$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: FiExtlr3IvvqHgbk31jNCvwVRkk4mSS2BdV6i0tl1aY= Subject key identifier: B1:37:F1:3F:15:0B:F8:BA:71:50:E6:16:47:C3:2D:A3:C9:BA:C2:88 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C8F Signing time: Sun 02 Nov 2025 18:21:44 +0000 Manifest this update: Sun 02 Nov 2025 18:21:43 +0000 Manifest next update: Sun 09 Nov 2025 18:21:43 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: mVmzx71mGbu2i4yoamLUMnXdt5szAdHF7wX2KWMyPdM=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Nov 2 18:21:43 2025 GMT Not After : Nov 9 18:21:43 2025 GMT Subject: CN=6907a137-eff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:f7:65:e5:22:be:a5:74:f8:f8:70:67:ce: 55:da:b8:22:36:25:50:fc:cd:98:2a:65:05:6d:52: 2c:a9:e5:0e:20:25:16:20:eb:cf:cb:c1:ee:03:ea: 13:f8:36:98:41:e3:27:2a:1f:16:51:57:13:6a:e8: db:fe:5b:94:fd:2a:9d:e4:18:85:17:76:d6:3e:b9: 77:c5:37:f1:7d:a3:ac:1d:16:07:4d:c6:05:61:c9: 05:34:66:35:05:02:5b:8d:2b:4b:48:3b:68:6d:21: ae:1e:18:2d:c9:c9:e8:e6:75:60:ab:ee:6c:65:98: 3c:ca:88:9f:69:b3:af:be:8a:b0:2c:45:fd:65:4b: da:2d:d2:92:c1:1a:96:80:eb:a4:ac:33:4a:e9:52: 42:8f:23:d3:10:34:55:6b:f1:29:30:2f:e8:7b:52: bc:d2:8e:2b:cd:02:56:4b:74:9a:64:1a:10:87:e0: f5:8f:41:c1:c4:90:ce:04:2a:c3:a6:2a:74:62:fb: dd:21:1d:13:1b:49:1e:e8:bd:2b:49:b6:0e:27:2d: 92:7a:68:72:79:dc:c1:ac:3a:d2:91:3a:b4:af:40: 23:4f:e5:19:02:39:88:b2:f5:3d:a7:35:08:69:ad: 79:a9:63:34:f0:a3:0a:ce:ce:ea:b0:5b:b4:ff:f7: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:F1:3F:15:0B:F8:BA:71:50:E6:16:47:C3:2D:A3:C9:BA:C2:88 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:81:a2:cd:56:8f:4f:ed:4b:53:f8:24:53:6b:af:a7:b1:5f: 13:b3:d1:4d:a9:e0:52:6b:25:5d:41:27:1d:95:4b:bd:f7:68: 01:93:38:bc:b7:3d:0a:c9:f1:98:fe:aa:ed:0b:34:a7:b4:8e: a9:be:41:0a:ec:37:ab:0f:54:fe:38:86:49:bc:e2:33:2e:6c: 02:52:21:66:e4:73:3f:fb:88:35:83:fb:dd:3d:70:42:92:b4: 8b:d1:15:14:e2:6a:83:f1:17:07:70:05:33:5f:c8:51:2b:56: 99:cc:da:f1:1e:1c:c3:cc:82:b4:e1:a7:d7:84:0b:c6:cb:03: e1:e6:c4:62:0f:86:43:55:8f:c5:5f:29:53:97:c1:d2:4e:7b: 01:55:a1:2b:71:d1:d5:10:f6:4b:09:2b:79:45:f6:d4:75:1f: f3:b9:4c:d9:a8:89:b3:8b:d1:35:b9:bc:0c:83:0c:b1:e4:ab: 3d:05:1d:4e:d4:39:7d:25:d5:9a:1a:12:71:3c:ae:3a:fb:ab: b2:34:36:ac:99:13:32:48:d7:9f:3f:eb:cd:b0:ea:13:93:eb: 25:2b:91:d2:16:b0:ea:5a:0a:d3:cd:86:d2:ad:2f:da:2b:a6: 04:6f:41:ed:c2:c3:06:7c:35:19:7d:3b:75:73:8b:6c:2c:6c: 55:3c:7f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUxMTAyMTgyMTQzWhcNMjUxMTA5MTgyMTQzWjAYMRYwFAYD VQQDEw02OTA3YTEzNy1lZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4r3ZeUivqV0+PhwZ85V2rgiNiVQ/M2YKmUFbVIsqeUOICUWIOvPy8HuA+oT +DaYQeMnKh8WUVcTaujb/luU/Sqd5BiFF3bWPrl3xTfxfaOsHRYHTcYFYckFNGY1 BQJbjStLSDtobSGuHhgtycno5nVgq+5sZZg8yoifabOvvoqwLEX9ZUvaLdKSwRqW gOukrDNK6VJCjyPTEDRVa/EpMC/oe1K80o4rzQJWS3SaZBoQh+D1j0HBxJDOBCrD pip0YvvdIR0TG0ke6L0rSbYOJy2SemhyedzBrDrSkTq0r0AjT+UZAjmIsvU9pzUI aa15qWM08KMKzs7qsFu0//fLqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE38T8V C/i6cVDmFkfDLaPJusKIMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLgaLNVo9P7UtT+CRTa6+nsV8Ts9FNqeBSayVdQScdlUu992gBkzi8 tz0KyfGY/qrtCzSntI6pvkEK7DerD1T+OIZJvOIzLmwCUiFm5HM/+4g1g/vdPXBC krSL0RUU4mqD8RcHcAUzX8hRK1aZzNrxHhzDzIK04afXhAvGywPh5sRiD4ZDVY/F XylTl8HSTnsBVaErcdHVEPZLCSt5RfbUdR/zuUzZqImzi9E1ubwMgwyx5Ks9BR1O 1Dl9JdWaGhJxPK46+6uyNDasmRMySNefP+vNsOoTk+slK5HSFrDqWgrTzYbSrS/a K6YEb0HtwsMGfDUZfTt1c4tsLGxVPH+c -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:06 2025 by rpki-client