$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: gt3o7eQJ9pLPqQ09Yk73QC7nkNSaVfpRzw+EgafW56U= Subject key identifier: 08:1A:B6:8F:7E:60:71:A1:CA:C1:56:94:F9:C3:AC:E8:BE:0A:F7:D1 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 018D Signing time: Mon 03 Nov 2025 03:30:20 +0000 Manifest this update: Mon 03 Nov 2025 03:30:20 +0000 Manifest next update: Mon 10 Nov 2025 03:30:20 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: eBduqmOd5wxDdz1kaUvEDJKycWdZ2VU3mX+FNQfqwVI=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Nov 3 03:30:20 2025 GMT Not After : Nov 10 03:30:20 2025 GMT Subject: CN=690821cc-c88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:13:b6:de:a1:24:65:dc:61:38:11:32:67: f6:89:83:9a:56:9b:ae:4f:b4:d3:a0:5e:02:5f:80: 8c:98:12:e7:f3:c1:b1:b9:f4:d0:e8:a2:d8:53:93: 1d:07:7c:f8:05:dc:76:ee:a7:02:bd:d7:b2:7c:c1: 64:12:e9:18:b4:93:15:22:ef:e1:e0:20:00:bc:29: 84:3c:b1:4d:26:7d:7d:a6:3b:24:e1:61:fc:ed:3a: df:f4:29:d8:92:f7:03:7f:26:79:9f:46:ac:7c:c1: 58:38:e2:6f:d2:86:87:a8:d6:0a:a1:b3:73:5b:b2: 9d:e9:90:3c:56:a3:90:3f:8f:40:d3:39:43:d4:6e: 96:8b:17:fe:d2:65:d6:36:7e:80:ed:5b:fc:bc:54: 3b:4f:fe:20:f8:01:d7:50:e0:d4:64:a9:a7:b6:16: 5b:a8:71:19:e7:ec:b3:39:f1:94:18:7e:73:2e:27: e4:a7:5a:e3:7d:2b:ec:e7:a9:66:de:e9:45:49:b5: 97:00:43:97:80:3b:dc:75:50:85:ab:38:34:56:82: e7:96:d0:28:a9:1f:e9:14:08:88:60:f1:b0:d9:ea: 4e:30:c3:ae:ef:b5:83:b6:81:d1:82:ab:cd:1f:93: 41:11:6a:da:bc:b4:f5:28:f4:d8:a8:95:ad:e4:60: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:B6:8F:7E:60:71:A1:CA:C1:56:94:F9:C3:AC:E8:BE:0A:F7:D1 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7e:fb:da:22:02:69:30:75:e2:d9:c9:08:96:12:a4:ec:0d: 29:bc:bf:e2:f1:97:ac:7d:17:98:a9:21:e2:1f:79:57:6c:70: ac:7a:ea:8f:f7:5c:0f:d8:c4:8d:37:8c:7f:d2:14:ee:03:01: b0:8e:d8:37:9a:17:9a:42:eb:3e:21:bf:01:6a:cf:d7:fe:d3: 8c:f5:c8:7e:48:6e:9b:be:eb:1c:be:74:69:9f:82:4d:b9:6f: 25:77:db:6d:9e:98:f0:e4:37:23:a0:bb:29:d4:2c:0f:3a:69: ba:26:37:e1:5c:0f:94:c8:a0:a7:ba:57:50:05:37:5e:8c:42: 2b:d7:25:73:9b:7b:2c:8f:82:4a:4b:69:73:64:8f:36:96:94: b1:d5:d4:71:93:7f:36:94:76:75:ac:84:a1:89:9d:87:78:30: f1:10:3e:e0:1b:a5:b4:28:f3:8f:b0:33:28:c1:ed:27:27:9f: 13:19:dc:e3:aa:45:23:ab:94:b9:6b:5f:a5:2b:3a:9e:20:48: 74:44:e6:1a:58:99:95:f9:4c:f1:ed:a9:1b:59:d0:9b:54:6a: 92:13:01:97:9f:e4:b8:2a:9d:6d:b4:dd:d2:21:62:31:f5:8e: 27:67:1d:81:48:11:23:9e:2a:17:12:cc:8a:da:1d:89:11:97: bd:f3:25:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUxMTAzMDMzMDIwWhcNMjUxMTEwMDMzMDIwWjAYMRYwFAYD VQQDEw02OTA4MjFjYy1jODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv60Ttt6hJGXcYTgRMmf2iYOaVpuuT7TToF4CX4CMmBLn88GxufTQ6KLYU5Md B3z4Bdx27qcCvdeyfMFkEukYtJMVIu/h4CAAvCmEPLFNJn19pjsk4WH87Trf9CnY kvcDfyZ5n0asfMFYOOJv0oaHqNYKobNzW7Kd6ZA8VqOQP49A0zlD1G6Wixf+0mXW Nn6A7Vv8vFQ7T/4g+AHXUODUZKmnthZbqHEZ5+yzOfGUGH5zLifkp1rjfSvs56lm 3ulFSbWXAEOXgDvcdVCFqzg0VoLnltAoqR/pFAiIYPGw2epOMMOu77WDtoHRgqvN H5NBEWravLT1KPTYqJWt5GDuLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgato9+ YHGhysFWlPnDrOi+CvfRMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJfvvaIgJpMHXi2ckIlhKk7A0pvL/i8ZesfReYqSHiH3lXbHCseuqP 91wP2MSNN4x/0hTuAwGwjtg3mheaQus+Ib8Bas/X/tOM9ch+SG6bvuscvnRpn4JN uW8ld9ttnpjw5DcjoLsp1CwPOmm6JjfhXA+UyKCnuldQBTdejEIr1yVzm3ssj4JK S2lzZI82lpSx1dRxk382lHZ1rIShiZ2HeDDxED7gG6W0KPOPsDMowe0nJ58TGdzj qkUjq5S5a1+lKzqeIEh0ROYaWJmV+Uzx7akbWdCbVGqSEwGXn+S4Kp1ttN3SIWIx 9Y4nZx2BSBEjnioXEsyK2h2JEZe98yV6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:57 2025 by rpki-client