$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: cjjDHv5NVEZY76HXbQ3ThZ3ezbM9MJ4HOe/vVA2f3qM= Subject key identifier: D8:2B:A3:B0:36:C7:7E:45:63:AF:76:D0:13:95:54:6D:9D:7E:BD:F9 Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 3519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 34EC Signing time: Wed 22 Oct 2025 14:30:14 +0000 Manifest this update: Wed 22 Oct 2025 14:30:13 +0000 Manifest next update: Wed 29 Oct 2025 14:30:13 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: y3B1sOyTj/H5sI3+UpjyQsBRiWN3I/4anxGA4tDScrE=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: 6C/a3Wj9og9vwBBN5UoCzfPyuDE6Bklz8AODGS07vlI=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: n6cQOr7nMx3ASkXvodDC31C4d5lcr3OKlWkKenjwMWc=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: Qz5pZ4cV9JQ9lwZlMLRTE2xMp+k9IBDZYYDpMTYk3vI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13593 (0x3519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Oct 22 14:30:13 2025 GMT Not After : Oct 29 14:30:13 2025 GMT Subject: CN=68f8ea75-6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:f4:71:d1:49:d2:ed:2b:0a:14:34:9f:14: 27:68:d5:fd:42:d1:f0:35:a7:17:d7:5c:da:c9:50: 51:a4:fc:59:04:08:a5:4b:72:3d:07:52:de:7c:72: 32:76:8c:5a:d7:9f:2c:a4:f9:3d:a4:82:8c:16:76: ab:d1:15:d7:a5:a8:13:0d:2b:1d:ee:37:a9:f6:96: 0b:bb:f2:df:a2:6f:c0:3c:11:31:00:20:48:a7:f8: 44:27:39:3c:93:1c:a3:8a:20:69:c0:27:5a:d1:5c: af:25:69:13:b3:8c:e5:5e:fa:fd:a6:14:eb:19:ae: 56:35:7e:b2:ee:9d:41:76:7a:ae:55:ef:fc:8b:c5: d4:aa:b7:26:1b:35:2f:6c:98:37:31:a7:29:e1:57: 44:e8:78:78:0a:84:f8:46:dd:75:ad:a2:e1:38:0d: d5:e0:df:49:54:4f:e4:98:8e:f7:ab:7d:d3:94:ce: 29:20:67:a4:c5:00:05:49:36:97:ae:99:a1:8d:61: df:72:b7:81:d6:21:f6:80:5e:ba:96:b7:8a:13:d8: 39:5e:e2:05:2c:8e:8f:3b:10:72:92:74:1d:18:d0: 2a:af:0a:b7:04:8a:96:ce:ae:07:1c:51:29:ff:61: f2:b3:0b:bc:8c:86:56:eb:3f:6a:2b:72:8f:39:f5: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2B:A3:B0:36:C7:7E:45:63:AF:76:D0:13:95:54:6D:9D:7E:BD:F9 X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:06:24:e4:85:b4:36:69:b8:79:9d:97:1f:da:d9:05:97: d4:55:c1:c4:01:2a:13:60:be:4b:61:c7:f9:9c:f9:6a:1a:03: 9e:86:9c:df:10:66:e6:2d:bd:8a:43:8f:c2:c6:35:52:14:25: bc:0e:86:0d:82:c9:fe:61:b2:3a:41:7e:df:d3:39:55:3f:c0: 73:43:01:ca:26:fd:1b:17:eb:b6:9a:4e:23:f1:fe:d8:d5:8d: ae:38:78:14:8f:ba:62:fa:9d:93:48:49:ec:d0:b5:7c:8d:3d: 65:3d:7d:ed:0a:70:9a:7c:18:9d:cc:7e:a5:40:6e:1a:fc:fb: 3d:ff:3a:18:b8:fc:34:70:36:44:c9:a9:15:4b:fe:13:86:4d: 51:5b:2e:bb:46:5a:aa:cf:a2:10:35:06:20:d4:47:66:74:59: 2a:38:aa:45:28:d0:a0:c0:3b:07:be:35:76:50:3a:4e:46:75: e9:2b:77:d5:01:78:18:d2:8a:4f:da:d4:9e:48:b2:2d:43:c3: 22:56:da:cf:8a:63:0f:49:cb:15:2a:b1:e9:57:12:1c:f0:5d: 6a:97:01:26:43:65:77:37:31:d3:10:a6:c4:fc:15:ba:4d:28: 73:f1:e7:00:f1:e0:b6:22:5f:89:f3:17:f5:4e:77:91:74:60: 41:9e:f6:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUxMDIyMTQzMDEzWhcNMjUxMDI5MTQzMDEzWjAYMRYwFAYD VQQDEw02OGY4ZWE3NS02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gD0cdFJ0u0rChQ0nxQnaNX9QtHwNacX11zayVBRpPxZBAilS3I9B1LefHIy doxa158spPk9pIKMFnar0RXXpagTDSsd7jep9pYLu/Lfom/APBExACBIp/hEJzk8 kxyjiiBpwCda0VyvJWkTs4zlXvr9phTrGa5WNX6y7p1BdnquVe/8i8XUqrcmGzUv bJg3Macp4VdE6Hh4CoT4Rt11raLhOA3V4N9JVE/kmI73q33TlM4pIGekxQAFSTaX rpmhjWHfcreB1iH2gF66lreKE9g5XuIFLI6POxByknQdGNAqrwq3BIqWzq4HHFEp /2Hyswu8jIZW6z9qK3KPOfWTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgro7A2 x35FY6920BOVVG2dfr35MB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBksQYk5IW0Nmm4eZ2XH9rZBZfUVcHEASoTYL5LYcf5nPlqGgOehpzf EGbmLb2KQ4/CxjVSFCW8DoYNgsn+YbI6QX7f0zlVP8BzQwHKJv0bF+u2mk4j8f7Y 1Y2uOHgUj7pi+p2TSEns0LV8jT1lPX3tCnCafBidzH6lQG4a/Ps9/zoYuPw0cDZE yakVS/4Thk1RWy67Rlqqz6IQNQYg1EdmdFkqOKpFKNCgwDsHvjV2UDpORnXpK3fV AXgY0opP2tSeSLItQ8MiVtrPimMPScsVKrHpVxIc8F1qlwEmQ2V3NzHTEKbE/BW6 TShz8ecA8eC2Il+J8xf1TneRdGBBnvZL -----END CERTIFICATE-----Generated at Thu Oct 23 05:26:44 2025 by rpki-client