$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: rpeeBIInsrlSMNwjoMIkIwmluntnvC8FSVw98HQLAGU= Subject key identifier: F3:AD:12:C0:45:27:13:6C:58:D1:B3:8C:65:7F:E8:98:36:CB:01:6E Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: 09 Signing time: Fri 17 Oct 2025 11:55:05 +0000 Manifest this update: Fri 17 Oct 2025 11:55:04 +0000 Manifest next update: Fri 24 Oct 2025 11:55:04 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: W8PKavD2r0B9O53we2u+vC6mtkjbmhHNBkE/mvtqzyM=) 2: 16B4A78CA40B11F089BAB06CC4F9AE02.roa (hash: VPaGjYCY/yBPqdHyuHravwWJ2fLNhQCH9lpAYkaXN4s=) 3: E802ABD6A40B11F0B922EA6DC4F9AE02.roa (hash: 2u8PzTJSh2BMJmgnVEbZTxTzv071sLkcL+Ih47BKb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Oct 17 11:55:04 2025 GMT Not After : Oct 24 11:55:04 2025 GMT Subject: CN=68f22e98-88cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:32:f9:e8:c6:de:83:3a:b2:a3:d2:72:20: b7:ff:ca:39:21:de:36:80:a9:3d:72:b4:65:e4:ee: 29:95:7a:46:ae:8d:3f:d4:57:de:74:3f:68:4a:c3: ac:c0:3c:77:c8:3a:ce:34:fc:d7:e7:69:cd:6e:81: f0:d9:91:ca:8c:b1:73:3b:c2:d7:2f:ef:7a:3c:a4: 75:65:f1:62:27:ba:37:81:7c:e6:35:d5:5c:83:d6: 3d:58:52:10:09:71:1a:de:cb:20:7a:e7:6c:b7:23: 39:fc:37:c2:f7:57:fe:b7:e0:4f:72:4c:35:db:5b: 2b:78:7b:61:ad:fa:69:5b:b6:03:c3:37:8e:45:b5: f6:63:8e:a6:06:31:f2:44:20:2e:de:e4:5d:6d:09: 0a:7e:05:49:3e:1b:0c:15:c6:f2:2e:8e:5a:c4:d3: 00:10:62:82:08:28:32:43:8a:8a:c0:9d:39:88:ad: b6:f9:b1:a8:dc:9e:4b:c7:25:76:28:3b:bf:9d:df: 4c:89:7d:15:08:0f:d7:4c:59:d9:2c:3c:6a:6b:89: 7f:1f:88:22:a5:9d:7a:57:00:39:56:a7:ab:3a:1e: cb:c3:4a:3b:1d:b4:71:79:11:61:bf:fe:87:33:35: 19:0a:15:62:c9:8b:5a:c5:47:55:18:e0:d3:6e:36: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:12:C0:45:27:13:6C:58:D1:B3:8C:65:7F:E8:98:36:CB:01:6E X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:90:cd:b3:11:ab:1d:12:0d:5d:cd:4b:ea:ac:2f:f1:63:28: 6a:9c:63:92:9a:e8:07:b7:89:17:29:02:56:76:a9:6c:86:ce: 1b:ba:1b:c0:1a:7a:84:6a:76:bb:c3:2f:15:a1:3d:a6:ac:4e: 13:cf:c3:8b:b1:6f:fe:71:c8:8f:0b:ab:cf:0f:75:02:f5:cf: 44:d8:9f:9b:78:38:f1:3a:48:9e:cb:59:5f:ed:b7:e4:1f:8b: 98:d3:11:1c:10:48:70:41:ba:cb:0b:fd:e8:fd:e5:0e:18:63: 78:f2:c1:f7:71:e0:80:70:ac:5d:ab:89:2f:cc:c9:5c:8b:b9: 06:e2:7b:16:86:8f:db:ea:99:07:ef:b8:a8:68:84:b3:eb:54: b9:c9:5c:2b:79:b2:2d:1f:25:f1:59:b5:80:41:13:c3:d5:6f: a8:30:16:05:9b:47:b8:40:b2:32:0e:2f:5e:3b:eb:50:1a:e2: 24:af:26:df:8f:a6:e2:a6:9a:ea:2d:3a:d8:e7:a1:42:71:f6: 7b:d8:1d:1a:32:18:dc:20:f1:d6:af:52:1b:a4:f9:a5:5d:38: a7:3e:83:66:e6:6f:9a:ad:1e:72:b9:c1:13:33:6e:ba:fc:cc: 80:03:f4:6b:34:35:d8:d4:2c:98:98:bd:4a:0f:3b:f3:22:f7: a4:d5:ac:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNTEwMTcxMTU1MDRaFw0yNTEwMjQxMTU1MDRaMBgxFjAUBgNV BAMTDTY4ZjIyZTk4LTg4Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTmjL56Mbegzqyo9JyILf/yjkh3jaAqT1ytGXk7imVekaujT/UV950P2hKw6zA PHfIOs40/Nfnac1ugfDZkcqMsXM7wtcv73o8pHVl8WInujeBfOY11VyD1j1YUhAJ cRreyyB652y3Izn8N8L3V/634E9yTDXbWyt4e2Gt+mlbtgPDN45FtfZjjqYGMfJE IC7e5F1tCQp+BUk+GwwVxvIujlrE0wAQYoIIKDJDiorAnTmIrbb5sajcnkvHJXYo O7+d30yJfRUID9dMWdksPGpriX8fiCKlnXpXADlWp6s6HsvDSjsdtHF5EWG//ocz NRkKFWLJi1rFR1UY4NNuNvknAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU860SwEUn E2xY0bOMZX/omDbLAW4wHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp bjFSR0QxUU5zV1QwWjRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADeQzbMRqx0SDV3NS+qsL/FjKGqcY5Ka6Ae3iRcpAlZ2qWyGzhu6G8Aa eoRqdrvDLxWhPaasThPPw4uxb/5xyI8Lq88PdQL1z0TYn5t4OPE6SJ7LWV/tt+Qf i5jTERwQSHBBussL/ej95Q4YY3jywfdx4IBwrF2riS/MyVyLuQbiexaGj9vqmQfv uKhohLPrVLnJXCt5si0fJfFZtYBBE8PVb6gwFgWbR7hAsjIOL14761Aa4iSvJt+P puKmmuotOtjnoUJx9nvYHRoyGNwg8davUhuk+aVdOKc+g2bmb5qtHnK5wRMzbrr8 zIAD9Gs0NdjULJiYvUoPO/Mi96TVrOQ= -----END CERTIFICATE-----Generated at Sat Oct 18 18:02:55 2025 by rpki-client