$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: WNl6HGsg4Zp1UV/2+wlsnOP+pMweHTNh0qA00sXdgCw= Subject key identifier: D4:08:22:9D:A1:C6:58:6D:E3:CA:97:C5:00:2D:44:8F:41:0F:53:80 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: 0140 Signing time: Wed 05 Nov 2025 04:34:00 +0000 Manifest this update: Wed 05 Nov 2025 04:33:59 +0000 Manifest next update: Wed 12 Nov 2025 04:33:59 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: Cy13+t1R/K+xwPK1dChI+RpMlHW7rVcqLjfjUawmpZg=) 2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=) 3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Nov 5 04:33:59 2025 GMT Not After : Nov 12 04:33:59 2025 GMT Subject: CN=690ad3b7-ba91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:f9:73:c8:a5:d7:de:3a:7f:b3:cd:f3:0a: 2f:5e:5d:7d:ec:b3:03:26:28:7a:97:cf:6d:a7:12: db:0f:a3:e2:cf:7e:fa:b4:d5:ec:bc:ae:c5:bb:c5: ba:14:2e:85:d6:bf:e1:53:f3:80:35:9a:1b:38:9e: da:b8:e0:57:c7:a1:70:1a:1d:f9:9a:42:31:0e:22: f0:6a:d4:e1:68:64:df:88:ac:5b:6f:c1:b7:ac:63: 3e:a6:f7:88:c0:cb:21:5d:5b:a8:a1:8b:0a:91:61: 33:d4:0f:8b:5b:f2:da:37:b3:83:5a:7a:69:b8:4d: b9:a5:f1:e5:b3:f8:7d:93:b4:1c:1d:ec:01:91:e8: 44:72:36:d1:21:33:9b:1a:f4:16:37:20:a8:38:f1: 04:c9:ef:4c:fe:dd:aa:c3:cd:fa:72:56:28:f6:cb: 10:5e:df:f9:76:c4:33:47:02:2f:65:0f:6e:80:d0: 07:e5:80:a3:0a:a8:b8:6b:9a:a1:0a:6b:ac:0e:58: bf:42:f6:89:fd:11:b6:e0:aa:8f:37:f5:93:eb:4b: dc:ae:b8:48:01:14:c5:3d:ea:5d:c1:2a:05:77:46: ab:f8:e7:ee:5f:1b:8f:e2:13:e0:04:60:94:ad:0f: db:1f:3e:dc:2c:cc:ed:74:07:a8:9d:2b:63:e5:86: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:08:22:9D:A1:C6:58:6D:E3:CA:97:C5:00:2D:44:8F:41:0F:53:80 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:9f:4d:70:27:7e:7d:2f:63:a7:ea:f8:71:96:34:a5:c8: 9b:69:dc:77:d4:68:4f:9b:e1:40:bc:fa:7d:7f:78:d2:c2:01: db:f5:a8:79:c6:ad:17:58:be:c3:88:a2:8b:17:e8:eb:35:7a: 61:89:ba:83:db:b3:73:bd:aa:2b:9b:8e:05:3d:64:d8:91:e0: 58:3c:5c:48:87:05:95:b2:a0:8a:dd:0f:d8:4b:f1:80:66:2a: 1f:ca:ce:58:92:de:1a:e5:a7:18:c3:e2:d2:c4:dc:2a:52:c3: 20:84:16:d8:4a:fb:b2:56:9b:eb:64:c4:f5:8a:14:e6:02:4f: 1d:3c:1b:f6:c9:f3:14:85:b0:50:1a:7c:f4:f9:28:65:4f:65: 7e:87:8e:c8:18:aa:c9:ed:bc:ef:04:5b:45:40:57:7a:26:ae: 70:1e:47:d0:87:7c:dd:52:1e:94:70:45:d7:69:55:8a:81:f3: b8:f9:c8:d6:09:b4:c8:08:4c:0f:ad:e8:0f:fe:9f:5b:7b:e1: dc:c8:24:70:09:c5:14:8e:a1:67:73:16:dc:05:d3:41:e0:6f: e5:cd:a1:ee:46:10:cd:b4:3b:30:d5:bc:30:18:38:60:d3:58: af:bf:ad:94:5e:e0:e3:70:e6:ae:a4:fc:10:c5:69:db:db:1b: bc:2d:a3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUxMTA1MDQzMzU5WhcNMjUxMTEyMDQzMzU5WjAYMRYwFAYD VQQDEw02OTBhZDNiNy1iYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+L5c8il1946f7PN8wovXl197LMDJih6l89tpxLbD6Piz376tNXsvK7Fu8W6 FC6F1r/hU/OANZobOJ7auOBXx6FwGh35mkIxDiLwatThaGTfiKxbb8G3rGM+pveI wMshXVuooYsKkWEz1A+LW/LaN7ODWnppuE25pfHls/h9k7QcHewBkehEcjbRITOb GvQWNyCoOPEEye9M/t2qw836clYo9ssQXt/5dsQzRwIvZQ9ugNAH5YCjCqi4a5qh CmusDli/QvaJ/RG24KqPN/WT60vcrrhIARTFPepdwSoFd0ar+OfuXxuP4hPgBGCU rQ/bHz7cLMztdAeonStj5YZNmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQIIp2h xlht48qXxQAtRI9BD1OAMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh V0F5d0M4TWlJSW5FQklybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVRJ9NcCd+fS9jp+r4cZY0pcibadx31GhPm+FAvPp9f3jSwgHb9ah5 xq0XWL7DiKKLF+jrNXphibqD27Nzvaorm44FPWTYkeBYPFxIhwWVsqCK3Q/YS/GA Ziofys5Ykt4a5acYw+LSxNwqUsMghBbYSvuyVpvrZMT1ihTmAk8dPBv2yfMUhbBQ Gnz0+ShlT2V+h47IGKrJ7bzvBFtFQFd6Jq5wHkfQh3zdUh6UcEXXaVWKgfO4+cjW CbTICEwPregP/p9be+HcyCRwCcUUjqFncxbcBdNB4G/lzaHuRhDNtDsw1bwwGDhg 01ivv62UXuDjcOaupPwQxWnb2xu8LaOR -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:49 2025 by rpki-client