$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: vHt8cSeyQC5OZVEGAGArBIMxnUrvNeUwq+8EOXjZ+dI= Subject key identifier: 41:06:A3:FF:ED:C6:8C:AB:C8:B6:82:CF:EE:99:D6:3A:3D:AB:6D:45 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 10A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 10A3 Signing time: Fri 31 Oct 2025 17:31:52 +0000 Manifest this update: Fri 31 Oct 2025 17:31:52 +0000 Manifest next update: Fri 07 Nov 2025 17:31:52 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: 7kamvv7TL+dTJ6UqmR+DxaAls618ChCKbgeeWIvUXwo=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 8EmwRqTTi0D6Jqb1QQoQFecB/Y41qpXK3rVqh44z4W0=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: 7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4265 (0x10a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Oct 31 17:31:52 2025 GMT Not After : Nov 7 17:31:52 2025 GMT Subject: CN=6904f288-554e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:49:bd:11:af:f5:14:fa:5b:21:6a:8c:2e: a7:21:5d:4c:c4:4e:f9:6f:90:27:55:7f:7d:42:23: e9:12:e4:a4:2b:8d:4f:de:18:a2:bc:94:a1:f5:2d: cd:54:e4:18:91:e9:48:7e:e1:67:1f:dd:61:ea:13: 8f:62:c9:ed:b3:89:37:16:28:b9:e4:10:87:b4:88: b0:48:0b:12:0f:ed:81:f4:41:e1:c5:a9:ee:73:32: 39:70:e6:8f:b3:35:ca:54:88:56:33:03:bc:16:67: ed:b4:14:8f:c8:0a:f5:dd:6b:5e:07:13:57:cd:b1: cb:98:14:ce:22:d1:58:8b:d4:e0:4a:89:b8:79:2e: 93:2d:54:db:ec:df:69:65:7b:ca:3d:9c:aa:dc:a7: 92:57:d0:1d:c1:55:ea:b3:90:6e:38:54:9f:b3:0d: 1f:69:27:59:59:ee:b8:e7:c7:c9:e6:f1:a6:a6:8b: c9:29:93:68:14:a7:ae:41:9c:50:b0:4e:4d:c5:0c: 1a:a1:44:94:0f:20:3f:11:38:e0:10:f6:e3:7b:c5: a1:6a:41:d7:93:b6:3d:96:e6:0d:63:a7:11:06:10: 9d:b3:8a:c6:40:1f:7d:e1:2c:58:ed:cc:3e:67:68: d1:7e:f6:aa:03:5c:6f:47:86:e1:5f:cf:fd:9b:59: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:06:A3:FF:ED:C6:8C:AB:C8:B6:82:CF:EE:99:D6:3A:3D:AB:6D:45 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c8:cb:46:3a:8a:11:96:26:77:5d:ac:5f:b8:72:b3:ad:42: 57:52:a0:82:86:92:63:29:29:8c:32:a8:f8:10:55:f7:f1:29: b8:bc:49:cd:a7:52:60:c2:bb:e5:ad:a9:9a:bc:0c:d0:81:92: f7:4d:2e:0b:45:f3:7a:ce:a0:f4:80:36:39:47:4c:d4:9e:65: d5:e5:70:7e:b8:ff:81:97:23:c7:7b:20:c0:7c:8a:2c:ca:ad: 74:e2:51:1a:63:4c:95:04:98:3e:ec:5c:f2:00:fc:2c:38:56: f2:e8:95:66:fb:6a:b2:dc:87:79:f6:1e:d6:75:2c:20:f8:80: bb:8a:4f:f2:f9:eb:f1:82:77:48:92:2d:fc:b9:ad:67:aa:b9: e4:09:51:3d:fe:a4:0e:81:36:bb:c5:f7:97:e0:00:b2:00:f5: 31:f6:85:4d:8a:93:46:80:db:e1:0a:a5:41:93:9d:3e:f4:a7: 40:cf:b9:f7:3e:63:2e:59:50:35:ef:95:fd:22:5c:df:d7:af: 77:eb:cb:e6:5b:f3:85:a0:3b:4a:68:3c:a4:2d:9c:c4:16:15: 17:63:08:87:39:6c:15:1a:c3:49:29:bb:71:28:60:d4:30:52: e8:9b:ac:c0:52:87:e4:dd:ac:e5:47:e7:eb:e9:ca:86:3f:c8: a8:25:a9:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUxMDMxMTczMTUyWhcNMjUxMTA3MTczMTUyWjAYMRYwFAYD VQQDEw02OTA0ZjI4OC01NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsclJvRGv9RT6WyFqjC6nIV1MxE75b5AnVX99QiPpEuSkK41P3hiivJSh9S3N VOQYkelIfuFnH91h6hOPYsnts4k3Fii55BCHtIiwSAsSD+2B9EHhxanuczI5cOaP szXKVIhWMwO8FmfttBSPyAr13WteBxNXzbHLmBTOItFYi9TgSom4eS6TLVTb7N9p ZXvKPZyq3KeSV9AdwVXqs5BuOFSfsw0faSdZWe6458fJ5vGmpovJKZNoFKeuQZxQ sE5NxQwaoUSUDyA/ETjgEPbje8WhakHXk7Y9luYNY6cRBhCds4rGQB994SxY7cw+ Z2jRfvaqA1xvR4bhX8/9m1mAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEGo//t xoyryLaCz+6Z1jo9q21FMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8yMtGOooRliZ3XaxfuHKzrUJXUqCChpJjKSmMMqj4EFX38Sm4vEnN p1JgwrvlramavAzQgZL3TS4LRfN6zqD0gDY5R0zUnmXV5XB+uP+BlyPHeyDAfIos yq104lEaY0yVBJg+7FzyAPwsOFby6JVm+2qy3Id59h7WdSwg+IC7ik/y+evxgndI ki38ua1nqrnkCVE9/qQOgTa7xfeX4ACyAPUx9oVNipNGgNvhCqVBk50+9KdAz7n3 PmMuWVA175X9Ilzf169368vmW/OFoDtKaDykLZzEFhUXYwiHOWwVGsNJKbtxKGDU MFLom6zAUofk3azlR+fr6cqGP8ioJamw -----END CERTIFICATE-----Generated at Sat Nov 1 23:10:13 2025 by rpki-client