$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft File: 18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json) Hash identifier: XsKZbYbazjF8UkX85CHhW3HgqTiDBNcC3NzgMliaLvk= Subject key identifier: 6C:BA:68:4D:C3:92:7E:98:D6:FB:05:0B:20:5B:AD:76:0D:75:3D:59 Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A Certificate issuer: /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft Manifest number: 0129 Signing time: Mon 03 Nov 2025 04:48:00 +0000 Manifest this update: Mon 03 Nov 2025 04:47:59 +0000 Manifest next update: Mon 10 Nov 2025 04:47:59 +0000 Files and hashes: 1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: 1i2RSp+rdEEMRa/pCNpT9Q7jBb2Y7dgHCimQJV1ObJs=) 2: 55FE0314581811F09A0AB17CC4F9AE02.roa (hash: lINB4ZwW6CYB53sylS1MrGaiI2L/l8sq0JnVeRgKpuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A Validity Not Before: Nov 3 04:47:59 2025 GMT Not After : Nov 10 04:47:59 2025 GMT Subject: CN=690833ff-5ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:cb:b4:d7:05:51:7c:f7:d7:41:59:e8:63: 5c:09:18:17:5b:d6:d2:69:5e:f1:4b:84:81:8d:41: f5:25:8e:db:9d:66:15:77:7c:c4:9a:f6:fa:28:82: 8c:63:00:c5:f5:dc:ac:89:fb:a8:55:9f:8d:c6:d8: 59:f3:4e:38:dc:3f:44:d9:ae:90:11:8e:cd:9f:82: b2:59:39:e1:f8:d9:4c:58:f8:4a:49:d4:18:14:29: 5b:fc:0e:16:3a:13:5d:c4:16:b5:52:9d:3b:57:93: 88:26:ea:34:3b:b0:52:79:e7:95:d5:66:d8:f5:67: bc:45:f1:ef:09:81:6c:cc:fb:e3:7c:4a:92:e5:62: b9:99:26:9c:0f:d0:8f:0d:5d:f8:4c:f2:15:05:30: d6:24:e6:ce:44:a6:fe:03:9c:49:6c:ba:e3:41:4e: 81:29:05:9c:53:94:f8:77:ac:fb:94:a2:1f:53:68: e9:dc:3f:97:5f:d8:9e:21:d6:b2:80:d8:91:3e:2d: 56:8a:6d:c5:14:45:73:c3:40:a4:b9:f9:c0:de:40: 5d:b2:6c:4b:54:e6:d2:9f:93:76:e8:91:8f:f1:85: 4f:05:de:07:5a:a3:3f:d8:66:db:f7:fc:48:eb:81: c4:27:d4:a0:58:7a:04:b9:6a:3e:5c:6e:db:af:8b: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:68:4D:C3:92:7E:98:D6:FB:05:0B:20:5B:AD:76:0D:75:3D:59 X509v3 Authority Key Identifier: keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:19:cb:71:54:cd:a1:61:9e:1d:85:5f:1a:ba:51:1d:62:2b: 4f:68:2c:52:a7:dc:7f:3a:8f:6d:c1:f3:0c:4c:11:0c:b8:8c: 5b:99:7a:b8:d7:9a:a6:e3:96:f0:3e:d0:1b:cb:91:13:09:9e: a2:61:68:4d:c3:c1:d7:76:64:ae:3e:d6:42:58:8e:98:1e:c6: bd:96:16:f9:a7:4a:e9:a5:f4:32:f6:50:b9:47:31:8f:7e:5f: 7e:ca:1a:c1:68:6a:e6:d8:a0:9c:4d:11:58:c3:ec:79:7e:5d: 8c:67:00:1a:8a:6e:8b:16:53:f5:dc:b2:c9:00:22:25:b8:f3: 1f:83:f2:1f:a1:de:62:02:b0:af:87:48:11:b0:5b:c4:99:22: c3:79:8b:62:47:82:2f:e8:37:9f:42:32:f3:06:4e:82:e6:3a: 0d:48:09:bb:c4:fa:83:29:e5:45:58:8c:5d:a2:43:58:48:c1: 40:52:d4:f7:09:7a:12:54:a6:f4:47:c6:ca:89:21:a4:7a:50: 49:ce:f4:95:c0:ab:88:04:a7:2f:d9:e5:c1:94:7f:f8:95:66: 92:ba:06:61:5f:91:b5:5c:a9:37:6e:c7:65:65:e4:21:66:50: 38:04:13:6b:eb:5f:41:36:7e:99:cc:45:ff:7e:08:06:42:cd: ff:96:f7:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3NzYxMTAvBgNVBAUTKEQ3QzRERTEzNjg2RjQzNTU4NTM2ODM5MTVFNTQxREVE NzUzQUVCM0EwHhcNMjUxMTAzMDQ0NzU5WhcNMjUxMTEwMDQ0NzU5WjAYMRYwFAYD VQQDEw02OTA4MzNmZi01ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2nLtNcFUXz310FZ6GNcCRgXW9bSaV7xS4SBjUH1JY7bnWYVd3zEmvb6KIKM YwDF9dysifuoVZ+NxthZ80443D9E2a6QEY7Nn4KyWTnh+NlMWPhKSdQYFClb/A4W OhNdxBa1Up07V5OIJuo0O7BSeeeV1WbY9We8RfHvCYFszPvjfEqS5WK5mSacD9CP DV34TPIVBTDWJObORKb+A5xJbLrjQU6BKQWcU5T4d6z7lKIfU2jp3D+XX9ieIday gNiRPi1Wim3FFEVzw0CkufnA3kBdsmxLVObSn5N26JGP8YVPBd4HWqM/2Gbb9/xI 64HEJ9SgWHoEuWo+XG7br4sHDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy6aE3D kn6Y1vsFCyBbrXYNdT1ZMB8GA1UdIwQYMBaAFNfE3hNob0NVhTaDkV5UHe11Ous6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3Ni85Mjk3QzQ1MjA4 NkIxMUVGODI2RDNCMTRDNEY5QUUwMi8xOFRlRTJodlExV0ZOb09SWGxRZDdYVTY2 em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE4VGVFMmh2UTFXRk5vT1JYbFFkN1hVNjZ6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3Ni85Mjk3QzQ1MjA4NkIxMUVGODI2RDNCMTRDNEY5QUUwMi8xOFRlRTJodlEx V0ZOb09SWGxRZDdYVTY2em8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPGctxVM2hYZ4dhV8aulEdYitPaCxSp9x/Oo9twfMMTBEMuIxbmXq4 15qm45bwPtAby5ETCZ6iYWhNw8HXdmSuPtZCWI6YHsa9lhb5p0rppfQy9lC5RzGP fl9+yhrBaGrm2KCcTRFYw+x5fl2MZwAaim6LFlP13LLJACIluPMfg/Ifod5iArCv h0gRsFvEmSLDeYtiR4Iv6DefQjLzBk6C5joNSAm7xPqDKeVFWIxdokNYSMFAUtT3 CXoSVKb0R8bKiSGkelBJzvSVwKuIBKcv2eXBlH/4lWaSugZhX5G1XKk3bsdlZeQh ZlA4BBNr619BNn6ZzEX/fggGQs3/lvfp -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:12 2025 by rpki-client