$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft File: iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json) Hash identifier: 2C2fi9T+ILAracaGXQ86Q0LBFbYCYJatNxvVD56K1vk= Subject key identifier: 1A:B9:A2:92:EF:BB:A8:1E:46:4C:67:A7:33:30:68:1F:1E:5D:5E:2C Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft Manifest number: 0118 Signing time: Thu 23 Oct 2025 06:48:41 +0000 Manifest this update: Thu 23 Oct 2025 06:48:41 +0000 Manifest next update: Thu 30 Oct 2025 06:48:41 +0000 Files and hashes: 1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: pEprOVmFvnDzkIBQ5tEszmPgL4I8JovQr1Eb9+lHWeo=) 2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: IjBd7XUR2i0dTIqKZWCJ7zm+gZSogWBX4IMREVDmhgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Validity Not Before: Oct 23 06:48:41 2025 GMT Not After : Oct 30 06:48:41 2025 GMT Subject: CN=68f9cfc9-b26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:44:97:f5:f0:49:e0:eb:ee:ec:75:d6:c0: d1:49:b2:cc:40:ae:6e:b4:bd:e9:0c:c2:eb:ab:6a: e5:2a:fc:36:47:59:7f:1d:4e:94:98:42:45:8b:2d: 78:52:72:d4:f4:9c:b0:82:4b:df:c0:2b:03:39:af: 4c:2d:87:29:ad:2e:2b:63:e4:a9:1e:80:9a:68:24: bb:92:de:fa:40:8e:03:95:06:de:48:e5:39:02:f8: a2:2b:81:39:bd:be:ac:1a:b4:55:51:cc:10:06:42: d9:29:45:36:1b:c9:46:6b:91:cd:77:a6:ff:14:e3: e0:f5:26:c0:3a:1e:c2:af:bc:e4:ca:ea:25:fb:14: 79:d2:92:29:8b:4e:aa:17:aa:c6:f9:75:71:01:d2: a6:22:d8:71:83:ff:1b:e8:db:13:7e:65:2e:ab:4f: 82:4d:ab:38:84:06:eb:13:b7:a5:db:71:e6:02:5d: 38:4e:f7:c2:64:e3:f3:36:c6:0c:69:fc:64:b5:17: b0:cc:88:4d:33:c6:a5:eb:b9:8d:25:f9:78:96:da: ca:f5:d6:cb:80:81:43:78:07:eb:14:7c:5b:63:bd: 43:8c:5a:60:6b:fa:0c:c2:70:9a:ec:b9:1e:67:e1: 56:a6:d0:0b:b8:32:c5:cd:fe:2b:80:b9:a2:35:30: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:A2:92:EF:BB:A8:1E:46:4C:67:A7:33:30:68:1F:1E:5D:5E:2C X509v3 Authority Key Identifier: keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a6:ac:79:7f:c1:cc:a3:da:fa:e8:a7:31:d6:6f:cc:43:c1: 9d:0b:1f:ed:96:f9:44:3e:82:f8:d6:48:44:49:57:2c:48:9d: c5:1f:3a:67:fc:03:f3:d8:e8:91:17:29:84:68:72:d2:9e:7c: ce:a1:98:05:04:63:10:e5:8f:35:62:36:69:17:b7:76:c7:8a: a7:03:6a:61:1c:a3:76:43:e0:c2:42:9f:51:10:de:56:8b:58: 6a:6d:4e:55:4f:14:ed:58:0f:0a:5b:fb:99:66:37:d0:ee:70: b9:08:74:be:fd:5f:55:f1:f3:22:27:82:eb:29:1a:1a:75:82: 87:6b:cb:d6:81:83:53:3f:05:17:b7:9e:79:b9:6a:6f:25:07: 2a:c7:23:c1:f9:af:fc:04:9f:a4:59:e3:4d:50:83:cd:33:60: 32:cc:a5:3e:21:4f:ee:68:c2:39:1e:56:ed:44:06:ce:25:40: a2:b4:05:71:43:e1:12:81:51:1b:07:fa:0a:a0:4e:7e:83:b3: b5:48:7e:33:3a:07:45:94:be:6c:36:80:14:7d:d9:89:67:cc: 52:a6:91:a4:65:6d:07:cf:19:06:3e:a3:80:cf:5d:61:c6:42: 25:9c:d1:8d:d9:00:36:d6:14:ef:89:80:1a:0b:16:77:e0:f6: 93:ee:e8:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FEOTAxMTAvBgNVBAUTKDg4MDkxOEE4NzU2RjA0OTMxQTMyRjRDRUEzNDFDNEYy M0ZBRDUwRUYwHhcNMjUxMDIzMDY0ODQxWhcNMjUxMDMwMDY0ODQxWjAYMRYwFAYD VQQDEw02OGY5Y2ZjOS1iMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupZEl/XwSeDr7ux11sDRSbLMQK5utL3pDMLrq2rlKvw2R1l/HU6UmEJFiy14 UnLU9JywgkvfwCsDOa9MLYcprS4rY+SpHoCaaCS7kt76QI4DlQbeSOU5AviiK4E5 vb6sGrRVUcwQBkLZKUU2G8lGa5HNd6b/FOPg9SbAOh7Cr7zkyuol+xR50pIpi06q F6rG+XVxAdKmIthxg/8b6NsTfmUuq0+CTas4hAbrE7el23HmAl04TvfCZOPzNsYM afxktRewzIhNM8al67mNJfl4ltrK9dbLgIFDeAfrFHxbY71DjFpga/oMwnCa7Lke Z+FWptALuDLFzf4rgLmiNTAn9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq5opLv u6geRkxnpzMwaB8eXV4sMB8GA1UdIwQYMBaAFIgJGKh1bwSTGjL0zqNBxPI/rVDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUQ5MC8wMzAwQzUxNDBG MEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJKTWFNdlRPbzBIRThqLXRV TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBa1lxSFZ2QkpNYU12VE9vMEhFOGotdFVPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUQ5MC8wMzAwQzUxNDBGMEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJK TWFNdlRPbzBIRThqLXRVTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXpqx5f8HMo9r66Kcx1m/MQ8GdCx/tlvlEPoL41khESVcsSJ3FHzpn /APz2OiRFymEaHLSnnzOoZgFBGMQ5Y81YjZpF7d2x4qnA2phHKN2Q+DCQp9REN5W i1hqbU5VTxTtWA8KW/uZZjfQ7nC5CHS+/V9V8fMiJ4LrKRoadYKHa8vWgYNTPwUX t555uWpvJQcqxyPB+a/8BJ+kWeNNUIPNM2AyzKU+IU/uaMI5HlbtRAbOJUCitAVx Q+ESgVEbB/oKoE5+g7O1SH4zOgdFlL5sNoAUfdmJZ8xSppGkZW0HzxkGPqOAz11h xkIlnNGN2QA21hTviYAaCxZ34PaT7uil -----END CERTIFICATE-----Generated at Fri Oct 24 06:42:47 2025 by rpki-client