$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json) Hash identifier: LYJU7TlM+fzDWtzRgHWzknVm9ttFh1OpS/XJEki+mU8= Subject key identifier: 0A:8A:95:85:90:25:9C:3F:56:8B:19:7C:CF:82:FA:33:13:57:B7:F7 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 24755DD426CEBB10CAE2AA42010628E929817F11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft Manifest number: 0661 Signing time: Mon 20 Oct 2025 15:27:08 +0000 Manifest this update: Mon 20 Oct 2025 15:22:08 +0000 Manifest next update: Tue 21 Oct 2025 15:49:08 +0000 Files and hashes: 1: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=) 2: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=) 3: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=) 4: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: R2y3gS2ktsYMItg3APAuFfgub1w3Q348SlpUTBAs2uI=) 5: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=) 6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=) 7: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=) 8: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: ZoLzi5Xd5utb1AI63IXWGz+aVO82OnCDuPInrqLocDM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:75:5d:d4:26:ce:bb:10:ca:e2:aa:42:01:06:28:e9:29:81:7f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Oct 20 15:22:08 2025 GMT Not After : Oct 21 15:49:08 2025 GMT Subject: CN=0A8A958590259C3F568B197CCF82FA331357B7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:72:58:3d:cc:b3:16:2b:48:8c:59:7f:ad: fa:09:df:c1:bb:5c:e0:d6:a9:f9:90:00:6c:33:f3: 4a:20:02:01:89:ed:af:52:52:3c:d4:34:28:a1:f0: c4:de:a3:72:a8:65:95:7a:ba:81:93:a0:9d:60:ab: d7:cb:2a:e3:b3:5e:74:48:81:7a:5d:e7:55:ad:48: 79:fa:b7:61:37:cd:bf:ea:0b:d5:d2:dc:99:0c:21: 51:1e:7c:7f:d9:c4:a3:ae:23:26:01:44:3c:ca:2e: 53:b2:df:2b:21:02:a7:66:f5:29:cc:4b:6f:1b:89: ca:37:3a:bc:ad:a7:38:a0:f3:76:73:e4:d1:88:0f: 28:c3:00:51:20:e9:7a:88:fb:d9:f3:85:75:cb:3a: 15:de:ae:a5:e6:4a:58:7d:22:29:ec:fa:31:95:e0: 2d:09:79:58:64:d2:06:d8:25:64:eb:04:bc:91:a8: 57:90:a8:74:60:39:02:be:e9:75:62:24:ec:a7:f0: 43:75:d4:d9:c8:53:7c:ff:bb:fe:ad:4a:31:56:e4: fd:cb:d4:1e:a0:9c:cb:ea:46:18:c1:df:64:58:49: 5d:2a:8f:68:99:f7:2f:59:50:c5:48:61:b9:10:a1: 40:d1:0a:2c:f3:95:6b:13:82:21:df:7f:c2:29:32: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:95:85:90:25:9C:3F:56:8B:19:7C:CF:82:FA:33:13:57:B7:F7 X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:37:51:bd:2c:43:11:39:7c:01:86:c0:53:c2:0a:55:10: 5a:53:78:65:af:f2:d3:e7:80:ea:be:35:c4:aa:2d:6e:c5:2b: 18:c7:d2:8c:c0:dc:80:58:00:2e:bd:30:44:9b:65:07:86:2c: b2:81:a3:68:f4:82:90:ef:28:0d:d3:52:18:45:80:01:53:90: b9:91:0e:1e:aa:be:f6:ff:6c:36:ce:8c:ef:b7:f5:41:96:18: 00:be:63:2c:07:4c:fe:7d:4c:9d:dd:b1:59:58:e9:7c:2e:a0: 6d:ee:bc:6b:e1:54:a0:19:20:65:33:a8:86:1f:4d:13:b3:0b: fc:59:6b:ab:ff:48:15:8e:b8:b0:f0:e0:5e:b7:12:ae:b5:74: 58:d6:fb:fb:01:17:13:0c:ab:a6:e1:f8:66:5a:55:3c:56:80: fd:1c:04:fc:06:6c:03:f2:6c:2a:88:ff:b6:44:7c:d4:9d:42: 3c:39:c2:65:56:3e:69:a2:c0:b0:00:0f:e5:93:b7:7f:d2:24: 82:a9:dd:69:22:13:6c:fb:bf:35:83:3e:73:3d:8c:9d:c7:10: c5:28:5a:07:25:25:80:90:d4:fd:34:59:5a:80:41:36:8f:28: 84:df:5f:d6:2a:7d:e9:7d:04:46:19:f7:ab:14:da:7c:db:49: 50:fb:bd:68 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJHVd1CbOuxDK4qpCAQYo6SmBfxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI1MTAyMDE1MjIwOFoX DTI1MTAyMTE1NDkwOFowMzExMC8GA1UEAxMoMEE4QTk1ODU5MDI1OUMzRjU2OEIx OTdDQ0Y4MkZBMzMxMzU3QjdGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALj1clg9zLMWK0iMWX+t+gnfwbtc4Nap+ZAAbDPzSiACAYntr1JSPNQ0KKHw xN6jcqhllXq6gZOgnWCr18sq47NedEiBel3nVa1Iefq3YTfNv+oL1dLcmQwhUR58 f9nEo64jJgFEPMouU7LfKyECp2b1KcxLbxuJyjc6vK2nOKDzdnPk0YgPKMMAUSDp eoj72fOFdcs6Fd6upeZKWH0iKez6MZXgLQl5WGTSBtglZOsEvJGoV5CodGA5Ar7p dWIk7KfwQ3XU2chTfP+7/q1KMVbk/cvUHqCcy+pGGMHfZFhJXSqPaJn3L1lQxUhh uRChQNEKLPOVaxOCId9/wiky9ckCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQKipWF kCWcP1aLGXzPgvozE1e39zAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMy9CMThGOTg5OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEADQo3Ub0sQxE5fAGGwFPCClUQWlN4Za/y0+eA6r41xKotbsUr GMfSjMDcgFgALr0wRJtlB4YssoGjaPSCkO8oDdNSGEWAAVOQuZEOHqq+9v9sNs6M 77f1QZYYAL5jLAdM/n1Mnd2xWVjpfC6gbe68a+FUoBkgZTOohh9NE7ML/Flrq/9I FY64sPDgXrcSrrV0WNb7+wEXEwyrpuH4ZlpVPFaA/RwE/AZsA/JsKoj/tkR81J1C PDnCZVY+aaLAsAAP5ZO3f9IkgqndaSITbPu/NYM+cz2MnccQxShaByUlgJDU/TRZ WoBBNo8ohN9f1ip96X0ERhn3qxTafNtJUPu9aA== -----END CERTIFICATE-----Generated at Mon Oct 20 22:45:02 2025 by rpki-client