$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json) Hash identifier: xVuD3nV5qd9AfXp6lUwdtht655DHWeGbDDhmpi+KKN0= Subject key identifier: 86:00:B5:64:EE:31:56:D9:19:5D:3B:54:6B:79:52:0F:A1:31:0C:AD Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft Manifest number: 056F Signing time: Sun 02 Nov 2025 23:19:46 +0000 Manifest this update: Sun 02 Nov 2025 23:19:46 +0000 Manifest next update: Sun 09 Nov 2025 23:19:46 +0000 Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: tAMdYrChhD687z1Bff6lnJD2OwH/sPRRIgStubGxWfA=) 2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: ym0ByuNOndht95n45vmzI/LTnp1dbpbPf/6SayzC+38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Validity Not Before: Nov 2 23:19:46 2025 GMT Not After : Nov 9 23:19:46 2025 GMT Subject: CN=6907e712-f481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:e9:f0:a9:84:f1:f8:ac:e7:4b:22:52:05: 51:54:5b:b4:ce:ad:c0:94:cb:45:90:56:00:5c:60: 76:cb:6f:f7:bd:7b:a1:0a:ec:79:b3:26:3b:91:fd: de:38:4d:ee:3a:b7:b0:e0:2f:d2:85:0d:29:c2:41: 82:1c:67:9b:a8:db:0f:e7:ba:1a:d1:8b:ba:06:68: 12:50:76:b7:9d:15:13:dc:25:7c:e4:05:2f:51:7e: ff:ba:43:aa:a0:f9:6a:82:3b:60:47:46:20:c5:e5: ff:ec:34:e9:a9:47:39:92:34:62:11:8f:26:82:96: 47:5b:7f:6a:aa:7f:b0:ea:c4:b3:a0:c0:65:25:00: 1a:2b:89:29:b8:a5:e5:19:70:13:fc:41:a0:8d:34: 14:41:b4:34:a4:27:0e:2d:44:7e:b6:00:40:ce:13: 32:5b:9e:97:b8:7a:4d:a3:b3:e3:78:db:fa:79:b6: 70:7c:df:9b:f9:95:e4:be:64:a2:cc:36:36:41:99: c9:3f:9a:a1:6e:0c:bf:aa:b3:80:b5:78:ab:75:d1: a4:d8:92:fe:d9:c6:c6:a1:55:32:e3:ec:3b:fb:2d: a2:1e:be:72:01:c2:fd:aa:80:f9:67:37:8d:97:f6: 4e:50:f2:17:b0:67:4f:32:bc:ea:0f:b4:29:f4:c8: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:B5:64:EE:31:56:D9:19:5D:3B:54:6B:79:52:0F:A1:31:0C:AD X509v3 Authority Key Identifier: keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:04:76:f9:45:4a:0c:ee:e2:02:23:2e:ab:e0:2c:3d:bc:45: cd:f2:60:b3:57:20:08:ba:09:13:c6:1f:d4:32:b6:9d:cf:df: 94:fe:1c:62:2b:4c:8e:e0:86:4a:d3:1a:43:e1:d8:55:bc:20: e7:1d:34:dd:5a:4d:7b:26:73:87:85:e1:51:34:a4:3b:9c:5a: da:12:55:c6:d8:2c:6e:17:13:31:a9:8a:d9:56:a3:76:a2:6b: 68:24:71:9b:a8:0b:36:17:90:f0:e1:61:75:68:ce:84:73:34: e3:19:de:b9:21:8d:73:3b:63:5b:93:87:cb:0d:a8:03:73:60: f3:8b:54:5f:46:3f:04:9a:7b:15:1e:13:7e:5c:4f:7f:c6:d3: be:43:2e:92:6e:5e:33:44:de:a2:3b:7e:68:9a:af:db:34:98: 16:92:b8:69:d5:1c:51:f6:ba:13:81:f9:81:6b:bb:6f:a4:83: ac:86:74:3f:db:0c:8f:58:4c:b6:4e:80:c2:7e:01:80:0d:fe: fb:14:e0:53:f8:57:5d:b3:c2:e4:b0:14:87:d9:ca:44:c7:02: 29:85:37:59:69:e0:d6:1b:36:69:de:13:8c:f6:b2:e2:04:0d: 0a:76:9d:ae:f4:7b:67:89:48:28:b2:61:34:7b:82:9d:8e:c0: 90:42:ba:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExRTcxMTAvBgNVBAUTKEQ2MjNBMzkyNTgwOEJBRTg0QzI3MTRFMTZBODc4NDA0 RTA2MDQ4RDEwHhcNMjUxMTAyMjMxOTQ2WhcNMjUxMTA5MjMxOTQ2WjAYMRYwFAYD VQQDEw02OTA3ZTcxMi1mNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uvp8KmE8fis50siUgVRVFu0zq3AlMtFkFYAXGB2y2/3vXuhCux5syY7kf3e OE3uOrew4C/ShQ0pwkGCHGebqNsP57oa0Yu6BmgSUHa3nRUT3CV85AUvUX7/ukOq oPlqgjtgR0YgxeX/7DTpqUc5kjRiEY8mgpZHW39qqn+w6sSzoMBlJQAaK4kpuKXl GXAT/EGgjTQUQbQ0pCcOLUR+tgBAzhMyW56XuHpNo7PjeNv6ebZwfN+b+ZXkvmSi zDY2QZnJP5qhbgy/qrOAtXirddGk2JL+2cbGoVUy4+w7+y2iHr5yAcL9qoD5ZzeN l/ZOUPIXsGdPMrzqD7Qp9MhQWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYAtWTu MVbZGV07VGt5Ug+hMQytMB8GA1UdIwQYMBaAFNYjo5JYCLroTCcU4WqHhATgYEjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTFFNy8xMEZBQkVEMjAy NTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1aE1KeFRoYW9lRUJPQmdT TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpT2prbGdJdXVoTUp4VGhhb2VFQk9CZ1NORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTFFNy8xMEZBQkVEMjAyNTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1 aE1KeFRoYW9lRUJPQmdTTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgBHb5RUoM7uICIy6r4Cw9vEXN8mCzVyAIugkTxh/UMradz9+U/hxi K0yO4IZK0xpD4dhVvCDnHTTdWk17JnOHheFRNKQ7nFraElXG2CxuFxMxqYrZVqN2 omtoJHGbqAs2F5Dw4WF1aM6EczTjGd65IY1zO2Nbk4fLDagDc2Dzi1RfRj8EmnsV HhN+XE9/xtO+Qy6Sbl4zRN6iO35omq/bNJgWkrhp1RxR9roTgfmBa7tvpIOshnQ/ 2wyPWEy2ToDCfgGADf77FOBT+Fdds8LksBSH2cpExwIphTdZaeDWGzZp3hOM9rLi BA0Kdp2u9HtniUgosmE0e4KdjsCQQrqn -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:34 2025 by rpki-client