$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: DEOUCUMwOapcc7TG/lv0kMDYH7sflbekyPpgadZcBiI= Subject key identifier: 4A:81:8F:F0:8C:80:F7:15:34:B8:5C:30:74:7F:3B:E6:DB:80:4D:81 Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B83 Signing time: Tue 04 Nov 2025 19:08:30 +0000 Manifest this update: Tue 04 Nov 2025 19:08:30 +0000 Manifest next update: Tue 11 Nov 2025 19:08:30 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: zlM+xlk70SbtN/XxxC0arGJORt9fJbT6kJEbs1rmPo8=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Nov 4 19:08:30 2025 GMT Not After : Nov 11 19:08:30 2025 GMT Subject: CN=690a4f2e-bb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:8b:a1:4b:18:e6:86:c7:e4:64:b7:13:a6: 27:65:d3:8e:86:8e:5f:76:4b:cf:5a:1d:43:5a:df: 8a:f1:65:24:0c:4a:55:34:91:1c:46:ca:f0:76:b3: fb:4c:54:f3:fe:24:37:d6:7a:c2:e4:c7:60:79:4a: 8e:83:f5:84:dc:09:f8:10:ed:e7:b3:65:a7:6c:9d: b2:8e:0a:70:e2:b4:01:3a:69:cb:13:bf:22:31:8e: 11:2a:7e:71:78:b8:6a:cc:c3:89:a7:7c:87:26:56: 55:6d:8b:46:31:0f:17:da:0d:3b:5d:76:6c:f7:5b: 81:87:30:8a:9b:9c:82:c5:c8:32:c8:05:f6:44:bb: 0c:2c:9e:72:5e:7f:57:de:d8:a6:6f:b0:c8:f2:cd: c5:0a:93:08:f0:d4:a4:73:e7:d2:08:85:6a:42:83: 7a:f5:5a:9e:8a:6e:12:9e:77:c2:33:8f:00:ae:54: e9:2e:ff:59:11:62:c9:19:14:f4:57:1c:fb:58:43: a7:44:32:91:75:67:91:99:b2:91:74:52:5b:e0:b6: f7:0e:7b:8f:e2:41:94:83:36:1a:4e:d5:4d:47:2a: eb:3a:58:d3:cc:7f:74:f6:95:ba:f5:d1:4f:7a:e5: 6c:0d:dd:5d:58:be:16:d7:cc:3c:37:28:db:b0:37: 52:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:8F:F0:8C:80:F7:15:34:B8:5C:30:74:7F:3B:E6:DB:80:4D:81 X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cb:f0:94:fb:92:b0:97:90:5e:b1:9a:4d:80:41:a0:69:04: 3a:87:e5:90:2e:4f:f9:a1:82:36:ed:ed:01:ee:af:d2:55:3b: e5:32:d7:8f:19:ff:25:9c:d4:3b:26:b9:8e:a3:c5:a8:ac:aa: b1:df:53:2c:91:30:b8:95:6e:07:db:bc:b7:23:80:09:0f:99: f1:a0:79:28:18:36:ca:63:be:d1:61:05:45:2d:ad:7c:65:0e: 04:e1:4c:90:cf:7b:1e:77:a4:00:8d:83:ab:c7:8b:ae:72:c0: 28:0e:b0:f3:13:f2:94:22:6f:6e:1f:61:86:3b:4f:2e:72:44: 7f:bc:6a:66:2c:aa:c8:48:98:8d:90:0c:bc:80:7a:f0:39:85: 10:35:2b:2c:45:cd:a7:2f:5a:a1:62:73:b7:23:1c:56:f3:28: 12:9e:8d:08:79:a1:46:a6:ce:79:85:b2:87:5f:26:03:60:03: c4:e6:22:24:76:b1:15:56:c3:6d:5d:b2:31:46:f2:c7:6f:75: 36:69:99:7f:44:d2:7e:1f:fb:94:d6:95:d4:9f:09:92:68:2a: 87:fe:64:b4:a6:9a:78:16:e4:d7:27:28:b4:a5:3d:d7:f3:d1: fc:b0:b6:45:80:6e:df:b2:39:72:25:e7:a0:5c:4a:d3:39:05: 3c:42:19:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUxMTA0MTkwODMwWhcNMjUxMTExMTkwODMwWjAYMRYwFAYD VQQDEw02OTBhNGYyZS1iYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOuLoUsY5obH5GS3E6YnZdOOho5fdkvPWh1DWt+K8WUkDEpVNJEcRsrwdrP7 TFTz/iQ31nrC5MdgeUqOg/WE3An4EO3ns2WnbJ2yjgpw4rQBOmnLE78iMY4RKn5x eLhqzMOJp3yHJlZVbYtGMQ8X2g07XXZs91uBhzCKm5yCxcgyyAX2RLsMLJ5yXn9X 3timb7DI8s3FCpMI8NSkc+fSCIVqQoN69Vqeim4SnnfCM48ArlTpLv9ZEWLJGRT0 Vxz7WEOnRDKRdWeRmbKRdFJb4Lb3DnuP4kGUgzYaTtVNRyrrOljTzH909pW69dFP euVsDd1dWL4W18w8NyjbsDdSLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqBj/CM gPcVNLhcMHR/O+bbgE2BMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfy/CU+5Kwl5BesZpNgEGgaQQ6h+WQLk/5oYI27e0B7q/SVTvlMteP Gf8lnNQ7JrmOo8WorKqx31MskTC4lW4H27y3I4AJD5nxoHkoGDbKY77RYQVFLa18 ZQ4E4UyQz3sed6QAjYOrx4uucsAoDrDzE/KUIm9uH2GGO08uckR/vGpmLKrISJiN kAy8gHrwOYUQNSssRc2nL1qhYnO3IxxW8ygSno0IeaFGps55hbKHXyYDYAPE5iIk drEVVsNtXbIxRvLHb3U2aZl/RNJ+H/uU1pXUnwmSaCqH/mS0ppp4FuTXJyi0pT3X 89H8sLZFgG7fsjlyJeegXErTOQU8Qhkh -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:25 2025 by rpki-client