$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: bO8qjlTpHrn6djj0EfzvE8R5CRieETej9eXLnnfJAg8= Subject key identifier: 98:01:73:9A:81:33:EF:7C:CF:90:B2:97:15:CC:07:7D:26:48:DB:26 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 0188 Signing time: Mon 03 Nov 2025 03:35:39 +0000 Manifest this update: Mon 03 Nov 2025 03:35:38 +0000 Manifest next update: Mon 10 Nov 2025 03:35:38 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: J/MBtKQQK8ULMKEKp8u2vt7HrqgAEQ6MuJ5N9h+jeJY=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Nov 3 03:35:38 2025 GMT Not After : Nov 10 03:35:38 2025 GMT Subject: CN=6908230a-1949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:2e:ef:ea:d6:6c:3a:2f:e7:03:17:64:36: c5:d3:c1:76:96:0a:ee:06:97:b5:7e:c0:6d:fc:f8: fd:f1:07:d4:cd:74:b6:5d:2f:e3:cc:b6:8b:ed:9b: a0:30:7c:82:4b:91:53:8a:62:41:a5:75:62:c1:c7: 35:45:fa:8b:6d:20:b6:48:56:c2:db:7a:a8:a9:4a: 93:75:71:53:f6:18:0a:38:fe:44:f2:07:ee:3a:1d: 99:9f:47:e5:c1:2f:fb:51:d5:97:98:1e:5d:5f:eb: 26:37:ca:e3:de:17:e8:5f:bb:38:9e:d8:ad:55:5a: 50:4f:19:fa:e8:f5:25:7c:aa:31:c4:44:eb:7d:d3: c5:65:38:5f:6c:1a:ab:ed:d8:fe:ca:4d:45:f0:bc: cd:6d:ac:65:c5:ab:27:7e:6d:7e:8e:40:06:f1:68: d9:6f:59:ed:24:cd:8d:22:5b:e9:93:fc:c6:84:20: fd:72:6c:b9:cf:b0:76:ca:74:93:06:48:7e:3e:3b: 9d:27:25:1d:5d:aa:03:a4:d8:e8:4d:a7:0e:e6:02: 37:4d:f8:60:a0:c9:35:90:5c:08:a9:63:9e:df:c1: ca:87:b3:85:d6:f4:b0:16:2b:c8:2b:02:58:58:d8: d2:88:f0:17:03:14:77:b6:3c:7b:6a:29:4f:6a:7b: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:01:73:9A:81:33:EF:7C:CF:90:B2:97:15:CC:07:7D:26:48:DB:26 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e8:56:af:95:71:ca:e7:fd:fa:6e:f2:1a:12:b9:49:3d:1e: 9c:0c:59:0d:4a:c6:7c:9a:47:e0:4a:e7:72:28:6c:d4:d1:3b: 78:23:3a:d6:80:f5:53:06:06:79:c3:bf:ec:d5:09:da:db:59: 0e:f8:87:20:93:39:69:8f:4a:d9:2e:79:a3:60:3c:8c:9e:61: 18:f6:bc:26:19:a3:ab:75:1e:7c:f1:bc:5b:89:2c:35:3f:bd: a5:19:3f:e4:0f:5a:40:27:db:5d:3e:43:3c:dc:01:6d:62:ba: b0:c1:a7:a0:cd:2c:47:44:ed:13:4d:bc:f5:b1:44:ea:71:02: 7f:b5:04:0b:f3:a1:9c:e3:84:e8:31:aa:25:2c:d9:0e:f6:05: d8:5d:66:21:f0:e9:4c:f7:70:2f:96:48:2e:38:29:07:d7:80: 8f:e7:9f:ef:eb:42:0a:2f:76:01:c7:0c:c6:9f:02:48:92:e0: cb:68:cf:07:ee:4b:fe:9c:b0:d1:0f:a8:d4:c6:42:8b:56:85: aa:ae:1d:4a:29:31:95:31:55:51:10:ec:c4:ac:5f:e0:3f:eb: 15:23:c3:03:5d:9d:c6:12:d6:8c:1f:65:dc:af:59:8c:89:6e: a5:08:e7:c4:36:9a:39:34:dd:53:08:79:13:f4:7b:93:f9:d7: db:58:94:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUxMTAzMDMzNTM4WhcNMjUxMTEwMDMzNTM4WjAYMRYwFAYD VQQDEw02OTA4MjMwYS0xOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxAu7+rWbDov5wMXZDbF08F2lgruBpe1fsBt/Pj98QfUzXS2XS/jzLaL7Zug MHyCS5FTimJBpXViwcc1RfqLbSC2SFbC23qoqUqTdXFT9hgKOP5E8gfuOh2Zn0fl wS/7UdWXmB5dX+smN8rj3hfoX7s4ntitVVpQTxn66PUlfKoxxETrfdPFZThfbBqr 7dj+yk1F8LzNbaxlxasnfm1+jkAG8WjZb1ntJM2NIlvpk/zGhCD9cmy5z7B2ynST Bkh+PjudJyUdXaoDpNjoTacO5gI3TfhgoMk1kFwIqWOe38HKh7OF1vSwFivIKwJY WNjSiPAXAxR3tjx7ailPanvW/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgBc5qB M+98z5CylxXMB30mSNsmMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS6FavlXHK5/36bvIaErlJPR6cDFkNSsZ8mkfgSudyKGzU0Tt4IzrW gPVTBgZ5w7/s1Qna21kO+Icgkzlpj0rZLnmjYDyMnmEY9rwmGaOrdR588bxbiSw1 P72lGT/kD1pAJ9tdPkM83AFtYrqwwaegzSxHRO0TTbz1sUTqcQJ/tQQL86Gc44To MaolLNkO9gXYXWYh8OlM93AvlkguOCkH14CP55/v60IKL3YBxwzGnwJIkuDLaM8H 7kv+nLDRD6jUxkKLVoWqrh1KKTGVMVVREOzErF/gP+sVI8MDXZ3GEtaMH2Xcr1mM iW6lCOfENpo5NN1TCHkT9HuT+dfbWJQh -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:07 2025 by rpki-client