$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: qm2z29JmsLc6q8gzu+5Rips29fwstqMyFxKFaq8tuKc= Subject key identifier: 7D:7E:15:72:F3:E1:19:9B:5E:4B:A1:2A:9B:CA:BC:A7:D1:AC:BC:BC Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 04C6 Signing time: Sat 25 Oct 2025 02:48:31 +0000 Manifest this update: Sat 25 Oct 2025 02:48:31 +0000 Manifest next update: Sat 01 Nov 2025 02:48:31 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: Du693QtTimovF5+EU+MZJafdXzHASGZ/oYBZCBnDA28=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: 7VHkgX/mbThqgLkAc7wHG3m+rvoalBNxxWk0mMeVuao=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: NIvct8fJn9M1iEY9RRPmR0E04PRAFDynGMtQ70vSFyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 02:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 25 02:48:31 2025 GMT Not After : Nov 1 02:48:31 2025 GMT Subject: CN=68fc3a7f-9148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:9e:64:54:9b:85:10:dd:76:6d:b9:27:b9: bb:38:61:b0:68:b2:06:82:42:0a:fa:20:ff:25:3e: 43:12:4c:60:3a:60:81:ba:98:31:94:d7:0e:fa:a1: ca:be:d5:cf:6e:f1:8a:33:a3:69:a4:b0:72:cf:08: 6f:3b:3d:19:81:73:22:0a:3f:78:c4:59:31:ce:8d: 4c:22:8e:cb:ba:c3:39:3f:9f:c9:f4:79:3e:af:9b: b9:f0:ce:d7:82:55:de:24:51:a4:56:c2:29:e6:7b: 81:d6:6f:12:c1:c2:45:34:bd:00:77:41:2a:c5:a3: c3:0e:cb:a9:da:3a:8f:67:7d:b5:67:3a:02:22:35: 26:fd:2d:b8:af:c0:6b:44:bf:cb:38:55:a5:66:30: d5:af:2f:ba:af:82:8c:1b:e0:c2:0e:13:1b:76:6a: 75:fe:ac:92:8d:46:cb:8b:8a:6b:61:07:f4:7e:ad: 66:18:df:1d:58:c9:64:42:55:30:f9:2c:34:5d:d6: c0:9e:1c:1e:ff:47:1f:c6:93:16:92:0e:c8:e3:5e: 0e:c1:e3:a9:bf:4b:c8:79:0d:6f:e3:10:e4:91:34: cd:e5:32:6a:30:29:e4:e4:00:e4:6d:ca:9b:ae:2e: c1:72:81:dc:8a:4d:bf:0e:7e:e2:ae:cb:bc:d4:45: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7E:15:72:F3:E1:19:9B:5E:4B:A1:2A:9B:CA:BC:A7:D1:AC:BC:BC X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9e:c9:c7:e7:a5:32:06:3e:64:91:6a:71:0b:c9:df:77:e3: c3:a5:6e:9e:f3:d8:ac:41:91:3e:8e:d4:44:bf:1e:90:7a:44: 94:2a:55:6a:b9:f6:65:e3:d2:2e:c7:8b:69:c4:46:9f:50:ae: 2d:53:40:be:b1:dd:b3:52:bc:42:c7:2d:f9:b3:0a:dc:b9:85: 9b:c1:95:c8:14:fb:85:8d:7e:9b:dd:b4:2c:74:cd:2e:a0:2b: 6d:87:2e:0d:5b:0d:69:61:da:b1:e1:a9:fa:66:eb:28:63:fc: d4:3e:e4:69:c5:71:a1:41:00:12:1c:b6:14:a6:7c:10:47:ee: d1:0c:f6:2b:02:4b:e9:3f:42:81:e4:94:89:5c:1c:06:3d:1d: 6d:b5:ba:98:01:8b:53:68:69:f8:b1:dc:24:b5:fa:7c:a1:60: c6:92:34:fa:5f:c2:52:9a:40:81:09:02:02:2e:a6:a6:73:e9: 6f:e5:88:61:b7:d9:b3:ea:94:f3:2e:bc:a1:5c:74:ee:63:9e: 78:b5:94:55:54:62:d1:f1:3e:3f:d2:e1:8b:91:7e:2a:42:d6: 44:dc:33:ae:b9:a8:a9:f2:53:45:82:51:ed:4c:d1:32:d2:8d: 8e:73:97:56:7e:1a:7d:6f:cf:90:31:6d:ae:25:82:84:2f:9d: 36:4d:06:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMDI1MDI0ODMxWhcNMjUxMTAxMDI0ODMxWjAYMRYwFAYD VQQDEw02OGZjM2E3Zi05MTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNWeZFSbhRDddm25J7m7OGGwaLIGgkIK+iD/JT5DEkxgOmCBupgxlNcO+qHK vtXPbvGKM6NppLByzwhvOz0ZgXMiCj94xFkxzo1MIo7LusM5P5/J9Hk+r5u58M7X glXeJFGkVsIp5nuB1m8SwcJFNL0Ad0EqxaPDDsup2jqPZ321ZzoCIjUm/S24r8Br RL/LOFWlZjDVry+6r4KMG+DCDhMbdmp1/qySjUbLi4prYQf0fq1mGN8dWMlkQlUw +Sw0XdbAnhwe/0cfxpMWkg7I414OweOpv0vIeQ1v4xDkkTTN5TJqMCnk5ADkbcqb ri7BcoHcik2/Dn7irsu81EUFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1+FXLz 4RmbXkuhKpvKvKfRrLy8MB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMnsnH56UyBj5kkWpxC8nfd+PDpW6e89isQZE+jtREvx6QekSUKlVq ufZl49Iux4tpxEafUK4tU0C+sd2zUrxCxy35swrcuYWbwZXIFPuFjX6b3bQsdM0u oCtthy4NWw1pYdqx4an6ZusoY/zUPuRpxXGhQQASHLYUpnwQR+7RDPYrAkvpP0KB 5JSJXBwGPR1ttbqYAYtTaGn4sdwktfp8oWDGkjT6X8JSmkCBCQICLqamc+lv5Yhh t9mz6pTzLryhXHTuY554tZRVVGLR8T4/0uGLkX4qQtZE3DOuuaip8lNFglHtTNEy 0o2Oc5dWfhp9b8+QMW2uJYKEL502TQYT -----END CERTIFICATE-----Generated at Sun Oct 26 00:44:29 2025 by rpki-client