$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: I7Y12BpYRXyT3Wkr8HTaDcpbz0lanGFMfGj0ad6jiB8= Subject key identifier: 54:18:BA:76:79:B4:3A:35:4F:21:78:EC:00:13:2D:1B:D8:43:98:D4 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: 0145 Signing time: Sat 01 Nov 2025 04:42:17 +0000 Manifest this update: Sat 01 Nov 2025 04:42:16 +0000 Manifest next update: Sat 08 Nov 2025 04:42:16 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: Rfvcpz3sPP0aEgkQv6RvAjjIe60uiJYWJueDE9Zm9VE=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 04:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Nov 1 04:42:16 2025 GMT Not After : Nov 8 04:42:16 2025 GMT Subject: CN=69058fa8-1c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:5c:79:ab:0c:80:29:9c:54:9e:84:37:5e: 98:04:7f:7e:95:a0:2f:e0:31:5d:d8:cf:36:c4:48: ae:5d:71:9b:44:51:e6:5d:f8:b6:e5:a4:83:3d:93: f4:7b:14:44:48:21:3f:73:68:df:e6:31:c6:b4:a8: 46:7b:8d:ae:66:28:ef:36:11:74:2d:b8:12:5c:64: de:16:dc:0b:9a:27:37:f1:9c:97:6a:17:b4:8d:2e: a0:f0:2d:41:db:48:bb:71:d7:ee:63:0c:81:4b:b5: 1a:8b:fd:2e:9c:9e:d3:b4:16:84:0f:ac:a9:86:f0: a6:fe:29:2e:65:5e:1a:9b:58:e1:f6:71:ef:4e:75: 3a:c2:cf:db:eb:a5:43:01:99:49:84:45:68:ad:1c: 64:48:a6:da:d7:7d:b5:f9:62:47:3f:f9:8b:00:12: 7d:a7:6c:26:ba:47:7a:02:42:98:07:c6:99:a9:86: 60:f5:db:48:b3:4c:3b:ea:85:03:94:e9:10:4b:94: e9:60:b6:44:c3:63:6f:60:6d:48:fa:d6:65:9f:2d: 19:e1:3c:bd:4f:59:62:8e:df:7b:43:88:6b:bc:6e: 92:06:0d:3d:5e:a7:d8:70:8e:df:b5:a6:53:97:6d: 0b:22:ef:e1:9f:80:8b:b5:ac:7c:01:c8:3d:e0:c0: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:BA:76:79:B4:3A:35:4F:21:78:EC:00:13:2D:1B:D8:43:98:D4 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:fa:c4:61:d9:7f:1a:ba:19:2f:ee:ff:7d:73:c0:a8:1b:c7: 34:bb:9e:c3:a6:3b:1c:16:7f:a3:63:29:6f:ed:1c:fa:5c:5d: ce:ae:e5:22:39:58:86:d6:99:31:84:13:01:c1:28:dd:47:53: 25:79:9a:c5:67:ee:d5:88:99:a7:84:2a:19:61:29:77:74:5d: 78:3c:a6:5a:c5:99:e3:14:59:c7:14:bc:9b:bc:27:88:c2:70: bd:79:ae:86:37:9b:bb:6f:3e:31:9d:73:f7:2b:01:2f:e2:4b: ea:44:39:09:c0:00:04:9c:40:22:61:51:e7:e3:48:c7:b1:04: 4a:44:1e:15:ba:26:66:25:61:5b:f4:8b:06:e4:21:ba:64:9d: e4:63:1c:e1:53:d4:a2:f8:70:51:e0:30:8a:fc:b3:bf:21:15: c7:5b:50:41:d2:4c:26:08:57:e5:bf:85:d4:9c:43:90:ea:8a: 5a:11:ba:ef:95:68:67:64:15:99:a4:4f:9c:4b:bc:0b:7b:bd: 52:34:31:4e:f8:77:17:4c:e3:e2:0d:05:cc:15:c8:02:7a:c8: 49:3a:a0:e0:75:e2:8e:c4:f7:b1:cb:f2:8d:49:51:f5:26:0b: 54:94:07:0c:11:59:6a:47:46:bf:fb:a7:7f:1c:d8:d6:53:b0: b3:7f:e5:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUxMTAxMDQ0MjE2WhcNMjUxMTA4MDQ0MjE2WjAYMRYwFAYD VQQDEw02OTA1OGZhOC0xYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnVceasMgCmcVJ6EN16YBH9+laAv4DFd2M82xEiuXXGbRFHmXfi25aSDPZP0 exRESCE/c2jf5jHGtKhGe42uZijvNhF0LbgSXGTeFtwLmic38ZyXahe0jS6g8C1B 20i7cdfuYwyBS7Uai/0unJ7TtBaED6yphvCm/ikuZV4am1jh9nHvTnU6ws/b66VD AZlJhEVorRxkSKba1321+WJHP/mLABJ9p2wmukd6AkKYB8aZqYZg9dtIs0w76oUD lOkQS5TpYLZEw2NvYG1I+tZlny0Z4Ty9T1lijt97Q4hrvG6SBg09XqfYcI7ftaZT l20LIu/hn4CLtax8Acg94MBAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQYunZ5 tDo1TyF47AATLRvYQ5jUMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW+sRh2X8auhkv7v99c8CoG8c0u57DpjscFn+jYylv7Rz6XF3OruUi OViG1pkxhBMBwSjdR1MleZrFZ+7ViJmnhCoZYSl3dF14PKZaxZnjFFnHFLybvCeI wnC9ea6GN5u7bz4xnXP3KwEv4kvqRDkJwAAEnEAiYVHn40jHsQRKRB4VuiZmJWFb 9IsG5CG6ZJ3kYxzhU9Si+HBR4DCK/LO/IRXHW1BB0kwmCFflv4XUnEOQ6opaEbrv lWhnZBWZpE+cS7wLe71SNDFO+HcXTOPiDQXMFcgCeshJOqDgdeKOxPexy/KNSVH1 JgtUlAcMEVlqR0a/+6d/HNjWU7Czf+UG -----END CERTIFICATE-----Generated at Sat Nov 1 13:38:10 2025 by rpki-client