$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json) Hash identifier: 3E7OwQsbOSQ66qm/4G1Up85lIZEXdazCR+QhZUR37X8= Subject key identifier: 29:9A:72:30:51:10:7A:98:83:3F:62:DA:0C:D5:7C:CA:21:A8:F2:20 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft Manifest number: 34DB Signing time: Sat 18 Oct 2025 15:08:25 +0000 Manifest this update: Sat 18 Oct 2025 15:08:24 +0000 Manifest next update: Sat 25 Oct 2025 15:08:24 +0000 Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: 1iwM1nQ1MluW/lTB+Kd18lZOLX4jvnyGtwfIl6HgFmk=) 2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=) 3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Oct 18 15:08:24 2025 GMT Not After : Oct 25 15:08:24 2025 GMT Subject: CN=68f3ad69-d253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:ae:15:75:f0:17:02:dc:8d:10:32:59:bf: 4f:a8:50:b2:5f:ee:72:0d:00:62:b8:8e:a6:9a:3e: 9e:e3:c7:13:2b:5b:0f:dc:73:68:2a:dc:cd:50:8e: 08:f1:dc:b6:e7:d2:ab:df:dc:76:15:0d:4e:5f:82: 4d:0e:b1:27:c5:86:fc:7c:1b:3d:59:b3:b5:3f:74: 11:fe:5c:e9:2a:ee:51:f3:d4:f8:b1:34:b3:b2:15: e6:ce:29:41:9a:b5:b4:02:35:d2:9a:7c:8a:94:51: a1:a5:bb:b2:1d:2d:d9:81:1e:6e:31:01:dd:97:43: 75:e4:19:1e:bd:6d:ba:51:6c:e3:17:12:9a:13:7f: 08:d3:bc:82:07:c8:29:35:0a:73:cf:f1:eb:76:dd: 50:45:42:3b:ff:24:62:87:5e:d8:b5:c9:59:9b:66: 66:c7:74:16:f9:d6:2c:7d:43:1d:95:f5:44:90:3c: 55:55:00:b4:c6:0b:e8:3c:b2:e1:d6:e7:bd:e8:4a: 3f:ce:cd:09:71:3d:95:38:22:31:91:65:f8:76:e5: a5:19:35:66:c2:10:45:e7:4d:07:1b:1f:cb:82:81: ef:81:ff:62:65:48:99:ad:d4:be:8d:e4:ce:ea:94: 8d:ef:1c:06:69:78:b6:db:85:35:7d:87:19:09:30: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9A:72:30:51:10:7A:98:83:3F:62:DA:0C:D5:7C:CA:21:A8:F2:20 X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a0:8f:82:5b:b4:75:07:3a:a4:28:79:0e:71:c2:63:18:cd: 86:a5:6e:04:c0:e7:3d:de:85:9c:87:f4:07:86:f8:33:3b:f2: 7c:e7:d7:3c:49:e9:6f:43:84:ca:47:9c:ae:53:83:06:26:9b: 65:20:27:6d:54:5c:80:23:85:df:97:a4:13:b7:7b:ee:cb:3f: 2f:13:0b:0c:77:d8:7a:e4:3f:d6:77:03:46:76:7a:0b:21:90: 85:20:f3:df:4a:a9:5e:02:2a:8e:b5:a3:58:d8:22:dd:09:5c: 9a:f1:ad:14:f1:78:40:0c:9e:c4:bc:9d:d4:53:a8:94:a2:5a: 9b:c4:16:a5:96:03:8b:e5:bb:6d:d5:d8:9c:af:87:81:86:da: 73:5c:5b:f6:d3:dc:84:3c:48:0d:d4:aa:9a:75:e4:10:6c:9b: e1:f5:9d:59:b7:05:82:0b:8b:57:0f:0c:5e:97:05:ee:d1:a8: d4:2d:23:b4:5e:48:f6:55:8b:dd:bc:75:0f:b9:9c:fa:b9:5b: 93:e2:99:d9:86:6f:9e:f7:03:74:5f:0d:52:db:79:5e:f9:d2: 95:73:f8:c3:8e:6a:16:88:6e:9c:64:d8:7c:d7:1e:e7:3d:e2: 52:fe:eb:97:fd:42:62:4f:99:ab:3a:c4:0e:79:b6:22:2c:65: 6f:4c:18:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUxMDE4MTUwODI0WhcNMjUxMDI1MTUwODI0WjAYMRYwFAYD VQQDEw02OGYzYWQ2OS1kMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd+uFXXwFwLcjRAyWb9PqFCyX+5yDQBiuI6mmj6e48cTK1sP3HNoKtzNUI4I 8dy259Kr39x2FQ1OX4JNDrEnxYb8fBs9WbO1P3QR/lzpKu5R89T4sTSzshXmzilB mrW0AjXSmnyKlFGhpbuyHS3ZgR5uMQHdl0N15BkevW26UWzjFxKaE38I07yCB8gp NQpzz/Hrdt1QRUI7/yRih17YtclZm2Zmx3QW+dYsfUMdlfVEkDxVVQC0xgvoPLLh 1ue96Eo/zs0JcT2VOCIxkWX4duWlGTVmwhBF500HGx/LgoHvgf9iZUiZrdS+jeTO 6pSN7xwGaXi224U1fYcZCTALjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmacjBR EHqYgz9i2gzVfMohqPIgMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgoI+CW7R1BzqkKHkOccJjGM2GpW4EwOc93oWch/QHhvgzO/J859c8 SelvQ4TKR5yuU4MGJptlICdtVFyAI4Xfl6QTt3vuyz8vEwsMd9h65D/WdwNGdnoL IZCFIPPfSqleAiqOtaNY2CLdCVya8a0U8XhADJ7EvJ3UU6iUolqbxBallgOL5btt 1dicr4eBhtpzXFv209yEPEgN1KqadeQQbJvh9Z1ZtwWCC4tXDwxelwXu0ajULSO0 Xkj2VYvdvHUPuZz6uVuT4pnZhm+e9wN0Xw1S23le+dKVc/jDjmoWiG6cZNh81x7n PeJS/uuX/UJiT5mrOsQOebYiLGVvTBj3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:05 2025 by rpki-client