$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: 7ZSblWbFKwTHz0gyu2jxfW9Zjl49m6XPLnU3uQO8vR4= Subject key identifier: 77:81:BE:B1:6D:EB:FF:F3:3A:39:20:19:C4:F5:7B:06:82:BF:3A:8D Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: 0114 Signing time: Wed 05 Nov 2025 05:02:18 +0000 Manifest this update: Wed 05 Nov 2025 05:02:18 +0000 Manifest next update: Wed 12 Nov 2025 05:02:18 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: VgFnNchhpPLcBGVEpXz2/wJNS/UpsFKeGgr6rXzys8I=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: +v9ocLXg3YzZw7HHn7yYFOAlsFrXXQzQx6yND19fOBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Nov 5 05:02:18 2025 GMT Not After : Nov 12 05:02:18 2025 GMT Subject: CN=690ada5a-510d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:62:4a:f5:80:81:8d:79:6e:ec:38:7a:72: 48:6a:9e:48:d8:d6:9a:1d:84:3b:8d:26:6b:56:f6: a5:fe:ee:5e:f1:af:f1:97:56:aa:5d:df:4d:91:b6: 36:d0:80:eb:3e:a0:4a:61:e1:a7:46:bb:5a:af:cc: f5:cb:4e:f5:31:2b:5d:cb:c8:d3:27:a1:9a:72:18: fa:b6:28:72:2f:17:07:b4:f0:e6:37:bc:e2:2f:d7: d9:85:be:56:93:55:b6:d6:7f:0f:ac:01:aa:1a:da: e5:b4:a7:d5:e2:09:46:b4:b4:8e:61:71:1d:6b:69: 20:5e:10:41:39:ca:42:90:e3:a7:15:74:a8:0f:4a: b0:bd:36:0e:af:25:33:40:ed:96:55:1c:72:36:a8: 22:3d:ed:9e:10:0b:05:05:98:06:ee:61:79:29:ff: b2:e6:23:22:9b:40:51:ef:12:39:95:70:c7:a0:98: 77:83:41:85:7e:da:5b:3f:27:cc:7f:53:14:d7:1a: 62:03:cc:bc:dc:09:46:60:8d:4d:e3:a0:89:2a:2d: 6a:71:63:2c:f6:be:35:f9:43:55:7c:4c:9f:33:b0: 19:45:77:18:8c:48:db:7f:c8:36:70:62:bc:87:25: 76:29:5d:df:e5:6f:be:99:4f:cd:5f:83:92:3f:f1: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:81:BE:B1:6D:EB:FF:F3:3A:39:20:19:C4:F5:7B:06:82:BF:3A:8D X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:51:3f:b7:99:91:9e:de:b2:96:97:3d:b4:ed:50:8a:89:2a: 7d:25:c8:35:d3:49:6f:15:24:61:d7:fa:9d:f9:58:8e:a5:27: f2:94:b1:85:1a:6c:4c:5d:ed:f9:dc:f3:5a:05:52:43:47:64: 7b:37:1b:2f:0d:2b:45:37:7e:70:13:7c:92:34:c2:04:b1:06: ec:1d:1e:f6:1d:56:36:2b:9a:b2:54:0d:84:c4:59:0f:61:b1: f4:1e:b7:48:ab:99:d1:24:17:a5:8f:45:28:4b:41:af:70:42: 01:47:d3:a8:dd:09:3d:1c:bf:ed:46:dd:4b:0a:82:d3:8e:8e: 89:4d:06:9b:8a:94:6a:25:76:f3:15:a5:08:d3:ab:c5:73:5f: 07:81:7a:cb:6c:b8:c8:d6:b5:67:33:b5:48:bc:fc:a1:83:55: df:b4:9a:3a:d8:10:d3:71:95:5d:81:47:7e:9f:11:21:d3:1d: 09:5a:d0:62:de:94:e0:da:51:77:93:4d:8b:61:01:8e:52:21: b9:f7:e0:86:99:ab:03:7a:49:74:41:80:6e:59:f4:41:cd:e3: d2:77:fb:cd:9a:db:fd:16:92:33:79:6b:1f:78:17:e9:41:23: cd:e4:18:7d:f5:4b:8f:28:57:79:fe:79:ec:ff:05:2c:9d:e4: 21:5e:46:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjUxMTA1MDUwMjE4WhcNMjUxMTEyMDUwMjE4WjAYMRYwFAYD VQQDEw02OTBhZGE1YS01MTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qZiSvWAgY15buw4enJIap5I2NaaHYQ7jSZrVval/u5e8a/xl1aqXd9NkbY2 0IDrPqBKYeGnRrtar8z1y071MStdy8jTJ6Gachj6tihyLxcHtPDmN7ziL9fZhb5W k1W21n8PrAGqGtrltKfV4glGtLSOYXEda2kgXhBBOcpCkOOnFXSoD0qwvTYOryUz QO2WVRxyNqgiPe2eEAsFBZgG7mF5Kf+y5iMim0BR7xI5lXDHoJh3g0GFftpbPyfM f1MU1xpiA8y83AlGYI1N46CJKi1qcWMs9r41+UNVfEyfM7AZRXcYjEjbf8g2cGK8 hyV2KV3f5W++mU/NX4OSP/FUnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeBvrFt 6//zOjkgGcT1ewaCvzqNMB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBUT+3mZGe3rKWlz207VCKiSp9Jcg100lvFSRh1/qd+ViOpSfylLGF GmxMXe353PNaBVJDR2R7NxsvDStFN35wE3ySNMIEsQbsHR72HVY2K5qyVA2ExFkP YbH0HrdIq5nRJBelj0UoS0GvcEIBR9Oo3Qk9HL/tRt1LCoLTjo6JTQabipRqJXbz FaUI06vFc18HgXrLbLjI1rVnM7VIvPyhg1XftJo62BDTcZVdgUd+nxEh0x0JWtBi 3pTg2lF3k02LYQGOUiG59+CGmasDekl0QYBuWfRBzePSd/vNmtv9FpIzeWsfeBfp QSPN5Bh99UuPKFd5/nns/wUsneQhXkaH -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:12 2025 by rpki-client