$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: JbtSxh32sahz1iXx8HoajITx5BxIjS4D7QLGORPFYXI= Subject key identifier: AC:AB:A8:DC:05:F0:29:93:F2:9B:CD:F4:BA:F9:45:08:9D:90:07:88 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 1F Signing time: Mon 03 Nov 2025 07:49:43 +0000 Manifest this update: Mon 03 Nov 2025 07:49:43 +0000 Manifest next update: Mon 10 Nov 2025 07:49:43 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: swsKxtoSNONe8pumMkR2NR4LI+ejD/52h0HDhubKZhE=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: MYr0RnnESBBRDJ22pf9EsF5pYGHY7f5iA1+28nEzneQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Nov 3 07:49:43 2025 GMT Not After : Nov 10 07:49:43 2025 GMT Subject: CN=69085e97-8f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6f:a0:60:fe:12:e5:12:cd:9b:bb:f0:3b:fe: a0:2a:3e:b1:9e:b0:94:f1:fa:a3:c8:bc:f2:3b:ef: 0e:db:bc:7d:2f:49:13:32:eb:aa:24:4a:91:b0:0c: 04:a9:b2:0c:cc:9e:dd:a7:86:2f:73:cf:ae:97:70: 09:92:3a:e5:bf:96:a6:49:d9:c1:f5:3d:3d:33:c8: 4a:5d:0f:42:81:8a:6a:8c:f5:1f:0a:90:6d:ed:a8: d3:19:6d:15:5f:01:eb:3b:a9:25:09:08:d2:5a:db: 4d:18:d2:82:07:23:4d:96:df:15:a6:e3:08:d9:b6: 58:27:d7:74:9a:f2:1b:05:62:e0:22:9e:99:5a:9d: 48:7a:24:f1:03:a8:ba:c9:df:95:80:48:cc:e4:70: e7:14:c2:df:e8:17:19:9e:5b:10:24:06:d0:26:d0: 0f:ac:c0:74:50:09:18:66:f7:19:6e:3d:c3:db:44: f7:e3:12:ac:7f:c7:c3:63:a0:10:e4:5f:b6:66:9d: 66:33:ef:56:62:dd:a5:1a:fd:be:4b:22:ac:d9:88: 1e:d8:74:20:ef:d5:a0:ea:40:6e:2b:56:1c:3f:fa: 1f:a6:c3:d8:74:89:a6:ef:9f:93:29:cb:c6:68:84: d3:6c:2d:66:ab:5f:e4:6c:8d:e4:41:5c:1f:74:e5: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AB:A8:DC:05:F0:29:93:F2:9B:CD:F4:BA:F9:45:08:9D:90:07:88 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4e:9a:72:61:ff:ba:b9:a3:7e:ca:c3:3a:a0:d7:de:93:54: 1b:a5:ac:d2:c3:a1:ff:f8:49:b8:c1:52:7e:45:54:a1:c1:8a: 56:f2:35:5e:f5:0b:74:35:18:2e:c1:0b:da:8d:9d:46:11:67: 4e:a4:31:4e:3d:f1:b6:07:49:24:f7:5b:52:3e:da:ce:45:1c: 8d:29:2f:4d:e1:31:0f:b7:88:73:a9:f5:02:60:6f:6c:39:6a: 28:26:e4:be:3a:ce:b3:2a:0e:84:5d:cb:60:bb:61:bb:7b:04: 7d:8e:0a:61:5b:51:57:76:e1:ce:9d:95:2b:08:59:b1:5d:36: fd:e3:33:bd:66:c1:25:88:3b:1d:29:5a:7d:37:68:54:c6:00: cd:49:84:dc:13:19:7b:16:05:04:2a:28:0b:da:6b:3e:48:ea: a7:10:33:be:33:36:d5:d0:d1:1d:b6:c4:f3:e0:a0:9e:88:94: eb:6a:b3:ad:0d:eb:29:f1:41:ca:7e:99:da:12:e9:73:7c:2d: 93:78:64:d6:d9:69:06:d6:25:50:ba:1e:48:de:7c:61:86:6f: ad:57:18:cc:36:e4:35:e5:61:19:70:40:eb:41:9a:29:55:60: c2:c2:16:c8:45:1a:98:0b:f6:8a:1e:06:c3:85:77:7b:a1:40: 34:3f:24:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNTExMDMwNzQ5NDNaFw0yNTExMTAwNzQ5NDNaMBgxFjAUBgNV BAMTDTY5MDg1ZTk3LThmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6b6Bg/hLlEs2bu/A7/qAqPrGesJTx+qPIvPI77w7bvH0vSRMy66okSpGwDASp sgzMnt2nhi9zz66XcAmSOuW/lqZJ2cH1PT0zyEpdD0KBimqM9R8KkG3tqNMZbRVf Aes7qSUJCNJa200Y0oIHI02W3xWm4wjZtlgn13Sa8hsFYuAinplanUh6JPEDqLrJ 35WASMzkcOcUwt/oFxmeWxAkBtAm0A+swHRQCRhm9xluPcPbRPfjEqx/x8NjoBDk X7ZmnWYz71Zi3aUa/b5LIqzZiB7YdCDv1aDqQG4rVhw/+h+mw9h0iabvn5Mpy8Zo hNNsLWarX+RsjeRBXB905ckxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrKuo3AXw KZPym830uvlFCJ2QB4gwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093 OWI2VEF0NFRrTC00QU9tMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBOmnJh/7q5o37Kwzqg196TVBulrNLDof/4SbjBUn5FVKHBilbyNV71 C3Q1GC7BC9qNnUYRZ06kMU498bYHSST3W1I+2s5FHI0pL03hMQ+3iHOp9QJgb2w5 aigm5L46zrMqDoRdy2C7Ybt7BH2OCmFbUVd24c6dlSsIWbFdNv3jM71mwSWIOx0p Wn03aFTGAM1JhNwTGXsWBQQqKAvaaz5I6qcQM74zNtXQ0R22xPPgoJ6IlOtqs60N 6ynxQcp+mdoS6XN8LZN4ZNbZaQbWJVC6HkjefGGGb61XGMw25DXlYRlwQOtBmilV YMLCFshFGpgL9ooeBsOFd3uhQDQ/JNI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:13 2025 by rpki-client