$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: KJu0Yy/VDEWJsfqBmCBRmutdBUqX/Cu/ReJC6vGzSOc= Subject key identifier: 76:0D:65:D7:DF:A3:0A:95:20:7C:A9:68:36:A6:F2:83:17:E9:C0:D4 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 07E0 Signing time: Tue 04 Nov 2025 21:16:22 +0000 Manifest this update: Tue 04 Nov 2025 21:16:21 +0000 Manifest next update: Tue 11 Nov 2025 21:16:21 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: hBDMfl9Q3+8OgI5zTd5382Oq8RLWkVs2vJ1yE+l+jwk=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Nov 4 21:16:21 2025 GMT Not After : Nov 11 21:16:21 2025 GMT Subject: CN=690a6d26-438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:d1:e0:c5:17:cc:6c:37:6e:dc:7d:ff:27: bd:2c:7d:49:07:73:d8:9c:98:38:d4:0b:d0:51:68: c6:08:f1:d6:91:69:f5:5a:73:74:52:83:ab:1b:02: b5:94:9c:2e:ac:c8:66:07:fc:64:c1:77:77:ee:f7: d8:20:5c:44:ec:d7:f2:24:f3:33:e4:48:1a:04:73: bf:d6:15:6c:ef:ef:b2:d9:75:13:72:79:05:a5:74: 3b:ac:12:95:36:ad:11:15:96:ae:2f:a3:90:ce:01: b2:41:a1:9c:71:b4:9e:96:04:2d:fe:3c:01:11:64: 51:ae:63:9a:03:48:dd:d9:dd:f0:e8:34:b9:bf:eb: a6:72:91:4b:de:34:d3:4c:5e:71:c9:c0:65:ef:90: af:90:6e:e6:43:f0:59:20:8a:b2:c3:94:63:80:06: 92:be:d6:6e:82:aa:2a:1e:08:1b:33:ec:d7:0e:5d: 98:1a:77:be:a3:40:8e:2f:61:d4:ab:23:be:e5:57: 3b:d4:6e:68:ec:20:ce:1b:4e:fe:be:99:ed:81:a3: c9:40:c9:3b:d5:e3:15:c5:3a:99:56:48:e2:b4:0c: 32:ff:f0:f6:91:f5:ce:53:a0:d7:2d:c6:c3:f5:e0: a2:a8:13:4c:cc:7e:6a:b6:66:69:d8:bd:6a:a4:b8: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:65:D7:DF:A3:0A:95:20:7C:A9:68:36:A6:F2:83:17:E9:C0:D4 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ea:77:33:bc:36:7b:49:5f:39:7d:0c:d1:ac:de:e6:44:66: cb:c9:8e:40:24:29:f5:73:4e:67:a1:56:ea:7b:f2:d4:c6:b6: d4:6e:d6:8c:48:b1:27:e1:ba:ab:4c:30:27:f6:a8:6f:00:5b: a4:de:9c:bc:f3:f2:fc:f1:20:13:1d:18:50:b2:7e:35:b4:d3: 82:d2:ef:31:12:a0:76:5c:fa:d5:50:3b:5e:3e:fb:e4:93:57: 55:eb:77:0b:d0:74:95:db:46:20:fd:d8:e1:1f:b6:af:24:6e: 31:a7:2c:11:64:e5:56:26:f6:38:6b:04:6c:3e:5a:93:37:26: e0:ba:ce:f9:d4:57:e6:12:7b:99:fa:87:63:54:5d:87:3a:8f: b9:4d:0e:0d:82:3f:38:ff:24:4d:f6:38:0f:4c:2d:52:ad:f3: eb:87:2b:a7:bc:02:38:97:8a:1d:6c:62:8f:fd:36:7e:fb:f3: b7:db:bd:91:bb:a9:e0:67:54:ab:6f:fc:d8:12:c2:6b:ca:51: 6a:4c:8c:6d:08:0a:66:24:1d:d9:29:21:ac:f0:1a:e6:90:a4: 1f:3f:e5:94:b8:b6:f9:96:bf:25:c1:13:d7:6d:68:9e:9a:28: 1a:74:64:7a:b5:0b:0c:c3:d7:6e:52:d7:68:41:a9:5f:5e:45: f2:a1:3b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUxMTA0MjExNjIxWhcNMjUxMTExMjExNjIxWjAYMRYwFAYD VQQDEw02OTBhNmQyNi00MzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x3R4MUXzGw3btx9/ye9LH1JB3PYnJg41AvQUWjGCPHWkWn1WnN0UoOrGwK1 lJwurMhmB/xkwXd37vfYIFxE7NfyJPMz5EgaBHO/1hVs7++y2XUTcnkFpXQ7rBKV Nq0RFZauL6OQzgGyQaGccbSelgQt/jwBEWRRrmOaA0jd2d3w6DS5v+umcpFL3jTT TF5xycBl75CvkG7mQ/BZIIqyw5RjgAaSvtZugqoqHggbM+zXDl2YGne+o0COL2HU qyO+5Vc71G5o7CDOG07+vpntgaPJQMk71eMVxTqZVkjitAwy//D2kfXOU6DXLcbD 9eCiqBNMzH5qtmZp2L1qpLhATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYNZdff owqVIHypaDam8oMX6cDUMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS6nczvDZ7SV85fQzRrN7mRGbLyY5AJCn1c05noVbqe/LUxrbUbtaM SLEn4bqrTDAn9qhvAFuk3py88/L88SATHRhQsn41tNOC0u8xEqB2XPrVUDtePvvk k1dV63cL0HSV20Yg/djhH7avJG4xpywRZOVWJvY4awRsPlqTNybgus751FfmEnuZ +odjVF2HOo+5TQ4Ngj84/yRN9jgPTC1SrfPrhyunvAI4l4odbGKP/TZ++/O3272R u6ngZ1Srb/zYEsJrylFqTIxtCApmJB3ZKSGs8BrmkKQfP+WUuLb5lr8lwRPXbWie migadGR6tQsMw9duUtdoQalfXkXyoTuu -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:12 2025 by rpki-client