$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json) Hash identifier: kew3LTBtQGVTneAlMZGWNx0z4P7/JMqhoeJOBGVyoRg= Subject key identifier: 37:5D:25:84:65:87:80:0B:D7:44:A9:28:EB:9D:25:05:76:88:26:0E Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft Manifest number: 07BD Signing time: Sun 02 Nov 2025 21:17:56 +0000 Manifest this update: Sun 02 Nov 2025 21:17:55 +0000 Manifest next update: Sun 09 Nov 2025 21:17:55 +0000 Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: 1zfV5RJKKpU7HSezpwR3XScQlWfxKFq/yNtTzPIUKpU=) 2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: NR1SVCvj30A6pQwNp2dHbCZu3umNoMEReinsxF/kIrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Validity Not Before: Nov 2 21:17:55 2025 GMT Not After : Nov 9 21:17:55 2025 GMT Subject: CN=6907ca84-ea21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:27:7a:c4:6f:f1:17:f0:86:d1:30:3a:a0: de:e4:b9:63:14:18:0a:49:21:e9:74:a5:4c:9e:73: f0:d3:11:d7:62:1a:ab:8a:45:cd:1e:f7:2c:6b:93: e1:90:0b:40:85:a3:55:ec:ba:f3:e4:60:d6:37:18: 9c:8c:32:71:2c:92:a0:8e:76:65:be:57:45:18:73: 9d:86:37:22:da:17:74:79:bf:5e:96:84:ca:f3:b8: 67:57:9f:97:81:6b:2a:a8:7f:d3:fc:f0:4f:b3:0c: 73:d7:50:ef:97:9e:86:05:6f:c9:ed:b0:4f:8d:32: 99:71:2a:57:89:a1:f8:e4:00:69:10:c5:04:8a:b4: b3:f4:6b:6d:7d:82:f4:d7:3e:01:57:60:98:ec:9b: e6:52:eb:4e:81:cf:c6:dd:50:9e:55:69:30:9e:aa: 0b:d2:67:93:35:03:0c:43:6c:26:00:01:1e:b6:5a: 68:4f:85:d1:25:be:8b:73:b9:d2:09:17:a4:9c:05: 99:9f:48:e1:75:0a:7a:10:42:a3:b5:12:21:93:67: 36:84:33:c9:7a:42:df:53:48:7a:41:23:de:2a:6d: 76:61:e3:94:3a:bc:56:d6:fa:fe:cd:3c:bc:b4:a5: a5:c5:ce:b4:84:b4:d7:32:07:6e:86:77:cd:d5:e6: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5D:25:84:65:87:80:0B:D7:44:A9:28:EB:9D:25:05:76:88:26:0E X509v3 Authority Key Identifier: keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fd:b3:b9:b5:64:db:09:c7:9f:9c:42:23:1c:5c:92:a4:c1: 0d:78:82:41:a0:c5:75:76:e2:ec:7a:96:e9:15:5c:ea:80:bc: f8:8c:7a:b4:60:94:93:c7:26:11:fd:78:25:ee:b2:b7:a1:27: e1:d0:e7:20:f3:ed:e9:9e:ea:77:64:e8:44:ce:68:f4:67:a2: 96:f1:ff:38:e8:0d:03:8b:0d:ef:3b:48:1f:02:62:71:ad:5c: 35:d8:0e:49:b1:f2:eb:8f:1e:d5:8b:7a:61:43:15:fe:cc:5a: 7b:ba:f5:d6:f7:35:df:72:3d:09:e2:54:c8:39:bd:65:b4:86: 94:6b:5a:d7:4e:16:0c:43:f3:89:42:ec:cc:40:61:50:22:9f: 23:99:b3:31:e0:73:07:6f:9e:a9:72:cb:aa:ef:59:61:b1:8b: a1:43:ff:ec:8f:d2:ae:18:90:99:b9:1c:5f:8e:86:b2:ca:e6: e8:8e:e6:42:96:88:67:e7:e8:5a:99:74:1d:0c:80:39:30:fd: 4b:47:3d:69:07:a9:98:5a:8d:c0:41:b6:ed:64:48:7b:3d:f6: 15:9e:69:86:8f:ed:e4:dd:65:a1:42:44:20:a9:f8:9f:28:d4: 74:a9:4f:0f:9a:03:d5:25:d8:7c:cf:b9:c0:27:85:09:89:b6: ac:d3:05:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD QTNGNzlBNkIwHhcNMjUxMTAyMjExNzU1WhcNMjUxMTA5MjExNzU1WjAYMRYwFAYD VQQDEw02OTA3Y2E4NC1lYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKknesRv8RfwhtEwOqDe5LljFBgKSSHpdKVMnnPw0xHXYhqrikXNHvcsa5Ph kAtAhaNV7Lrz5GDWNxicjDJxLJKgjnZlvldFGHOdhjci2hd0eb9eloTK87hnV5+X gWsqqH/T/PBPswxz11Dvl56GBW/J7bBPjTKZcSpXiaH45ABpEMUEirSz9GttfYL0 1z4BV2CY7JvmUutOgc/G3VCeVWkwnqoL0meTNQMMQ2wmAAEetlpoT4XRJb6Lc7nS CReknAWZn0jhdQp6EEKjtRIhk2c2hDPJekLfU0h6QSPeKm12YeOUOrxW1vr+zTy8 tKWlxc60hLTXMgduhnfN1eZWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDddJYRl h4AL10SpKOudJQV2iCYOMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5 MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4 VzBXTlp1T2NZTW5LUDNtbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO/bO5tWTbCcefnEIjHFySpMENeIJBoMV1duLsepbpFVzqgLz4jHq0 YJSTxyYR/Xgl7rK3oSfh0Ocg8+3pnup3ZOhEzmj0Z6KW8f846A0Diw3vO0gfAmJx rVw12A5JsfLrjx7Vi3phQxX+zFp7uvXW9zXfcj0J4lTIOb1ltIaUa1rXThYMQ/OJ QuzMQGFQIp8jmbMx4HMHb56pcsuq71lhsYuhQ//sj9KuGJCZuRxfjoayyubojuZC lohn5+hamXQdDIA5MP1LRz1pB6mYWo3AQbbtZEh7PfYVnmmGj+3k3WWhQkQgqfif KNR0qU8PmgPVJdh8z7nAJ4UJibas0wXx -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:28 2025 by rpki-client