$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: ZRpARYO2zEMFuk0IBcvHkhMfuy1D+CuAZISrXW/3tQo= Subject key identifier: 01:F4:75:D9:D8:98:B7:AA:45:04:ED:72:92:E1:E9:29:83:18:71:FD Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: AD Signing time: Wed 05 Nov 2025 06:20:57 +0000 Manifest this update: Wed 05 Nov 2025 06:20:57 +0000 Manifest next update: Wed 12 Nov 2025 06:20:57 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: PbpHF52I0xEaPtwe+yzOsV0Uv76bUlwsWTI+Vot7l04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Nov 5 06:20:57 2025 GMT Not After : Nov 12 06:20:57 2025 GMT Subject: CN=690aecc9-dee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:dd:3e:44:6e:23:a7:ea:14:46:e6:dc:10: 69:38:8e:c9:9a:f4:71:a6:fa:0c:ab:17:46:f1:bb: 11:ba:38:ac:5c:e8:84:a7:00:ff:ed:c2:7c:f6:f0: 20:7d:6d:42:ad:40:33:f3:83:85:1a:a7:e2:e8:92: c2:6f:ea:31:e2:a6:10:2b:ed:28:d0:d7:c7:f5:89: db:1b:18:e7:f7:4c:c4:e8:ef:bb:89:de:1b:61:f4: 2f:dd:68:a8:c7:ee:90:0f:d3:1a:43:35:d4:da:1c: b8:5d:da:b5:35:92:6a:9a:8f:b1:4b:14:c7:27:88: 7c:b1:04:cb:a2:d4:6a:37:ce:e2:49:27:01:37:f3: a2:08:28:bc:b5:ab:b2:f8:fa:93:64:00:5b:f0:1b: 9f:50:49:dd:fb:3a:6b:f4:a7:19:3f:56:9d:ed:f9: 26:ae:42:7e:da:22:98:84:aa:12:9d:7a:0d:00:f5: 6f:25:cb:d1:4c:b0:10:de:02:8e:72:d3:34:84:b5: ab:8f:3f:77:8c:0c:96:c2:15:0a:d6:72:3a:dd:b6: 2c:da:dd:c6:df:4f:e6:cc:f3:dd:38:b6:6c:d1:91: e5:f9:f5:99:5b:9b:28:88:d1:be:74:e5:8b:87:37: 8e:47:bd:13:87:fb:40:6d:d2:5d:e2:7e:a4:eb:fb: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:75:D9:D8:98:B7:AA:45:04:ED:72:92:E1:E9:29:83:18:71:FD X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:3b:39:f3:1e:eb:04:0c:24:00:98:9a:92:b5:b0:b3:f3:39: 37:19:e3:7b:42:fb:3c:0a:f9:97:ac:22:6a:11:a9:e1:da:a7: 43:16:82:1b:4f:28:6c:e7:3b:d5:78:71:00:bb:a8:ca:6c:2d: f1:9b:69:c9:10:27:26:45:30:c9:e7:4a:85:da:6c:ff:86:81: 80:2b:0a:c2:97:10:9c:c1:5e:aa:42:88:bb:af:3f:6f:1b:d7: aa:13:bd:96:01:6e:0b:0b:44:89:fd:0f:b9:0b:c3:b9:bc:32: d1:48:b7:91:74:b9:a1:be:5c:c8:3a:e8:8a:0f:db:03:a7:b7: d0:54:c9:7c:ba:e1:8e:1d:e9:12:c4:7b:c8:c2:60:b9:4f:d9: a1:20:3a:8b:2e:b5:84:f0:98:df:aa:0b:d2:87:d7:33:c9:89: 2a:e9:e2:b6:87:45:7f:1d:d3:d2:8a:d2:3b:a9:6b:bf:62:a8: 13:80:a7:8a:f9:0f:33:d2:0c:8f:44:d0:2d:fe:22:e2:1f:bf: 05:87:05:3c:53:59:72:de:07:52:13:dc:91:d4:db:01:9d:0d: 6f:e7:4b:ea:69:53:68:15:7b:fd:d1:38:90:0f:5c:70:cd:b0: 2c:b8:56:79:19:1c:1d:a0:35:5e:db:03:56:7a:b2:0d:4d:bf: dc:e5:ac:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUxMTA1MDYyMDU3WhcNMjUxMTEyMDYyMDU3WjAYMRYwFAYD VQQDEw02OTBhZWNjOS1kZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ejdPkRuI6fqFEbm3BBpOI7JmvRxpvoMqxdG8bsRujisXOiEpwD/7cJ89vAg fW1CrUAz84OFGqfi6JLCb+ox4qYQK+0o0NfH9YnbGxjn90zE6O+7id4bYfQv3Wio x+6QD9MaQzXU2hy4Xdq1NZJqmo+xSxTHJ4h8sQTLotRqN87iSScBN/OiCCi8tauy +PqTZABb8BufUEnd+zpr9KcZP1ad7fkmrkJ+2iKYhKoSnXoNAPVvJcvRTLAQ3gKO ctM0hLWrjz93jAyWwhUK1nI63bYs2t3G30/mzPPdOLZs0ZHl+fWZW5soiNG+dOWL hzeOR70Th/tAbdJd4n6k6/ssDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH0ddnY mLeqRQTtcpLh6SmDGHH9MB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzOznzHusEDCQAmJqStbCz8zk3GeN7Qvs8CvmXrCJqEanh2qdDFoIb Tyhs5zvVeHEAu6jKbC3xm2nJECcmRTDJ50qF2mz/hoGAKwrClxCcwV6qQoi7rz9v G9eqE72WAW4LC0SJ/Q+5C8O5vDLRSLeRdLmhvlzIOuiKD9sDp7fQVMl8uuGOHekS xHvIwmC5T9mhIDqLLrWE8JjfqgvSh9czyYkq6eK2h0V/HdPSitI7qWu/YqgTgKeK +Q8z0gyPRNAt/iLiH78FhwU8U1ly3gdSE9yR1NsBnQ1v50vqaVNoFXv90TiQD1xw zbAsuFZ5GRwdoDVe2wNWerINTb/c5awd -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:01 2025 by rpki-client