$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json) Hash identifier: 8ugiflzLS4NzIrD6tuPrWmiiKpLfumCuzwwmkj2M39E= Subject key identifier: 95:54:60:7E:7B:1F:5D:E3:9D:7D:9E:7B:42:8C:3A:6D:8D:BE:C5:04 Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft Manifest number: 023D Signing time: Wed 05 Nov 2025 01:54:38 +0000 Manifest this update: Wed 05 Nov 2025 01:54:38 +0000 Manifest next update: Wed 12 Nov 2025 01:54:38 +0000 Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: w4izPf9DTiNk8Yni+dvzKds89JWRPc73Zhh43fAmnVQ=) 2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 79hpZAVwx1DDoLtalxNbxLsW7+220EotRranSNFA/dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Validity Not Before: Nov 5 01:54:38 2025 GMT Not After : Nov 12 01:54:38 2025 GMT Subject: CN=690aae5e-9fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:c1:c7:c0:5d:cb:9d:5b:34:6a:4a:e2:25: 62:67:6e:43:1f:f7:51:d6:11:dd:38:70:74:16:9d: d3:31:5a:93:d0:70:37:d2:1c:5d:e3:be:f7:97:a2: 2a:b4:74:14:c6:ed:7f:24:5d:6c:dc:1f:62:19:4e: 36:cc:e9:74:48:ca:7e:19:26:7d:5f:e7:d1:f2:66: 42:2d:8e:9a:25:22:31:fe:16:1e:01:12:d6:b7:b0: 97:53:50:00:b9:7b:66:dd:fb:ca:5a:6f:9e:16:e8: 5e:cf:60:65:d7:65:66:3c:9d:80:ad:f0:26:04:14: 65:af:fa:87:fd:ae:d2:88:fb:34:23:a9:19:85:f1: 4a:57:20:92:1b:ed:de:de:91:b1:26:3b:c6:6f:94: 62:85:6d:ed:17:a5:d2:e6:99:24:3d:04:b1:d8:c4: c1:0c:6c:e3:b9:f8:4f:0e:0a:a1:05:fe:20:3c:75: c4:92:f6:0e:31:69:66:fa:31:a3:80:01:61:a5:9d: 50:fe:7b:fb:26:89:18:e0:c3:6e:68:0e:01:f5:55: ae:49:ca:f1:01:e2:2e:f3:76:4f:5e:ec:83:b4:95: 45:1a:d6:38:a5:0e:6b:89:2b:08:5a:22:dc:06:92: 35:63:2b:36:f6:c5:2f:7a:76:99:f6:d9:d2:88:3d: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:60:7E:7B:1F:5D:E3:9D:7D:9E:7B:42:8C:3A:6D:8D:BE:C5:04 X509v3 Authority Key Identifier: keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:87:09:08:fe:a9:f7:69:38:d2:18:33:c6:82:a3:63:16:47: 81:95:64:3c:21:f7:97:7b:e3:d0:42:b4:4c:46:7f:ea:17:fa: f7:ce:4a:dd:38:0d:cc:56:68:1f:d0:96:7e:f8:5b:24:3e:8d: 2f:2e:30:96:9c:73:a5:3d:54:0f:40:9c:8e:b5:32:2f:ea:8e: ae:16:ec:01:11:1e:13:7b:c4:49:a5:db:56:ea:ce:7a:73:51: de:c4:f5:74:6f:4a:ef:b6:a5:cd:66:83:19:0f:68:58:db:0b: 09:85:0e:ac:2b:67:f6:e7:f0:84:04:dc:eb:65:28:91:c6:b6: 01:49:ab:de:15:0d:3b:a4:89:70:53:da:ef:a2:76:a8:a9:a5: 2d:2a:2c:f6:58:e7:f6:81:b4:ff:85:fd:8e:a7:59:5b:01:8a: ef:72:07:6e:c9:92:44:b4:1c:07:bc:93:70:cf:87:d4:53:35: 18:cc:19:7c:19:ff:79:94:b4:a2:c2:cc:50:34:aa:f7:46:86: 9c:3e:fa:c3:98:4c:e7:b4:4b:c5:c4:40:59:fe:35:bc:0b:01: 0b:0f:c5:39:a5:33:0c:97:c2:6d:16:46:21:a2:02:f1:79:b6: c8:49:a7:05:31:90:c7:1e:d9:7f:a7:8d:47:9d:d2:7d:b6:a5: dc:ae:0c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF RTREMUQ5OUMwHhcNMjUxMTA1MDE1NDM4WhcNMjUxMTEyMDE1NDM4WjAYMRYwFAYD VQQDEw02OTBhYWU1ZS05ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupfBx8Bdy51bNGpK4iViZ25DH/dR1hHdOHB0Fp3TMVqT0HA30hxd4773l6Iq tHQUxu1/JF1s3B9iGU42zOl0SMp+GSZ9X+fR8mZCLY6aJSIx/hYeARLWt7CXU1AA uXtm3fvKWm+eFuhez2Bl12VmPJ2ArfAmBBRlr/qH/a7SiPs0I6kZhfFKVyCSG+3e 3pGxJjvGb5RihW3tF6XS5pkkPQSx2MTBDGzjufhPDgqhBf4gPHXEkvYOMWlm+jGj gAFhpZ1Q/nv7JokY4MNuaA4B9VWuScrxAeIu83ZPXuyDtJVFGtY4pQ5riSsIWiLc BpI1Yys29sUvenaZ9tnSiD2HgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVUYH57 H13jnX2ee0KMOm2NvsUEMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2hwkI/qn3aTjSGDPGgqNjFkeBlWQ8IfeXe+PQQrRMRn/qF/r3zkrd OA3MVmgf0JZ++FskPo0vLjCWnHOlPVQPQJyOtTIv6o6uFuwBER4Te8RJpdtW6s56 c1HexPV0b0rvtqXNZoMZD2hY2wsJhQ6sK2f25/CEBNzrZSiRxrYBSaveFQ07pIlw U9rvonaoqaUtKiz2WOf2gbT/hf2Op1lbAYrvcgduyZJEtBwHvJNwz4fUUzUYzBl8 Gf95lLSiwsxQNKr3RoacPvrDmEzntEvFxEBZ/jW8CwELD8U5pTMMl8JtFkYhogLx ebbISacFMZDHHtl/p41HndJ9tqXcrgxU -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:20 2025 by rpki-client