$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json) Hash identifier: UAngZ3oRI/7SKp9iSF4nBmSTYoEEWqu7bXnXQ1XLf0M= Subject key identifier: 02:9E:51:E7:34:B0:CC:A4:56:E6:A1:4C:0C:34:BC:3D:06:D2:DB:5E Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft Manifest number: 0147 Signing time: Sun 19 Oct 2025 07:10:40 +0000 Manifest this update: Sun 19 Oct 2025 07:10:40 +0000 Manifest next update: Sun 26 Oct 2025 07:10:40 +0000 Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: l57MNBbuRSYpCjRL+yoQ6XBAsVjQEqyvZX7zFFYs1/E=) 2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: idAFhUmAkJaKGqP8j1ITDESnMkqFyJap6af21HGHAgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Validity Not Before: Oct 19 07:10:40 2025 GMT Not After : Oct 26 07:10:40 2025 GMT Subject: CN=68f48ef0-b86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:68:e7:b4:da:b4:ec:09:38:4e:f3:9c:a0: 98:66:ed:99:8f:3d:01:6f:42:9c:39:35:f6:79:fe: 23:a4:4b:10:cc:6d:05:5d:f8:2f:23:a9:2a:46:bf: 7e:ab:da:9a:1b:3f:f0:7f:85:b2:44:c9:01:22:ea: 5e:d9:54:28:6e:44:8b:c0:ee:ce:e4:b6:4f:bf:de: fa:f5:56:6b:84:65:01:02:77:9c:02:58:08:f6:fa: 33:d3:34:89:db:1c:6b:45:5e:c1:6c:48:ee:00:20: 52:7d:2c:a8:52:25:13:52:c6:28:29:78:2b:6f:64: 20:a0:b3:a2:47:5c:1f:1f:65:7a:fa:0f:c5:b9:ef: 80:f6:8c:73:86:4e:56:60:66:da:50:42:d3:cb:1d: e9:61:0a:d6:7f:f7:57:76:ab:85:a8:e1:f8:f9:a0: bf:89:2c:12:5a:e6:85:38:ac:08:ff:c3:73:d7:46: 38:77:db:8a:a5:63:fc:d3:70:33:6a:1d:35:97:8c: e5:82:f0:12:d7:a7:c8:5e:fe:79:d5:af:74:0e:f9: c1:de:bc:06:b8:86:02:b3:e7:c7:42:df:90:b5:a9: 8f:9e:e9:7e:7c:ec:8d:45:ec:5f:ad:35:13:06:7e: 06:79:22:83:94:54:d4:82:66:09:99:6e:68:bb:18: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:51:E7:34:B0:CC:A4:56:E6:A1:4C:0C:34:BC:3D:06:D2:DB:5E X509v3 Authority Key Identifier: keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:37:13:a4:ab:1c:b7:13:c0:85:52:5c:f8:e1:1a:4a:43:f7: 0f:ce:61:d1:f3:a3:e2:c8:48:86:a4:f6:fb:f1:08:bf:d4:d1: b5:95:62:aa:7c:85:23:94:09:41:42:4f:df:d9:5f:a8:a1:70: 84:d1:d9:79:8e:ba:74:cf:c7:fc:ae:10:ea:c9:78:bc:1f:08: df:7a:18:31:62:17:45:a9:26:5e:62:2f:04:7b:d0:fd:ea:78: 31:a1:9a:f5:8a:38:d0:f4:9e:0b:82:ca:5b:90:45:72:19:ac: 93:34:2a:b5:e5:7e:d4:07:3c:2c:58:c1:96:24:53:cc:18:b1: bb:40:66:97:af:e0:54:30:0a:6a:b7:4c:8a:b6:d1:f4:2f:b1: a3:a2:3f:5f:ef:3d:9b:78:d9:c4:56:d4:0b:05:20:6d:52:81: 8e:c3:b5:85:53:79:c5:79:19:9e:a2:dd:75:75:8f:02:b1:0b: 60:ff:2f:cd:1d:72:bc:f6:99:f2:c1:f0:3b:7f:46:4e:0b:42: 7b:f3:f1:34:43:62:b4:93:12:c0:3d:c7:b4:07:c0:8d:7b:a4: 08:a5:0a:1c:91:96:21:25:16:d2:08:ad:01:94:58:d3:86:55: d8:a2:f0:9e:00:56:7c:83:9f:2b:19:12:bd:31:59:a2:a5:53: 75:65:b8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTExMTAvBgNVBAUTKDNFQTQzNDdEMkQ5RkQ2RUI2QTAxQjQ0RTU1NzFGODhC MDhBQ0MyNUIwHhcNMjUxMDE5MDcxMDQwWhcNMjUxMDI2MDcxMDQwWjAYMRYwFAYD VQQDEw02OGY0OGVmMC1iODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRFo57TatOwJOE7znKCYZu2Zjz0Bb0KcOTX2ef4jpEsQzG0FXfgvI6kqRr9+ q9qaGz/wf4WyRMkBIupe2VQobkSLwO7O5LZPv9769VZrhGUBAnecAlgI9voz0zSJ 2xxrRV7BbEjuACBSfSyoUiUTUsYoKXgrb2QgoLOiR1wfH2V6+g/Fue+A9oxzhk5W YGbaUELTyx3pYQrWf/dXdquFqOH4+aC/iSwSWuaFOKwI/8Nz10Y4d9uKpWP803Az ah01l4zlgvAS16fIXv551a90DvnB3rwGuIYCs+fHQt+QtamPnul+fOyNRexfrTUT Bn4GeSKDlFTUgmYJmW5ouxgc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKeUec0 sMykVuahTAw0vD0G0tteMB8GA1UdIwQYMBaAFD6kNH0tn9bragG0TlVx+IsIrMJb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1MS8yNUFDRjVDMEM0 QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1dHFBYlJPVlhINGl3aXN3 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxUTBmUzJmMXV0cUFiUk9WWEg0aXdpc3dscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1MS8yNUFDRjVDMEM0QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1 dHFBYlJPVlhINGl3aXN3bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcNxOkqxy3E8CFUlz44RpKQ/cPzmHR86PiyEiGpPb78Qi/1NG1lWKq fIUjlAlBQk/f2V+ooXCE0dl5jrp0z8f8rhDqyXi8HwjfehgxYhdFqSZeYi8Ee9D9 6ngxoZr1ijjQ9J4LgspbkEVyGayTNCq15X7UBzwsWMGWJFPMGLG7QGaXr+BUMApq t0yKttH0L7Gjoj9f7z2beNnEVtQLBSBtUoGOw7WFU3nFeRmeot11dY8CsQtg/y/N HXK89pnywfA7f0ZOC0J78/E0Q2K0kxLAPce0B8CNe6QIpQockZYhJRbSCK0BlFjT hlXYovCeAFZ8g58rGRK9MVmipVN1ZbhV -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:29 2025 by rpki-client