$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: F8nI88UW+ZZr9SoZ9QHlvSuv0Mx/UqzRrAhqkpQ2RV0= Subject key identifier: 0C:7E:7B:0C:C5:D8:29:0C:53:20:A8:4D:92:DD:2D:37:A1:29:E9:80 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 0779 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 0769 Signing time: Sun 02 Nov 2025 21:40:26 +0000 Manifest this update: Sun 02 Nov 2025 21:40:25 +0000 Manifest next update: Sun 09 Nov 2025 21:40:25 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: KLKHMa3MneSaJC5Omxgvsx8Tz3ahmTHvo2ii1TWCGUc=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: fMhGcMMXUjfTJdFnbYO8Z54IBKMUqmILLcg2tCPHJNo=) 3: 2100BD70343611EF97A95F35C4F9AE02.roa (hash: fVVq8owPFhfgB1m2Mlau4zA1IXcKZ6xzRUeJon41eJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: Nov 2 21:40:25 2025 GMT Not After : Nov 9 21:40:25 2025 GMT Subject: CN=6907cfc9-72b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:44:ed:9e:d6:4d:07:d2:b1:97:18:5b:71: 3d:36:da:52:33:e4:29:80:69:1d:f3:5d:a6:37:1a: d8:bf:6a:b3:74:c9:00:d4:6f:2e:79:40:e0:e0:f4: 69:3d:29:10:9d:d5:c1:ea:06:6b:f3:7a:50:7a:bd: 78:b5:80:dd:92:75:d3:38:49:38:46:8b:d4:e3:6d: 66:51:45:a2:3c:64:0a:d9:97:b7:37:d8:a2:ca:8d: 79:34:92:ae:84:82:5a:5d:f3:f5:29:0a:e5:f7:6a: 65:e3:c0:35:7d:5a:13:72:a8:39:24:4e:43:da:e9: 16:6a:8a:a3:bd:ce:9d:19:1c:ad:b7:ef:b0:ae:e6: 67:7d:bc:4d:b3:b7:f1:1f:92:9f:88:2a:31:8f:45: 4e:10:a1:4a:cb:74:07:81:97:d0:9f:18:a0:db:36: 23:d9:19:d9:f9:a2:6a:7d:69:b4:65:5d:b4:50:4f: 9b:dc:0c:f3:3b:ee:e0:b1:d0:68:c5:a2:da:6d:4c: ca:13:f8:42:68:b5:82:ce:14:27:3c:84:00:e6:85: ec:c4:33:10:00:75:09:d6:b3:d9:e4:39:40:28:26: 5b:37:86:09:95:4c:f0:93:5e:31:9d:4c:56:c4:06: 10:5f:94:07:89:c5:4f:c6:75:cc:0e:19:87:3f:a6: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7E:7B:0C:C5:D8:29:0C:53:20:A8:4D:92:DD:2D:37:A1:29:E9:80 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4f:f5:c2:34:0f:08:fd:68:30:da:5e:14:a9:63:e3:84:6a: c8:31:bc:0a:8d:41:54:af:64:ca:d9:03:a2:87:30:72:f0:03: de:41:51:51:7b:cc:d9:c8:c7:a2:56:2b:63:08:38:aa:2b:99: d4:ea:c7:41:d8:f6:08:e9:7f:49:62:cf:a6:2d:1e:29:29:a4: 39:cd:2b:9a:7b:1c:1e:a3:d9:49:b0:17:b7:16:01:75:3c:81: f2:25:98:9b:95:17:5c:96:69:31:dd:1d:36:af:a2:4e:e0:32: d6:c3:3d:d7:fd:d1:f4:70:e6:63:87:59:f4:d2:30:e7:6a:d8: bd:f6:13:77:e4:60:d5:66:a6:36:69:1c:f1:2a:b4:15:52:ec: fc:16:72:bd:81:76:46:61:19:a2:28:83:d6:ec:9d:fc:dc:e7: 6d:37:33:1a:7b:44:d0:c4:b1:12:17:ab:6d:d3:0e:f3:a3:57: 99:31:c6:cd:10:58:7f:1b:2d:59:83:07:0e:12:f4:dd:a2:00: 3d:94:66:2f:da:0c:8d:91:a1:22:5a:f3:9e:e8:8d:b7:9b:cf: 3d:21:e7:ae:f5:9e:bc:72:49:41:bd:1e:e2:fc:01:57:5d:61: ec:b6:23:3a:b8:11:ec:1a:ca:88:0f:6c:e3:63:d8:ad:24:6a: 52:8b:e1:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjUxMTAyMjE0MDI1WhcNMjUxMTA5MjE0MDI1WjAYMRYwFAYD VQQDEw02OTA3Y2ZjOS03MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOxE7Z7WTQfSsZcYW3E9NtpSM+QpgGkd812mNxrYv2qzdMkA1G8ueUDg4PRp PSkQndXB6gZr83pQer14tYDdknXTOEk4RovU421mUUWiPGQK2Ze3N9iiyo15NJKu hIJaXfP1KQrl92pl48A1fVoTcqg5JE5D2ukWaoqjvc6dGRytt++wruZnfbxNs7fx H5KfiCoxj0VOEKFKy3QHgZfQnxig2zYj2RnZ+aJqfWm0ZV20UE+b3AzzO+7gsdBo xaLabUzKE/hCaLWCzhQnPIQA5oXsxDMQAHUJ1rPZ5DlAKCZbN4YJlUzwk14xnUxW xAYQX5QHicVPxnXMDhmHP6bIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx+ewzF 2CkMUyCoTZLdLTehKemAMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGT/XCNA8I/Wgw2l4UqWPjhGrIMbwKjUFUr2TK2QOihzBy8APeQVFR e8zZyMeiVitjCDiqK5nU6sdB2PYI6X9JYs+mLR4pKaQ5zSuaexweo9lJsBe3FgF1 PIHyJZiblRdclmkx3R02r6JO4DLWwz3X/dH0cOZjh1n00jDnati99hN35GDVZqY2 aRzxKrQVUuz8FnK9gXZGYRmiKIPW7J383OdtNzMae0TQxLESF6tt0w7zo1eZMcbN EFh/Gy1ZgwcOEvTdogA9lGYv2gyNkaEiWvOe6I23m889Ieeu9Z68cklBvR7i/AFX XWHstiM6uBHsGsqID2zjY9itJGpSi+GB -----END CERTIFICATE-----Generated at Mon Nov 3 21:09:04 2025 by rpki-client