$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: 6J2mBDxy/91mnsRqSUR89SYRSbv+VcYbyZyxgpHs0io= Subject key identifier: 34:23:80:98:2F:24:6D:4F:E2:5A:AE:96:AD:6F:DC:F0:CB:B0:D0:A0 Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: 0150 Signing time: Sun 19 Oct 2025 06:59:17 +0000 Manifest this update: Sun 19 Oct 2025 06:59:16 +0000 Manifest next update: Sun 26 Oct 2025 06:59:16 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: cNvH9O5Vnf1e7db/g0MPJL/VzS4BF3L8qDokWlehy00=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Oct 19 06:59:16 2025 GMT Not After : Oct 26 06:59:16 2025 GMT Subject: CN=68f48c45-3fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:df:b7:ba:de:b7:b2:5a:d9:6a:90:39:7a: fa:48:b4:f5:24:5b:04:79:5b:fa:0e:a8:d6:8d:99: a7:83:29:69:dc:3c:1d:e6:41:52:28:9c:15:16:f2: fe:4e:ff:97:b1:aa:05:b2:61:46:d2:32:c1:2b:b4: a3:48:94:5e:d3:6d:56:3a:06:87:62:dc:00:f3:ea: 5d:0c:04:bf:16:07:2e:01:e4:44:1d:ad:56:88:1c: a4:dc:22:dd:25:79:0b:69:18:ca:53:f3:70:1b:85: 6c:82:3e:75:95:63:05:40:f9:1f:bf:aa:e4:a1:3b: 83:a4:1c:a6:a7:bf:21:59:a5:e2:66:3d:ea:3f:79: 41:02:00:ad:d8:2c:11:6d:76:bb:66:fd:69:0e:25: b1:90:53:2a:de:43:26:bc:d5:37:d8:f6:9d:8b:ee: e4:82:35:a4:93:65:c1:6d:d0:30:15:95:22:29:d2: 3d:08:8e:7d:92:9a:62:7e:3c:bb:ed:0f:e1:5f:46: 03:50:c6:69:da:1f:ac:3d:b2:41:b3:68:fb:32:f4: bd:af:52:65:a5:f4:6d:41:fd:97:4a:c6:4b:10:8c: 52:b3:7b:9f:4d:25:27:19:ae:ed:05:0f:a5:80:49: 8a:2a:68:f5:92:af:52:ba:74:57:c6:eb:6d:db:a4: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:80:98:2F:24:6D:4F:E2:5A:AE:96:AD:6F:DC:F0:CB:B0:D0:A0 X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:88:2f:21:5b:4e:05:a1:e6:cc:89:62:8a:88:ae:01:31:66: 9e:fa:8a:d1:e7:1e:4d:87:34:38:5b:14:e2:95:dd:04:e3:8e: 4f:39:77:12:2c:32:0c:ac:f5:f3:d6:16:7a:2e:3f:3d:61:71: 1a:6b:07:d1:52:f0:6a:ba:2a:59:8f:65:ce:2d:a3:4b:1b:77: 6c:27:42:b9:29:d7:c0:0b:cb:84:d1:00:9e:7e:0b:75:fd:cf: 4e:64:3f:06:41:6b:87:35:44:a9:95:9d:11:f2:a0:b2:c1:43: 14:86:ec:09:bf:7a:ce:3d:16:75:b5:10:63:72:1e:47:2a:ae: 74:ae:ad:6f:8a:85:d9:78:3d:7c:ee:f5:56:69:cd:ec:35:9c: 20:cc:8f:7f:ce:0d:25:f0:e2:1d:18:13:cf:ba:24:b3:32:98: ad:8c:4b:13:a1:18:b2:4a:ad:41:bd:d0:00:43:3f:25:0b:6d: bf:af:60:0e:10:c3:12:ca:a5:c5:76:00:51:c8:4d:a8:d3:34: 03:60:5b:b2:6e:01:9a:3a:2f:fc:fd:85:d9:39:67:2e:dc:2d: d7:7f:da:41:8d:f3:d2:f2:01:d0:4e:ef:71:2d:57:51:41:10: f7:a4:f7:87:ab:28:e2:07:01:f9:6e:ff:06:4b:61:d3:b3:ca: 1e:57:da:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUxMDE5MDY1OTE2WhcNMjUxMDI2MDY1OTE2WjAYMRYwFAYD VQQDEw02OGY0OGM0NS0zZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFXft7ret7Ja2WqQOXr6SLT1JFsEeVv6DqjWjZmngylp3Dwd5kFSKJwVFvL+ Tv+XsaoFsmFG0jLBK7SjSJRe021WOgaHYtwA8+pdDAS/FgcuAeREHa1WiByk3CLd JXkLaRjKU/NwG4Vsgj51lWMFQPkfv6rkoTuDpBymp78hWaXiZj3qP3lBAgCt2CwR bXa7Zv1pDiWxkFMq3kMmvNU32Padi+7kgjWkk2XBbdAwFZUiKdI9CI59kppifjy7 7Q/hX0YDUMZp2h+sPbJBs2j7MvS9r1JlpfRtQf2XSsZLEIxSs3ufTSUnGa7tBQ+l gEmKKmj1kq9SunRXxutt26RQtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQjgJgv JG1P4lqulq1v3PDLsNCgMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChiC8hW04FoebMiWKKiK4BMWae+orR5x5NhzQ4WxTild0E445POXcS LDIMrPXz1hZ6Lj89YXEaawfRUvBquipZj2XOLaNLG3dsJ0K5KdfAC8uE0QCefgt1 /c9OZD8GQWuHNUSplZ0R8qCywUMUhuwJv3rOPRZ1tRBjch5HKq50rq1vioXZeD18 7vVWac3sNZwgzI9/zg0l8OIdGBPPuiSzMpitjEsToRiySq1BvdAAQz8lC22/r2AO EMMSyqXFdgBRyE2o0zQDYFuybgGaOi/8/YXZOWcu3C3Xf9pBjfPS8gHQTu9xLVdR QRD3pPeHqyjiBwH5bv8GS2HTs8oeV9pZ -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:08 2025 by rpki-client