$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json) Hash identifier: lVcDTraOngk74/JuQPI/eu8OyWO76bW2SW5K7xQh3b8= Subject key identifier: F7:15:E1:4B:75:D4:90:92:92:0A:1F:88:C0:59:72:0C:93:1F:A1:BA Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 1F8B1355EA2DBA8D3DC9FDC4A493093C59912EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft Manifest number: 0673 Signing time: Sun 02 Nov 2025 23:47:25 +0000 Manifest this update: Sun 02 Nov 2025 23:42:25 +0000 Manifest next update: Tue 04 Nov 2025 02:08:25 +0000 Files and hashes: 1: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=) 2: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=) 3: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=) 4: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=) 5: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=) 6: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: QwEvuVDhq+VlaBxKimx8lqAhGX3sCA4JuhS+Ne9k3lI=) 7: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=) 8: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: ZoLzi5Xd5utb1AI63IXWGz+aVO82OnCDuPInrqLocDM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8b:13:55:ea:2d:ba:8d:3d:c9:fd:c4:a4:93:09:3c:59:91:2e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Nov 2 23:42:25 2025 GMT Not After : Nov 4 02:08:25 2025 GMT Subject: CN=F715E14B75D49092920A1F88C059720C931FA1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:88:21:9c:21:5f:f8:6f:df:2a:7a:5c:e9: 92:64:94:59:90:0d:4b:b8:eb:75:04:83:f9:c5:bc: 14:5d:aa:57:2f:c5:67:df:41:5c:db:45:e6:a0:61: 88:20:e6:81:8b:7b:a1:21:65:2b:7a:59:74:a6:ba: 69:98:9c:b4:07:6d:b4:7f:26:eb:14:5c:5c:20:3e: 8a:01:06:30:5d:23:dd:d0:ec:16:1f:17:a7:dd:40: ce:00:53:44:88:82:0c:79:a6:b6:ee:f5:c4:9a:d0: bc:c7:a8:04:a6:f9:9b:db:36:a1:dd:86:ee:a0:67: 4b:c6:dd:af:55:ca:bc:08:dc:a9:de:8c:97:db:3d: ed:25:fc:bb:5e:75:c6:f5:6b:00:af:aa:9b:09:e7: d8:9a:07:bd:47:13:03:d4:a1:a6:c7:cf:2b:e8:75: 9e:23:ce:1f:b2:65:44:d6:0e:e1:c9:ec:28:84:b8: 9e:95:38:d9:1c:20:4c:fe:e3:e4:d4:48:b0:88:d3: 95:47:55:81:4f:8b:a7:7d:22:36:2e:71:4a:80:05: 7a:a3:e0:2c:bb:bd:33:ba:2e:27:c0:bf:b0:fd:22: 69:38:02:65:b0:d7:1b:ef:ac:90:cb:60:1b:91:23: 11:35:91:c5:30:aa:f7:b2:22:4a:74:2b:aa:43:90: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:15:E1:4B:75:D4:90:92:92:0A:1F:88:C0:59:72:0C:93:1F:A1:BA X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:06:59:9b:24:70:62:c8:8f:85:5a:d7:25:07:08:51:3e:a9: 0d:a1:61:72:d7:7f:76:b1:0a:81:bf:68:a2:d7:a3:66:7f:eb: 73:4c:a0:6e:a0:b4:e6:04:59:00:ac:7a:74:bb:83:f7:bb:92: f6:0c:4e:44:e4:4f:73:67:0e:61:c3:79:4b:d4:f4:46:7b:f5: 8a:d1:3f:f3:0e:e0:ee:ff:ad:d2:42:f8:a1:59:46:88:1e:1e: 78:0c:b9:70:75:ba:81:4f:7e:bb:b1:83:bf:7e:da:cb:21:a7: 30:32:13:3e:b7:0f:db:fa:a2:e4:b2:c4:98:af:08:e8:99:66: 60:8e:bf:5b:90:64:e4:3a:bd:03:dd:87:fc:89:71:e8:0c:df: 85:de:e2:50:e1:b6:49:5b:56:7e:9c:8e:0a:64:f8:e0:9b:42: 23:4b:e5:c6:87:6d:ec:ba:bb:87:38:8e:62:40:a2:82:08:be: 46:f2:7a:77:de:d4:26:73:a9:02:c3:e8:db:db:22:1c:81:27: b2:27:05:c6:1d:ff:71:3e:ed:1a:fd:d3:b2:1c:26:23:da:3a: ee:4b:50:36:b4:c5:8c:73:ba:92:08:49:67:3e:10:7f:1b:eb: e9:db:eb:73:51:8b:68:7b:a4:48:2c:a8:e6:b3:b5:d4:cb:6f: 87:48:49:ee -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUH4sTVeotuo09yf3EpJMJPFmRLrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI1MTEwMjIzNDIyNVoX DTI1MTEwNDAyMDgyNVowMzExMC8GA1UEAxMoRjcxNUUxNEI3NUQ0OTA5MjkyMEEx Rjg4QzA1OTcyMEM5MzFGQTFCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqoiCGcIV/4b98qelzpkmSUWZANS7jrdQSD+cW8FF2qVy/FZ99BXNtF5qBh iCDmgYt7oSFlK3pZdKa6aZictAdttH8m6xRcXCA+igEGMF0j3dDsFh8Xp91AzgBT RIiCDHmmtu71xJrQvMeoBKb5m9s2od2G7qBnS8bdr1XKvAjcqd6Ml9s97SX8u151 xvVrAK+qmwnn2JoHvUcTA9ShpsfPK+h1niPOH7JlRNYO4cnsKIS4npU42RwgTP7j 5NRIsIjTlUdVgU+Lp30iNi5xSoAFeqPgLLu9M7ouJ8C/sP0iaTgCZbDXG++skMtg G5EjETWRxTCq97IiSnQrqkOQr3kCAwEAAaOCAhswggIXMB0GA1UdDgQWBBT3FeFL ddSQkpIKH4jAWXIMkx+hujAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMy9CMThGOTg5OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAgwZZmyRwYsiPhVrXJQcIUT6pDaFhctd/drEKgb9ootejZn/r c0ygbqC05gRZAKx6dLuD97uS9gxORORPc2cOYcN5S9T0Rnv1itE/8w7g7v+t0kL4 oVlGiB4eeAy5cHW6gU9+u7GDv37ayyGnMDITPrcP2/qi5LLEmK8I6JlmYI6/W5Bk 5Dq9A92H/Ilx6Azfhd7iUOG2SVtWfpyOCmT44JtCI0vlxodt7Lq7hziOYkCiggi+ RvJ6d97UJnOpAsPo29siHIEnsicFxh3/cT7tGv3TshwmI9o67ktQNrTFjHO6kghJ Zz4Qfxvr6dvrc1GLaHukSCyo5rO11Mtvh0hJ7g== -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:08 2025 by rpki-client