$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: /I6TNLCBqa6WUSxwuWdjQveT+aiztbnyE9KCPY2T/DE= Subject key identifier: 40:A5:44:C7:E6:72:8A:69:2C:CF:67:4E:F9:36:4B:86:10:56:60:8A Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: 95 Signing time: Mon 03 Nov 2025 06:27:57 +0000 Manifest this update: Mon 03 Nov 2025 06:27:56 +0000 Manifest next update: Mon 10 Nov 2025 06:27:56 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: BRzYGpWBz2STw8tl2SEknWYBDt9C/wSw8tH9Vz8EVOY=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: Nov 3 06:27:56 2025 GMT Not After : Nov 10 06:27:56 2025 GMT Subject: CN=69084b6d-1386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:70:2a:e8:8b:92:8d:e0:cc:6b:35:ea:44: 4d:76:56:0e:8b:04:cc:72:c1:b9:4c:88:aa:81:0c: 27:b4:8c:5a:b3:56:59:e0:16:39:f5:06:5b:66:86: 58:00:e0:62:7c:d4:33:75:a1:99:bd:21:e7:c7:0e: c3:2b:9b:8d:8e:66:65:5b:68:44:c1:46:76:5c:d0: 9f:33:d8:5e:b9:c5:7e:8d:33:de:86:f5:a1:83:b4: d5:a4:a9:01:40:cb:94:7c:f5:ac:0e:ad:62:a7:96: 54:2c:c8:f3:92:4a:de:e9:ac:66:73:ee:22:64:69: d1:7e:d3:bf:e4:7b:6f:50:ea:f4:07:7d:4b:29:74: a0:20:07:8e:c3:72:32:db:88:8f:50:18:b8:22:ca: 71:ae:92:25:06:bb:b0:bc:c7:0c:e8:78:b1:2b:f8: 2f:e4:07:ee:0d:e9:9f:02:d5:d5:cf:ed:cd:02:79: 99:56:d8:60:a1:8e:6f:f0:3b:14:0d:5d:10:8d:9d: 58:67:15:62:27:94:e5:ad:49:c1:af:7f:8a:fe:40: 20:f5:d2:69:75:3b:58:87:da:0d:18:66:17:e1:74: fe:65:61:e3:3c:f5:16:3c:a1:01:58:2f:38:cd:2d: b4:c9:2b:35:8e:73:c4:06:ed:f0:e7:3c:4f:fa:d5: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A5:44:C7:E6:72:8A:69:2C:CF:67:4E:F9:36:4B:86:10:56:60:8A X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e1:29:02:f7:6c:9f:34:c8:8e:3d:d4:52:bd:66:68:d2:27: 81:17:8a:6c:c4:50:2f:f2:23:2d:33:cb:6a:90:e5:33:0f:70: 21:09:ec:23:c7:f1:b1:05:3a:f6:92:5a:a2:20:92:80:af:b6: ef:4b:0d:bd:31:46:32:48:9f:b7:54:46:b5:35:52:92:75:e7: 41:51:a8:52:c6:18:2c:89:2c:ee:11:54:a1:ab:66:4b:0f:f2: 78:52:72:c3:41:e7:92:bb:08:09:e5:ba:f9:89:10:8a:68:cc: 15:16:93:e9:25:7c:c4:1a:73:ac:b9:1a:e7:53:cc:fd:46:35: 34:51:49:59:32:e2:b9:86:18:8d:0b:34:3f:0c:0d:b1:cc:68: 2f:7a:b7:f4:9b:33:16:36:7a:f7:35:f3:47:a7:e9:21:35:80: bf:16:a7:4d:76:ed:15:cc:b4:d7:12:a1:2b:c9:05:33:12:f4: 75:cc:8c:0c:4c:c8:25:d8:48:6d:bd:6d:68:e9:fd:79:92:af: ef:36:da:23:0f:07:70:03:49:1f:50:c0:bc:94:44:67:7e:4f: 93:ff:e0:07:76:f9:d7:8e:4a:99:b1:ed:4e:d7:31:a6:96:fe: 5c:92:35:9d:b2:52:73:aa:92:6e:3a:48:ee:1a:70:23:00:8d: 6a:32:36:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1OUQxMTAvBgNVBAUTKEZCNDg4NTY4RTc1MjBCQzc4MkExMTk4OTc2MjkwMzBF RDA2OTVDREIwHhcNMjUxMTAzMDYyNzU2WhcNMjUxMTEwMDYyNzU2WjAYMRYwFAYD VQQDEw02OTA4NGI2ZC0xMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcVwKuiLko3gzGs16kRNdlYOiwTMcsG5TIiqgQwntIxas1ZZ4BY59QZbZoZY AOBifNQzdaGZvSHnxw7DK5uNjmZlW2hEwUZ2XNCfM9heucV+jTPehvWhg7TVpKkB QMuUfPWsDq1ip5ZULMjzkkre6axmc+4iZGnRftO/5HtvUOr0B31LKXSgIAeOw3Iy 24iPUBi4IspxrpIlBruwvMcM6HixK/gv5AfuDemfAtXVz+3NAnmZVthgoY5v8DsU DV0QjZ1YZxViJ5TlrUnBr3+K/kAg9dJpdTtYh9oNGGYX4XT+ZWHjPPUWPKEBWC84 zS20ySs1jnPEBu3w5zxP+tXraQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEClRMfm coppLM9nTvk2S4YQVmCKMB8GA1UdIwQYMBaAFPtIhWjnUgvHgqEZiXYpAw7QaVzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU5RC8wQjNGNjY1QUQ2 MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4ZUNvUm1KZGlrRER0QnBY TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU5RC8wQjNGNjY1QUQ2MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4 ZUNvUm1KZGlrRER0QnBYTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl4SkC92yfNMiOPdRSvWZo0ieBF4psxFAv8iMtM8tqkOUzD3AhCewj x/GxBTr2klqiIJKAr7bvSw29MUYySJ+3VEa1NVKSdedBUahSxhgsiSzuEVShq2ZL D/J4UnLDQeeSuwgJ5br5iRCKaMwVFpPpJXzEGnOsuRrnU8z9RjU0UUlZMuK5hhiN CzQ/DA2xzGgverf0mzMWNnr3NfNHp+khNYC/FqdNdu0VzLTXEqEryQUzEvR1zIwM TMgl2EhtvW1o6f15kq/vNtojDwdwA0kfUMC8lERnfk+T/+AHdvnXjkqZse1O1zGm lv5ckjWdslJzqpJuOkjuGnAjAI1qMjaC -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:16 2025 by rpki-client