$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: W/t5pQmu8Fj5LV/dYQB8lUVKGybG3ATzsNz3HC+SBLI= Subject key identifier: 50:61:43:92:77:0A:0C:9B:35:2A:07:99:3A:E2:CA:3C:60:68:FC:F8 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E3E Signing time: Sun 02 Nov 2025 17:49:59 +0000 Manifest this update: Sun 02 Nov 2025 17:49:58 +0000 Manifest next update: Sun 09 Nov 2025 17:49:58 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: KW0TLHaVO0X32/YzrvDwAoE2iyQB0dwYjgK+UQLig0w=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: DurC24jDEySwBvnHLWPC4SxsoJWd0wHtB7dUrheJ8l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Nov 2 17:49:58 2025 GMT Not After : Nov 9 17:49:58 2025 GMT Subject: CN=690799c6-faad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:77:fc:25:52:bf:0e:58:73:19:f7:0c:75: e1:74:d3:d5:e6:28:eb:fd:eb:4b:07:84:42:da:75: ac:1d:fc:ec:a2:13:20:79:66:d8:36:f5:5c:bc:6e: 8c:3f:f8:36:80:c2:f9:eb:98:9f:b5:af:f6:c9:e8: 41:e9:a0:e0:c4:2b:c3:04:69:3e:a8:a3:01:81:0d: 7c:cb:64:57:81:92:35:9f:a6:1c:bd:bf:22:98:24: 65:6d:2d:32:a6:89:13:5b:16:57:5f:14:8f:c8:c7: 61:cf:d2:ed:f3:1b:ec:c9:0a:53:1b:77:7a:23:40: 86:c9:98:fd:80:41:e4:83:33:1d:6d:56:27:0b:70: 17:5b:7a:4e:1f:9e:32:25:45:f9:03:4f:a2:e3:b2: 0c:e3:f3:5b:1a:e1:4f:3e:69:ab:d4:73:dc:38:9d: fb:be:03:26:d0:69:e2:5e:63:23:5d:c5:9a:d8:60: e8:cf:f7:e5:f4:9f:11:aa:f1:b2:21:a1:34:3a:7e: f8:2e:3e:eb:94:f8:0d:75:25:c6:4e:dc:da:1c:26: d4:7e:99:f9:d4:ab:5e:24:8a:96:b9:f6:59:78:eb: 6e:bf:93:57:46:e4:f9:4f:24:41:71:66:cf:6e:39: 2f:30:ec:b4:e3:7c:2d:b6:70:a3:43:a8:77:d0:bc: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:61:43:92:77:0A:0C:9B:35:2A:07:99:3A:E2:CA:3C:60:68:FC:F8 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:20:06:31:b9:2f:00:f1:2a:ee:9e:3c:e7:e8:1a:7c:88:6b: ef:ac:38:87:e6:a1:e1:4d:04:78:e4:bb:33:b2:a8:e0:bb:98: 0e:77:62:df:31:9b:40:a4:b7:3a:67:32:b5:35:cb:94:ff:9d: 94:02:34:ce:82:aa:ea:92:36:45:b9:2b:92:6c:84:a7:d3:cd: a6:eb:db:36:58:b6:02:57:8d:2a:81:af:09:ec:1a:7e:68:10: 32:d5:63:33:f7:ef:78:d1:6b:54:45:5d:b4:e9:e9:da:32:f6: 58:63:b2:92:f3:c1:59:3b:c6:9a:5b:b8:9c:91:8e:d5:a0:03: 02:e1:c6:a5:4c:f5:32:cf:c3:55:6a:3e:53:b1:7c:9d:c3:34: 31:19:41:3a:3c:11:ea:38:3b:39:db:02:96:eb:9b:f3:3a:66: c4:d3:ff:27:e0:0a:97:ec:b2:db:24:68:e3:43:f3:d8:f6:db: 50:ab:83:60:c9:b3:3e:6d:30:0e:09:09:6d:f3:8c:19:42:b4: 27:c4:c3:46:2f:f7:c0:44:ea:49:bd:d3:90:0c:0a:bd:22:a1: ed:43:8f:c9:5b:37:6e:46:4c:29:e3:5f:08:3c:ef:13:c2:b9: 86:27:d7:7e:dc:9a:76:90:82:7b:a0:5f:75:6e:9b:62:65:05: 66:34:c6:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUxMTAyMTc0OTU4WhcNMjUxMTA5MTc0OTU4WjAYMRYwFAYD VQQDEw02OTA3OTljNi1mYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xF3/CVSvw5Ycxn3DHXhdNPV5ijr/etLB4RC2nWsHfzsohMgeWbYNvVcvG6M P/g2gML565ifta/2yehB6aDgxCvDBGk+qKMBgQ18y2RXgZI1n6Ycvb8imCRlbS0y pokTWxZXXxSPyMdhz9Lt8xvsyQpTG3d6I0CGyZj9gEHkgzMdbVYnC3AXW3pOH54y JUX5A0+i47IM4/NbGuFPPmmr1HPcOJ37vgMm0GniXmMjXcWa2GDoz/fl9J8RqvGy IaE0On74Lj7rlPgNdSXGTtzaHCbUfpn51KteJIqWufZZeOtuv5NXRuT5TyRBcWbP bjkvMOy043wttnCjQ6h30LzkEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBhQ5J3 CgybNSoHmTriyjxgaPz4MB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATIAYxuS8A8Srunjzn6Bp8iGvvrDiH5qHhTQR45Lszsqjgu5gOd2Lf MZtApLc6ZzK1NcuU/52UAjTOgqrqkjZFuSuSbISn082m69s2WLYCV40qga8J7Bp+ aBAy1WMz9+940WtURV206enaMvZYY7KS88FZO8aaW7ickY7VoAMC4calTPUyz8NV aj5TsXydwzQxGUE6PBHqODs52wKW65vzOmbE0/8n4AqX7LLbJGjjQ/PY9ttQq4Ng ybM+bTAOCQlt84wZQrQnxMNGL/fAROpJvdOQDAq9IqHtQ4/JWzduRkwp418IPO8T wrmGJ9d+3Jp2kIJ7oF91bptiZQVmNMZx -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:29 2025 by rpki-client