$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: LR1YUGlNvkUOL4/GmnS1U+3izefmuKyeJroLIhrqJXo= Subject key identifier: 67:38:F2:66:0E:D7:06:BD:54:D9:06:11:1A:8D:BE:46:4C:FB:25:AB Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 04E1 Signing time: Tue 04 Nov 2025 23:51:36 +0000 Manifest this update: Tue 04 Nov 2025 23:51:36 +0000 Manifest next update: Tue 11 Nov 2025 23:51:36 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: QNPJyxtWONPut4i4/pUqj/8aoARoGBCIGbwmLku0G60=) 2: F9343F063B0911EC82AE0828C4F9AE02.roa (hash: pIsS/aAz3NlTfiRznLCHJWwJfZnRVJbtBleuPSnoEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Nov 4 23:51:36 2025 GMT Not After : Nov 11 23:51:36 2025 GMT Subject: CN=690a9188-471e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:cf:dd:e0:f2:60:9b:5c:9d:46:88:e1:0e: 4f:d6:71:66:09:c2:d7:85:ba:35:bd:3a:e8:ca:6d: 4d:0a:f2:26:b0:04:1b:55:ab:1e:86:8c:7d:2a:7d: 85:9a:7f:84:30:51:7a:a0:f1:96:5f:cc:6b:39:f7: e0:78:50:f3:9e:36:09:83:cc:5a:cd:f5:8e:de:15: 38:d6:a5:83:b1:5b:7f:07:79:0c:52:70:54:e6:f8: 8d:23:e1:bc:78:08:22:02:75:98:55:12:1f:ab:1d: a5:38:87:2d:f2:a4:ee:c7:77:86:b2:e2:51:62:f6: ba:db:5a:2e:3a:89:1f:cd:4d:8d:b3:af:33:87:18: 45:74:c4:48:f0:f3:f4:cf:7a:41:b6:37:7e:0a:36: 6b:0b:e0:62:36:0c:8d:1f:aa:73:68:61:08:3a:3a: f8:60:e9:8f:ba:8b:e1:05:ec:ae:06:74:a1:90:9c: 2a:fa:9f:7b:9d:84:84:eb:bf:d7:f3:e7:1c:5d:c7: f0:5c:50:24:ff:6a:ce:79:36:73:ad:24:9b:53:01: cc:68:dd:94:56:77:5c:58:9c:0b:40:6b:3d:bf:2d: 9d:b9:c7:6d:07:21:a0:e3:95:59:d4:30:04:8c:b2: c7:9b:ff:95:d3:0c:ef:f8:0f:49:63:29:dd:72:ba: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:F2:66:0E:D7:06:BD:54:D9:06:11:1A:8D:BE:46:4C:FB:25:AB X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:e5:9d:23:0e:f3:70:0b:31:96:f8:29:16:8b:4d:f6:ed:df: 9c:3b:ac:bd:7c:8d:f5:23:e5:ad:20:6f:58:cb:6e:1f:87:e3: bb:9b:be:f0:02:01:88:ad:fe:6f:72:eb:af:af:0a:d0:fd:00: 51:23:eb:67:20:d0:69:67:08:b5:07:f9:0b:1a:15:27:a9:a8: 7a:a2:66:ae:64:20:5c:91:b7:e6:2c:3f:d5:f8:b9:87:77:c0: e9:41:d2:e5:ee:c8:05:22:91:f7:4a:ae:ad:43:51:46:61:7b: b2:a8:52:48:9a:fd:89:fa:a0:db:dd:ef:61:6b:2c:c5:f2:f9: 9a:37:e9:2a:69:9f:4f:83:53:11:04:15:75:8e:2a:63:8e:bb: 7a:34:32:56:fb:53:56:59:df:1e:b9:27:87:f1:5b:72:ab:a9: 0a:45:a0:95:6b:fe:e4:84:0a:54:7c:cf:8c:65:05:b2:5d:32: 44:fb:25:22:95:6f:50:79:70:b9:47:61:7d:8c:37:2a:10:9e: 2e:6b:32:ba:81:0d:01:79:11:77:85:44:74:d0:a3:87:4d:38: 32:1a:8f:9a:bf:76:4f:31:2f:da:cd:d4:83:f6:3a:81:de:da: d5:1b:97:0c:44:06:a3:ee:ab:a2:12:b2:01:ae:d6:62:8e:b0: a9:23:8b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUxMTA0MjM1MTM2WhcNMjUxMTExMjM1MTM2WjAYMRYwFAYD VQQDEw02OTBhOTE4OC00NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvrP3eDyYJtcnUaI4Q5P1nFmCcLXhbo1vTroym1NCvImsAQbVasehox9Kn2F mn+EMFF6oPGWX8xrOffgeFDznjYJg8xazfWO3hU41qWDsVt/B3kMUnBU5viNI+G8 eAgiAnWYVRIfqx2lOIct8qTux3eGsuJRYva621ouOokfzU2Ns68zhxhFdMRI8PP0 z3pBtjd+CjZrC+BiNgyNH6pzaGEIOjr4YOmPuovhBeyuBnShkJwq+p97nYSE67/X 8+ccXcfwXFAk/2rOeTZzrSSbUwHMaN2UVndcWJwLQGs9vy2ducdtByGg45VZ1DAE jLLHm/+V0wzv+A9JYyndcrpt4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc48mYO 1wa9VNkGERqNvkZM+yWrMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy5Z0jDvNwCzGW+CkWi0327d+cO6y9fI31I+WtIG9Yy24fh+O7m77w AgGIrf5vcuuvrwrQ/QBRI+tnINBpZwi1B/kLGhUnqah6omauZCBckbfmLD/V+LmH d8DpQdLl7sgFIpH3Sq6tQ1FGYXuyqFJImv2J+qDb3e9hayzF8vmaN+kqaZ9Pg1MR BBV1jipjjrt6NDJW+1NWWd8euSeH8Vtyq6kKRaCVa/7khApUfM+MZQWyXTJE+yUi lW9QeXC5R2F9jDcqEJ4uazK6gQ0BeRF3hUR00KOHTTgyGo+av3ZPMS/azdSD9jqB 3trVG5cMRAaj7quiErIBrtZijrCpI4ts -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:23 2025 by rpki-client