42:2e:47:f4: 00:00:6b:2d:82:ca:41:64:0f:4d:0c:a6:1e:ac:9d: 92:fd:b5:1d:de:32:31:67:ca:6e:34:2b:58:9e:53: bb:74:e0:e8:74:6e:74:4c:e2:83:30:28:02:75:20: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:02:FD:55:BD:51:01:83:1D:3C:81:11:FC:88:3A:EA:07:A7:73 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:51:4a:22:80:45:ba:72:ab:cb:9a:74:9b:6c:29:8a:6e:3f: 04:0e:e7:fc:5d:1f:e2:61:d9:97:b4:2e:b7:d0:60:65:3d:fe: 2c:ef:7f:54:17:45:cf:44:5d:68:5d:77:e5:35:3a:72:55:36: 25:16:5c:2b:93:0b:e1:50:40:e8:c6:1a:1c:47:f5:0b:ee:fe: 63:33:37:52:24:36:61:bc:b5:da:68:f9:a4:ba:d4:18:55:7e: 13:34:77:56:7b:4a:4b:c0:7d:29:87:74:b6:75:53:ca:1c:db: 79:0a:d1:c2:41:36:9b:cd:e3:9b:e2:fe:14:c0:8a:8a:02:3f: 37:a9:69:ab:84:dd:cd:86:64:cf:f8:f8:68:8d:1e:bc:1f:71: 6d:f4:d8:be:6f:33:92:4c:87:05:67:0a:a3:2e:d5:68:5b:16: 30:70:ba:6c:63:28:76:ea:49:8f:3f:7f:fd:ca:12:9d:ef:37: 3b:30:50:13:56:d6:ff:27:e1:63:df:71:c9:f5:1b:d0:18:7d: 0e:72:1f:d3:16:1a:24:80:7c:8d:8f:64:4d:3d:6a:c8:24:a8: 48:06:6c:b8:21:ca:bd:88:8b:24:39:16:36:5d:16:9e:b8:05: 86:5e:ae:1c:96:2c:73:97:4e:7c:ef:1d:b2:96:d4:57:c6:0c: e9:44:74:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUxMTAyMTYyODU5WhcNMjUxMTA5MTYyODU5WjAYMRYwFAYD VQQDEw02OTA3ODZjYi1iMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWdLI9Yl6M5YPWF9pqgxsy9wJ571KfK5s1AlVrR+d2/glZC2vYT07JnFtaz6 AV+tMMkhmAxsBH7USeftNMxnzGwFATu/Npci3H5D1EHOqqcLJ+3dD3V8un7kNCWW FJeq3th3F0/fnwVIQtgfLHrC48CzLNNyoVXWixCt7ZlPSfmzi6Pf8gyK2i2mlYBF ZYWUhnLnAju/EVSLVl3P4GnlilNz6lCdYrX/z9FpLjJN0/Ms2rrcYLp+Xjqt/m1C 2SIS9EqLZ8GnGe7ADlFRH0IuR/QAAGstgspBZA9NDKYerJ2S/bUd3jIxZ8puNCtY nlO7dODodG50TOKDMCgCdSD1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYQAv1V vVEBgx08gRH8iDrqB6dzMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0UUoigEW6cqvLmnSbbCmKbj8EDuf8XR/iYdmXtC630GBlPf4s739U F0XPRF1oXXflNTpyVTYlFlwrkwvhUEDoxhocR/UL7v5jMzdSJDZhvLXaaPmkutQY VX4TNHdWe0pLwH0ph3S2dVPKHNt5CtHCQTabzeOb4v4UwIqKAj83qWmrhN3NhmTP +PhojR68H3Ft9Ni+bzOSTIcFZwqjLtVoWxYwcLpsYyh26kmPP3/9yhKd7zc7MFAT Vtb/J+Fj33HJ9RvQGH0Och/TFhokgHyNj2RNPWrIJKhIBmy4Icq9iIskORY2XRae uAWGXq4clixzl0587x2yltRXxgzpRHRg -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:07 2025 by rpki-client