$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json) Hash identifier: VGrH5bo8xd3AD9NPEFbUeYzBho3aeKbff9XPlmdb108= Subject key identifier: FF:AA:C5:6E:28:A2:AC:F2:AB:6B:53:4E:36:9D:03:F4:B4:30:D3:55 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 34F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft Manifest number: 34E5 Signing time: Tue 04 Nov 2025 15:03:56 +0000 Manifest this update: Tue 04 Nov 2025 15:03:55 +0000 Manifest next update: Tue 11 Nov 2025 15:03:55 +0000 Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: +f1rJXcp1byLtqF2AyuAIqJm5vzzc9Abbn6N6Y114SM=) 2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=) 3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13554 (0x34f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Nov 4 15:03:55 2025 GMT Not After : Nov 11 15:03:55 2025 GMT Subject: CN=690a15dc-52fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:6d:74:4a:82:3d:bd:35:9a:20:9f:03:70: a7:01:7f:f5:10:17:39:06:0f:76:4e:21:59:c7:02: f3:d2:76:d4:e5:f7:29:08:fd:1e:39:ed:75:1b:a5: 4f:d9:6e:7a:07:42:a3:45:1a:ec:3d:d8:e9:b6:af: c4:0b:bc:c1:2a:a8:de:ac:d4:02:1b:6a:6f:e5:85: 01:0f:76:be:e9:b0:d1:47:bc:c1:58:f4:d9:7d:a2: 55:0d:d6:57:f9:cb:b0:3d:9d:fd:eb:17:f2:3d:98: 17:a1:8f:58:73:cc:e0:e9:f1:b9:f8:0f:cc:ae:8a: bd:92:c0:ac:86:cb:a7:e7:18:74:85:7e:62:85:16: 52:91:1e:52:c0:0f:76:bf:74:c9:ca:e3:0c:6f:8f: 34:54:98:85:f1:9e:4a:d4:b8:2f:0c:66:a2:63:64: 8b:67:01:8a:9d:21:bf:96:f2:45:54:8f:c7:d4:07: fe:40:c4:29:5f:6a:da:60:c1:e9:67:9c:74:b6:cf: 9c:87:75:97:ae:5c:79:ee:df:62:a3:8e:cc:16:91: ec:60:35:a6:3e:fa:b4:16:7d:df:51:fc:73:1d:37: 1e:5c:61:d0:9f:be:87:28:e7:ce:93:cb:a9:11:14: c6:e9:3e:4a:8f:49:ce:ea:6d:31:18:c6:fb:b6:ff: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AA:C5:6E:28:A2:AC:F2:AB:6B:53:4E:36:9D:03:F4:B4:30:D3:55 X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7a:ac:60:74:2f:13:2e:f9:43:a1:78:b0:be:1c:77:50:9f: 38:11:d7:f3:07:6d:a3:fd:91:5a:e1:2d:97:39:0c:67:a5:3f: 73:78:61:82:b1:39:43:47:48:91:e9:30:60:50:3f:fc:8c:1f: 70:6e:ed:29:b2:64:c2:e7:a3:6a:7b:a8:53:cd:2f:c5:4c:a6: 51:73:9f:8d:d7:d6:1b:2a:e3:c3:77:a6:19:6f:4c:8e:a1:33: f6:e0:98:75:61:34:3f:ee:82:cd:04:43:ac:cb:85:e2:69:d8: f1:21:f3:40:66:26:2e:eb:27:b2:4c:46:d2:99:fd:fa:fe:88: c8:f5:48:ba:30:fa:5b:f7:56:b1:28:5b:ba:55:e2:bd:85:64: 37:e3:2c:1e:d3:d4:be:a4:88:66:7c:49:a0:4b:8e:64:89:14: 51:b2:6d:86:b3:06:f8:d4:5e:fa:e1:1b:6c:dc:77:34:f0:c1: 2a:af:33:3b:e1:8b:e4:80:3f:4c:d6:89:d3:54:25:58:6c:d1: 8b:47:3a:bd:89:d8:53:ac:10:e0:bc:67:25:8d:af:36:ed:88: de:5a:7c:46:7c:42:39:62:3f:b0:3f:a3:ab:14:ea:09:37:c3: 16:e6:b4:28:cb:21:c2:01:cd:b4:75:86:15:22:46:99:07:a0: 63:36:73:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUxMTA0MTUwMzU1WhcNMjUxMTExMTUwMzU1WjAYMRYwFAYD VQQDEw02OTBhMTVkYy01MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyedtdEqCPb01miCfA3CnAX/1EBc5Bg92TiFZxwLz0nbU5fcpCP0eOe11G6VP 2W56B0KjRRrsPdjptq/EC7zBKqjerNQCG2pv5YUBD3a+6bDRR7zBWPTZfaJVDdZX +cuwPZ396xfyPZgXoY9Yc8zg6fG5+A/Mroq9ksCshsun5xh0hX5ihRZSkR5SwA92 v3TJyuMMb480VJiF8Z5K1LgvDGaiY2SLZwGKnSG/lvJFVI/H1Af+QMQpX2raYMHp Z5x0ts+ch3WXrlx57t9io47MFpHsYDWmPvq0Fn3fUfxzHTceXGHQn76HKOfOk8up ERTG6T5Kj0nO6m0xGMb7tv8LywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+qxW4o oqzyq2tTTjadA/S0MNNVMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHeqxgdC8TLvlDoXiwvhx3UJ84EdfzB22j/ZFa4S2XOQxnpT9zeGGC sTlDR0iR6TBgUD/8jB9wbu0psmTC56Nqe6hTzS/FTKZRc5+N19YbKuPDd6YZb0yO oTP24Jh1YTQ/7oLNBEOsy4XiadjxIfNAZiYu6yeyTEbSmf36/ojI9Ui6MPpb91ax KFu6VeK9hWQ34ywe09S+pIhmfEmgS45kiRRRsm2Gswb41F764Rts3Hc08MEqrzM7 4YvkgD9M1onTVCVYbNGLRzq9idhTrBDgvGclja827YjeWnxGfEI5Yj+wP6OrFOoJ N8MW5rQoyyHCAc20dYYVIkaZB6BjNnMr -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:51 2025 by rpki-client