$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json) Hash identifier: qm0t/6J8ZVoLzx1Sr9G+mHCPSgx0oFgL/ATHKVJYsQk= Subject key identifier: 10:8C:47:80:1D:98:81:7A:38:2F:B4:6A:C2:B5:98:D3:BE:37:15:E6 Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Certificate serial: 10CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft Manifest number: 10BC Signing time: Tue 04 Nov 2025 17:24:22 +0000 Manifest this update: Tue 04 Nov 2025 17:24:22 +0000 Manifest next update: Tue 11 Nov 2025 17:24:22 +0000 Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: rID7ukRKuYzMHAE/wppj5uUhd8IbrezLqyuvDbOGx+Q=) 2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: Xi30fjCwdu1ys1ihQmxOl+2PGZkizPRtJAwU5and9os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4301 (0x10cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Validity Not Before: Nov 4 17:24:22 2025 GMT Not After : Nov 11 17:24:22 2025 GMT Subject: CN=690a36c6-3b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:5f:b3:e7:5b:c2:c0:42:8e:c8:00:70:87: 40:07:e4:5d:58:69:e9:19:92:12:f8:38:bb:14:f9: 66:9e:e9:ef:e7:bd:50:ac:27:7e:ac:3e:33:f3:a8: 7f:3c:5e:2e:5c:20:ad:9a:55:af:eb:d7:56:c7:5b: 87:4a:33:d3:d5:d7:01:f8:57:55:49:54:2b:06:11: ed:26:1a:4f:79:e9:2e:30:3e:af:0d:69:12:8c:77: 9f:8c:c7:39:84:ad:29:64:5d:0e:6c:c1:5d:17:75: 9f:9a:bd:91:4f:75:4c:b1:b2:4f:81:6a:5f:42:20: a0:c1:4f:f1:5d:85:f0:43:c4:39:2d:b9:06:0d:b1: 70:09:7f:b1:cd:03:c8:9a:ba:1c:dd:15:27:18:97: 28:a5:b8:ea:36:13:9a:78:39:5b:35:c4:77:d5:4e: a0:79:85:ee:58:50:19:67:33:2e:16:c4:37:30:19: 95:94:81:ba:04:af:db:45:3d:45:ca:16:da:f1:cf: 57:6a:8a:43:a7:5d:87:d3:d5:53:0f:59:8a:2b:d9: 5f:34:4c:de:7c:fb:44:7f:d1:9e:71:1f:b9:a4:56: 9d:e5:63:24:d2:6a:4e:14:74:cb:3e:32:c8:e8:2b: 9d:02:82:15:8b:43:89:f0:ec:4c:56:b5:da:86:f2: 15:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8C:47:80:1D:98:81:7A:38:2F:B4:6A:C2:B5:98:D3:BE:37:15:E6 X509v3 Authority Key Identifier: keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ed:d3:b4:e1:bb:69:85:1a:d2:86:1a:b6:75:4e:b2:03:1c: 0d:8d:32:94:e2:ad:34:b2:ca:94:25:68:ce:3c:f0:58:b6:55: a1:10:00:9a:d6:99:a4:0a:67:9c:5b:4b:67:7d:c4:d9:1e:95: 1a:61:29:11:86:c9:ce:4b:34:60:c1:53:a5:d0:f6:42:5f:fe: af:a0:2c:d8:9a:39:e8:db:46:68:9e:6b:25:8d:09:16:ab:78: 7f:80:7a:f1:85:c6:f4:af:27:07:56:ab:58:d0:33:bd:ac:a8: 6d:f1:26:b6:79:c2:fe:0a:6c:23:91:22:7e:71:6c:3e:c9:80: 20:0f:c9:86:c0:81:87:49:09:90:dd:a3:38:73:7a:49:11:a9: 63:6f:ec:3e:4f:23:c4:94:32:f7:83:2b:a6:da:e2:55:cb:3b: 48:76:bf:61:f9:09:a0:43:9c:19:d0:0e:ab:8d:f2:cd:e5:e2: b1:00:17:97:7b:36:a3:28:e8:b8:3a:5f:68:19:ef:4e:52:c9: 4f:10:ee:ec:64:06:1d:bf:3a:cb:2b:33:b0:19:c9:2c:94:8e: 9d:c1:5a:89:e4:c6:37:97:8e:64:83:c4:25:e7:29:2b:68:d4: 03:ae:96:c3:fa:55:f3:c9:65:b1:b7:61:7d:fc:53:07:9a:93: fd:c7:72:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0RTIxMTAvBgNVBAUTKDg4MDc3Nzg2RDY2NTIzQUQ1OTk4RDYzRjY5N0FGNDJG MDM5QzJBQTkwHhcNMjUxMTA0MTcyNDIyWhcNMjUxMTExMTcyNDIyWjAYMRYwFAYD VQQDEw02OTBhMzZjNi0zYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2chfs+dbwsBCjsgAcIdAB+RdWGnpGZIS+Di7FPlmnunv571QrCd+rD4z86h/ PF4uXCCtmlWv69dWx1uHSjPT1dcB+FdVSVQrBhHtJhpPeekuMD6vDWkSjHefjMc5 hK0pZF0ObMFdF3Wfmr2RT3VMsbJPgWpfQiCgwU/xXYXwQ8Q5LbkGDbFwCX+xzQPI mroc3RUnGJcopbjqNhOaeDlbNcR31U6geYXuWFAZZzMuFsQ3MBmVlIG6BK/bRT1F yhba8c9XaopDp12H09VTD1mKK9lfNEzefPtEf9GecR+5pFad5WMk0mpOFHTLPjLI 6CudAoIVi0OJ8OxMVrXahvIVSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCMR4Ad mIF6OC+0asK1mNO+NxXmMB8GA1UdIwQYMBaAFIgHd4bWZSOtWZjWP2l69C8DnCqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRFMi9CMjU2QjAzMDM0 RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2MVptTllfYVhyMEx3T2NL cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBZDNodFpsSTYxWm1OWV9hWHIwTHdPY0txay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRFMi9CMjU2QjAzMDM0RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2 MVptTllfYVhyMEx3T2NLcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu7dO04btphRrShhq2dU6yAxwNjTKU4q00ssqUJWjOPPBYtlWhEACa 1pmkCmecW0tnfcTZHpUaYSkRhsnOSzRgwVOl0PZCX/6voCzYmjno20ZonmsljQkW q3h/gHrxhcb0rycHVqtY0DO9rKht8Sa2ecL+CmwjkSJ+cWw+yYAgD8mGwIGHSQmQ 3aM4c3pJEaljb+w+TyPElDL3gyum2uJVyztIdr9h+QmgQ5wZ0A6rjfLN5eKxABeX ezajKOi4Ol9oGe9OUslPEO7sZAYdvzrLKzOwGckslI6dwVqJ5MY3l45kg8Ql5ykr aNQDrpbD+lXzyWWxt2F9/FMHmpP9x3KI -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:18 2025 by rpki-client