$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json) Hash identifier: hjoeOc/2r8Tk2/s3efUl8/b9qvs4VmceTumTB9n4F/s= Subject key identifier: 5F:16:4E:90:3E:F3:7F:38:22:67:7A:5E:B2:0F:39:1E:8B:BD:C3:B5 Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft Manifest number: 0149 Signing time: Sun 19 Oct 2025 07:04:33 +0000 Manifest this update: Sun 19 Oct 2025 07:04:32 +0000 Manifest next update: Sun 26 Oct 2025 07:04:32 +0000 Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: TV20WPRnL6GEhPwFOFKxRfCtwVzcer+mA1BDEXMD0uQ=) 2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: usgNeDoGlzZoBDkMS+oNirA/1DpfH4pmT68FwmH4UH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Validity Not Before: Oct 19 07:04:32 2025 GMT Not After : Oct 26 07:04:32 2025 GMT Subject: CN=68f48d80-7ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:66:b5:c9:e6:8c:50:b8:36:a6:f0:c1:c3: cd:08:8f:45:80:0a:92:bb:2e:ab:60:3c:41:6a:23: ed:95:8c:7b:a4:33:53:50:fe:42:9d:7a:cb:27:a8: ce:25:0a:e6:9f:9d:f1:e9:cd:17:fd:2a:c5:c1:34: 00:d0:a7:7a:41:ac:78:e6:69:4c:13:dd:cd:01:74: c8:0d:20:d3:f2:d0:56:b8:4b:90:7c:0d:1b:66:6c: 82:09:c2:a7:45:69:02:9c:f0:39:e2:fa:bb:d1:83: d1:d2:06:ff:1c:1b:34:2a:64:ee:42:ab:58:ef:80: eb:e5:0a:72:aa:08:d1:6c:60:56:58:5a:ef:86:46: 3b:42:48:94:75:b8:91:a9:6f:a8:ce:ba:cd:1c:6e: 14:c7:22:37:9e:49:97:14:1c:1e:98:66:19:1f:eb: 3e:28:4d:3e:37:7e:6e:9f:14:1c:32:4d:70:2a:c0: 83:c3:05:35:c4:15:02:c6:f5:ac:b8:c9:5e:e0:62: 6e:a9:a0:6e:b9:83:b3:f0:b2:b8:6c:00:91:63:aa: 6c:ef:34:84:7a:76:75:5b:49:22:36:00:c5:a8:a3: 98:fe:72:81:1c:0d:1a:d3:94:bc:6f:a5:93:91:f8: e7:fb:0c:81:0a:0c:e9:5c:a1:94:e2:47:00:aa:5f: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:16:4E:90:3E:F3:7F:38:22:67:7A:5E:B2:0F:39:1E:8B:BD:C3:B5 X509v3 Authority Key Identifier: keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c7:2e:c6:9a:9a:42:16:b8:ca:31:9d:91:c5:ab:11:ba:3b: b8:38:b9:00:3e:2c:38:a5:85:00:33:ad:32:eb:9d:69:58:e1: b2:bd:f3:a9:88:f3:20:54:f4:25:3a:0a:09:24:94:ff:1f:52: a7:49:0a:f2:62:73:9e:ec:de:da:68:93:ae:8a:e2:43:ab:d9: d1:13:d3:f0:ac:71:63:38:65:9c:58:48:59:4e:da:11:d6:75: 94:54:a5:c3:fb:91:9a:93:67:20:96:3d:3b:80:59:86:3c:20: ab:8d:96:15:8c:2a:25:83:d1:3b:64:ee:cd:54:ba:c8:68:1a: 35:55:48:c5:06:b2:59:3e:44:8d:dd:48:b7:e1:65:3e:71:23: 26:4a:04:16:89:1f:eb:03:8b:69:4a:8c:23:b5:00:8d:e6:21: d9:34:4f:5f:ec:1c:d1:54:59:d2:55:40:fe:20:aa:14:2e:8e: 0a:14:d1:bd:e0:30:40:93:ed:7d:99:e7:25:3f:0d:b7:f0:b8: c0:e3:6f:94:85:db:be:b3:99:7c:dd:a5:70:f6:cd:52:4e:55: df:42:0a:39:f8:87:d1:4b:e5:28:b4:4e:d1:06:62:4f:2d:85: e1:71:0e:0f:02:7c:98:03:a5:a8:22:76:68:9c:29:97:56:e5: d7:8a:c4:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUREMDQxMTAvBgNVBAUTKDQ3MzQ2NDg0NzE1OUJCMTUyRkJGRTFEQkI1QTFCMDE1 NDY4MjJGMTcwHhcNMjUxMDE5MDcwNDMyWhcNMjUxMDI2MDcwNDMyWjAYMRYwFAYD VQQDEw02OGY0OGQ4MC03ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6c9mtcnmjFC4NqbwwcPNCI9FgAqSuy6rYDxBaiPtlYx7pDNTUP5CnXrLJ6jO JQrmn53x6c0X/SrFwTQA0Kd6Qax45mlME93NAXTIDSDT8tBWuEuQfA0bZmyCCcKn RWkCnPA54vq70YPR0gb/HBs0KmTuQqtY74Dr5QpyqgjRbGBWWFrvhkY7QkiUdbiR qW+ozrrNHG4UxyI3nkmXFBwemGYZH+s+KE0+N35unxQcMk1wKsCDwwU1xBUCxvWs uMle4GJuqaBuuYOz8LK4bACRY6ps7zSEenZ1W0kiNgDFqKOY/nKBHA0a05S8b6WT kfjn+wyBCgzpXKGU4kcAql/YZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8WTpA+ 8384Imd6XrIPOR6LvcO1MB8GA1UdIwQYMBaAFEc0ZIRxWbsVL7/h27WhsBVGgi8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwNC9DM0Q1RkRDNkI5 QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4VXZ2LUhidGFHd0ZVYUNM eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6UmtoSEZadXhVdnYtSGJ0YUd3RlVhQ0x4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REQwNC9DM0Q1RkRDNkI5QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4 VXZ2LUhidGFHd0ZVYUNMeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADxy7GmppCFrjKMZ2RxasRuju4OLkAPiw4pYUAM60y651pWOGyvfOp iPMgVPQlOgoJJJT/H1KnSQryYnOe7N7aaJOuiuJDq9nRE9PwrHFjOGWcWEhZTtoR 1nWUVKXD+5Gak2cglj07gFmGPCCrjZYVjColg9E7ZO7NVLrIaBo1VUjFBrJZPkSN 3Ui34WU+cSMmSgQWiR/rA4tpSowjtQCN5iHZNE9f7BzRVFnSVUD+IKoULo4KFNG9 4DBAk+19meclPw238LjA42+Uhdu+s5l83aVw9s1STlXfQgo5+IfRS+UotE7RBmJP LYXhcQ4PAnyYA6WoInZonCmXVuXXisSB -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:31 2025 by rpki-client