$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: XP8AUqIytB0up61l4Pj+4G2AfIBluRChMoY2xwHyv+g= Subject key identifier: 86:19:C5:34:23:24:40:F0:2A:27:13:0B:AD:9F:92:2F:A6:28:95:CA Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: 0140 Signing time: Sun 19 Oct 2025 07:12:50 +0000 Manifest this update: Sun 19 Oct 2025 07:12:49 +0000 Manifest next update: Sun 26 Oct 2025 07:12:49 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: XvuIpmdJxsAxoJtefZNppZr7+ey3yIU2N5gZ5NcC71s=) 2: FE1C0C348E9211F0B9F46F41C4F9AE02.roa (hash: iRQhqMAd0hRFEssmzS610D6wroDA71aDkWeK8ksNCRI=) 3: FE8D75048E9211F0B9F46F41C4F9AE02.roa (hash: /gOeld0CYxodUBPV3tKNNFujZlx0gVWxWCEj135eZpc=) 4: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Oct 19 07:12:49 2025 GMT Not After : Oct 26 07:12:49 2025 GMT Subject: CN=68f48f72-a324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:25:21:ff:af:d9:6f:bf:0b:d9:51:9c:a1: 7a:c1:e5:86:3c:d0:ee:f4:22:ad:17:92:cb:3c:1a: 49:78:91:84:51:25:cf:c0:f6:f6:94:43:d5:56:18: c4:5c:70:97:d0:dd:68:6d:2e:93:ca:c4:5f:d7:c7: ce:a8:ef:67:1e:24:76:d0:2c:bf:c2:a1:52:43:e8: a3:a1:9d:8e:0d:2f:e5:02:83:a1:89:a3:e7:69:2a: 03:e2:b6:c2:d1:e1:d1:2e:c0:73:90:d5:27:cf:8b: ed:44:13:9f:ce:08:ac:0c:e3:0a:02:b6:df:76:24: 51:e3:21:f7:75:81:7a:27:d4:db:41:41:74:fb:b4: a0:59:83:3f:8c:e9:35:03:5c:17:a4:99:0d:8a:cc: 65:40:ba:df:60:c8:db:ac:e5:ec:33:50:b7:bf:d2: 86:b8:d3:fd:c0:4c:4a:2b:8a:dd:37:d3:c5:73:e2: e7:7f:5a:68:8b:f3:56:4c:e1:51:ae:a3:14:aa:4a: 70:c4:7b:f1:28:d0:2c:e6:3c:da:47:cb:94:46:64: f0:53:79:f4:49:42:2e:6c:07:fa:7e:21:79:51:df: 67:82:a8:20:cd:ac:04:f8:ae:c6:ee:33:3d:f4:69: ac:57:98:b6:38:06:05:68:49:ad:50:9e:bf:0f:2e: 47:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:19:C5:34:23:24:40:F0:2A:27:13:0B:AD:9F:92:2F:A6:28:95:CA X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:90:7c:fa:22:33:c0:9d:e7:05:07:13:1d:8f:3e:eb:d8:c1: 64:c1:0e:fe:60:32:9c:60:af:dd:49:73:3c:6e:ec:cb:be:e8: 89:90:c4:3e:10:77:62:65:35:35:20:c6:20:a8:cd:09:2c:89: 93:36:5c:f7:73:5f:70:d2:02:ec:10:50:d6:58:a9:86:a0:a1: b7:f1:54:84:a1:8d:0c:36:77:07:98:ce:51:75:f6:ae:3a:f9: ab:57:9b:19:73:43:90:03:45:6c:a5:a8:a4:cd:3a:1c:41:6d: 65:6d:03:e5:ae:73:dd:83:a3:90:81:a1:8e:f9:75:a3:3d:a5: 2d:79:60:cf:78:53:d2:e3:84:e1:d6:22:94:4e:2f:ee:24:d0: 80:b9:dd:63:88:07:5d:7e:d8:21:59:84:46:50:7a:e2:3a:fc: c7:ac:82:6a:bc:e1:66:9a:ac:d5:08:00:89:91:9e:e2:99:d4: 04:37:ec:c1:12:63:f9:ab:ec:19:01:45:9e:67:a0:17:1d:e0: 51:42:56:de:c4:8c:f2:09:00:30:ea:1a:99:fb:d5:62:c2:2f: d6:6e:dc:38:7c:dd:4c:93:39:d4:b6:31:ec:ae:2b:dd:9e:85: 26:b8:65:45:9a:b4:6f:c4:25:b6:b3:0e:fc:de:be:97:4c:20: 42:47:a1:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUxMDE5MDcxMjQ5WhcNMjUxMDI2MDcxMjQ5WjAYMRYwFAYD VQQDEw02OGY0OGY3Mi1hMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplAlIf+v2W+/C9lRnKF6weWGPNDu9CKtF5LLPBpJeJGEUSXPwPb2lEPVVhjE XHCX0N1obS6TysRf18fOqO9nHiR20Cy/wqFSQ+ijoZ2ODS/lAoOhiaPnaSoD4rbC 0eHRLsBzkNUnz4vtRBOfzgisDOMKArbfdiRR4yH3dYF6J9TbQUF0+7SgWYM/jOk1 A1wXpJkNisxlQLrfYMjbrOXsM1C3v9KGuNP9wExKK4rdN9PFc+Lnf1poi/NWTOFR rqMUqkpwxHvxKNAs5jzaR8uURmTwU3n0SUIubAf6fiF5Ud9ngqggzawE+K7G7jM9 9GmsV5i2OAYFaEmtUJ6/Dy5HFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYZxTQj JEDwKicTC62fki+mKJXKMB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6kHz6IjPAnecFBxMdjz7r2MFkwQ7+YDKcYK/dSXM8buzLvuiJkMQ+ EHdiZTU1IMYgqM0JLImTNlz3c19w0gLsEFDWWKmGoKG38VSEoY0MNncHmM5Rdfau OvmrV5sZc0OQA0VspaikzTocQW1lbQPlrnPdg6OQgaGO+XWjPaUteWDPeFPS44Th 1iKUTi/uJNCAud1jiAddftghWYRGUHriOvzHrIJqvOFmmqzVCACJkZ7imdQEN+zB EmP5q+wZAUWeZ6AXHeBRQlbexIzyCQAw6hqZ+9Viwi/Wbtw4fN1MkznUtjHsrivd noUmuGVFmrRvxCW2sw783r6XTCBCR6FV -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:44 2025 by rpki-client