$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json) Hash identifier: Fvtj/hUBq7LsdhNX3+byru7VVOqpTF/1xAUKycH01vY= Subject key identifier: 67:B0:CB:5B:05:EA:83:C5:9A:66:2B:D9:CA:D7:84:A1:D8:29:F4:D6 Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft Manifest number: 01CF Signing time: Mon 03 Nov 2025 02:52:33 +0000 Manifest this update: Mon 03 Nov 2025 02:52:32 +0000 Manifest next update: Mon 10 Nov 2025 02:52:32 +0000 Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: R180nMPR7lHzwsGyE9EYYBx+FFSDH7htq4V09ijB+L4=) 2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: hdoIBFcsKBcfu2ieIGwj6SsbqU4NXl1pTKHhFjI1OAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Nov 3 02:52:32 2025 GMT Not After : Nov 10 02:52:32 2025 GMT Subject: CN=690818f1-7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:4b:6b:ad:2b:40:3a:12:b3:9e:28:2c:be: d9:d8:90:5d:0e:25:56:a7:fc:c4:57:0c:31:1c:c4: 0f:e5:e3:89:62:c0:df:45:a0:93:18:2c:71:c2:61: 47:3c:15:e3:a8:cc:c2:05:cf:32:bc:d1:21:1d:7e: 51:d3:de:07:70:82:11:3d:bb:b9:cc:6e:83:8a:24: b1:d6:bc:1f:1a:77:15:e6:3f:23:db:12:b6:e0:5e: bc:5b:42:12:51:06:38:b1:b2:a6:e6:9e:9a:2a:4d: 32:02:12:9f:74:5f:55:60:77:0a:c0:03:2d:41:6f: d7:9e:f3:e1:25:da:c6:a3:97:20:2d:52:43:68:5a: 3b:b5:6f:f2:72:76:de:3e:aa:05:ef:a4:57:67:16: 9d:d2:20:63:f7:01:a5:3e:49:13:09:83:bb:ef:02: 25:5a:48:3f:0a:f7:41:fb:0c:bf:62:59:aa:ee:8c: 25:be:62:0d:b8:99:57:dc:fe:0b:1d:a0:9e:ea:ef: 14:4b:4a:fa:46:03:b9:bf:31:48:da:79:fc:36:73: d6:ef:02:4d:7b:8b:92:53:c5:52:34:2a:c6:9f:cb: 9e:eb:28:b8:d6:f8:e0:f8:1e:fe:8d:d7:c3:ff:44: 4a:51:ca:65:74:0f:66:a4:62:59:31:5b:9b:8d:b5: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B0:CB:5B:05:EA:83:C5:9A:66:2B:D9:CA:D7:84:A1:D8:29:F4:D6 X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:3b:79:c4:b4:e3:c2:cc:99:69:da:68:f4:46:61:a2:e3: 13:2d:c6:cb:22:77:a8:29:52:f1:13:fa:29:00:4a:78:62:5b: b1:a3:6f:2f:54:b6:c1:f9:0f:f8:d2:34:09:94:c1:95:06:ff: 85:11:50:af:5c:36:2b:d4:33:c4:b1:54:61:1c:20:be:24:17: ed:8f:c8:3c:fb:4a:6b:19:56:e2:e2:33:38:4f:e0:04:5a:af: ab:b5:c7:c8:fc:c6:cd:01:c0:d3:a2:69:54:c2:fe:29:dd:55: c6:d1:87:49:4a:d0:fd:0c:0e:9b:d5:b6:02:5b:3e:36:cb:dc: 32:73:f9:1e:b9:24:20:bd:45:11:7b:00:2e:6d:62:be:a2:4c: 0a:ef:a2:50:d1:00:58:e1:b1:b5:3f:cd:ce:e5:08:23:53:e9: b3:6e:c5:fb:6e:15:9a:1f:5d:cd:30:c2:cb:64:2e:9b:95:f4: b5:a0:85:6e:16:5f:c9:03:ba:a0:03:3d:bc:55:c9:59:b6:08: a7:dc:e7:4b:a1:6f:75:1a:d8:08:6c:38:f8:a9:8e:e1:68:56: 29:46:c2:bc:83:81:ff:c3:94:53:25:b0:34:b8:e4:bf:84:ec: d0:17:9d:2a:40:4f:8c:7d:ce:60:27:0c:6f:44:17:ca:e7:e8: d4:4b:58:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjUxMTAzMDI1MjMyWhcNMjUxMTEwMDI1MjMyWjAYMRYwFAYD VQQDEw02OTA4MThmMS03YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXtLa60rQDoSs54oLL7Z2JBdDiVWp/zEVwwxHMQP5eOJYsDfRaCTGCxxwmFH PBXjqMzCBc8yvNEhHX5R094HcIIRPbu5zG6DiiSx1rwfGncV5j8j2xK24F68W0IS UQY4sbKm5p6aKk0yAhKfdF9VYHcKwAMtQW/XnvPhJdrGo5cgLVJDaFo7tW/ycnbe PqoF76RXZxad0iBj9wGlPkkTCYO77wIlWkg/CvdB+wy/Ylmq7owlvmINuJlX3P4L HaCe6u8US0r6RgO5vzFI2nn8NnPW7wJNe4uSU8VSNCrGn8ue6yi41vjg+B7+jdfD /0RKUcpldA9mpGJZMVubjbUUywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGewy1sF 6oPFmmYr2crXhKHYKfTWMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk ME9kNWk4Nkx5N09XWXFKXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNujt5xLTjwsyZadpo9EZhouMTLcbLIneoKVLxE/opAEp4Yluxo28v VLbB+Q/40jQJlMGVBv+FEVCvXDYr1DPEsVRhHCC+JBftj8g8+0prGVbi4jM4T+AE Wq+rtcfI/MbNAcDTomlUwv4p3VXG0YdJStD9DA6b1bYCWz42y9wyc/keuSQgvUUR ewAubWK+okwK76JQ0QBY4bG1P83O5QgjU+mzbsX7bhWaH13NMMLLZC6blfS1oIVu Fl/JA7qgAz28VclZtgin3OdLoW91GtgIbDj4qY7haFYpRsK8g4H/w5RTJbA0uOS/ hOzQF50qQE+Mfc5gJwxvRBfK5+jUS1hu -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:34 2025 by rpki-client