$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: /QyrmGEYvmom6zvpAIXy+ASOwqVpfPEcNv4zuMptpI8= Subject key identifier: 17:77:5B:70:98:CD:A6:28:C1:32:72:03:6A:66:C3:A8:5C:94:26:70 Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 069B Signing time: Tue 04 Nov 2025 22:27:16 +0000 Manifest this update: Tue 04 Nov 2025 22:27:16 +0000 Manifest next update: Tue 11 Nov 2025 22:27:16 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: 401eLWS46uKytLIpd9Y3MpFA6Y69+7DC99Ds4mgHJXA=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: UZVHz0fvOssKPNLwiZ35IeL2xHQA6a7FTosxanmpoZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: Nov 4 22:27:16 2025 GMT Not After : Nov 11 22:27:16 2025 GMT Subject: CN=690a7dc4-b1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:32:bc:d5:10:52:be:fa:5a:3c:7d:c5:af: 83:01:a4:79:32:d6:5e:a3:05:fe:fe:41:c8:e3:43: 19:06:40:cb:bd:6e:e2:44:63:6f:c3:78:7e:66:1c: 78:4c:c8:9f:77:87:3e:60:9e:f1:8e:d0:c5:00:69: ae:a3:c7:5f:60:a1:e3:a9:82:88:d5:d5:0c:c0:54: 13:e3:7e:9c:ca:12:60:d1:7b:35:19:21:e3:87:46: c0:9a:6d:65:4f:b2:cd:36:ea:bb:04:5e:9a:27:26: f4:4a:80:ee:1f:10:5d:12:bc:13:3d:3c:a5:64:65: cf:70:c7:2e:7b:69:39:fc:66:1e:e9:d3:0d:b7:21: 5e:39:c8:49:ea:ac:0a:ce:9e:9c:ab:62:3b:80:34: cb:8e:4b:5d:1e:90:93:03:90:46:5d:d4:7e:87:e7: 15:e8:7d:a8:da:5c:a3:50:36:cb:9d:5c:36:66:2b: f2:d9:e9:98:e9:2c:83:07:5d:b9:77:b2:53:ea:f9: aa:96:ae:cc:0f:95:7b:be:c9:23:ae:42:17:0d:86: cc:68:3a:f2:99:19:a1:30:ea:55:f8:4e:1e:ff:e8: dd:5c:65:af:ba:98:c7:77:08:4f:33:2f:3a:b4:0c: f1:ab:d7:28:65:c5:3f:e2:21:23:69:83:1c:d5:1a: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:77:5B:70:98:CD:A6:28:C1:32:72:03:6A:66:C3:A8:5C:94:26:70 X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3d:29:26:d9:01:91:4e:7a:3d:14:98:9d:bf:36:2a:e6:07: 87:34:8c:b2:24:72:f3:30:cc:f8:af:3a:1a:98:60:f9:cd:5b: fb:88:1d:58:9c:b0:1c:4d:c1:e6:ff:3f:89:3c:4a:ad:26:9d: 07:8f:12:36:08:6f:79:69:d0:51:e0:4c:89:f0:23:cd:f0:e3: 5b:85:28:d8:34:87:1a:71:0f:d3:ae:13:0e:64:e0:0a:e9:2a: 0e:d6:63:9f:8c:a6:69:0c:ce:13:af:94:20:1c:1d:6d:cf:90: cd:01:f0:33:52:b5:fe:0a:9a:fb:f1:e3:4c:61:04:82:3a:e2: ff:b3:96:67:e1:67:78:0a:2f:2a:ce:15:c2:80:0f:34:78:da: 61:14:d1:62:c5:75:30:c3:f5:d9:0b:ab:fd:1a:6e:35:a4:3f: 32:62:cc:26:57:e2:94:ff:02:15:d2:5b:64:de:93:4b:b3:d7: fd:02:5d:6c:79:26:52:42:90:1d:7a:20:79:aa:63:e3:26:b3: 00:7e:f1:59:5b:2b:df:60:b0:c9:e9:0c:88:fc:51:f8:21:0d: f9:2f:ee:a5:4c:c0:73:1d:eb:15:0f:96:a4:ba:6e:48:03:ef: 3a:15:13:0d:02:bd:9d:e5:90:90:9a:54:b5:c7:f6:bc:f7:e1: 80:54:75:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjUxMTA0MjIyNzE2WhcNMjUxMTExMjIyNzE2WjAYMRYwFAYD VQQDEw02OTBhN2RjNC1iMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzoyvNUQUr76Wjx9xa+DAaR5MtZeowX+/kHI40MZBkDLvW7iRGNvw3h+Zhx4 TMifd4c+YJ7xjtDFAGmuo8dfYKHjqYKI1dUMwFQT436cyhJg0Xs1GSHjh0bAmm1l T7LNNuq7BF6aJyb0SoDuHxBdErwTPTylZGXPcMcue2k5/GYe6dMNtyFeOchJ6qwK zp6cq2I7gDTLjktdHpCTA5BGXdR+h+cV6H2o2lyjUDbLnVw2Zivy2emY6SyDB125 d7JT6vmqlq7MD5V7vskjrkIXDYbMaDrymRmhMOpV+E4e/+jdXGWvupjHdwhPMy86 tAzxq9coZcU/4iEjaYMc1RqJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd3W3CY zaYowTJyA2pmw6hclCZwMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsPSkm2QGRTno9FJidvzYq5geHNIyyJHLzMMz4rzoamGD5zVv7iB1Y nLAcTcHm/z+JPEqtJp0HjxI2CG95adBR4EyJ8CPN8ONbhSjYNIcacQ/TrhMOZOAK 6SoO1mOfjKZpDM4Tr5QgHB1tz5DNAfAzUrX+Cpr78eNMYQSCOuL/s5Zn4Wd4Ci8q zhXCgA80eNphFNFixXUww/XZC6v9Gm41pD8yYswmV+KU/wIV0ltk3pNLs9f9Al1s eSZSQpAdeiB5qmPjJrMAfvFZWyvfYLDJ6QyI/FH4IQ35L+6lTMBzHesVD5akum5I A+86FRMNAr2d5ZCQmlS1x/a89+GAVHWx -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:18 2025 by rpki-client