$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: 2dC7HkCnp0zh129xKXRYlIRQGmZqkqWnE8Ql/sfRTNo= Subject key identifier: 13:78:77:8C:89:D5:ED:9A:52:3A:41:EC:6B:CC:50:93:28:29:08:67 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0B0C Signing time: Tue 04 Nov 2025 19:25:31 +0000 Manifest this update: Tue 04 Nov 2025 19:25:31 +0000 Manifest next update: Tue 11 Nov 2025 19:25:31 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: RPJ45wOkhRhP9s24qQ9Orp5ttO2jJ0x39v0XCtqSyUs=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Nov 4 19:25:31 2025 GMT Not After : Nov 11 19:25:31 2025 GMT Subject: CN=690a532b-a334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:03:63:d1:f4:d7:89:d3:3d:f9:63:44:e3:c0: 7c:7a:0d:d6:da:52:c3:20:85:00:86:e4:fe:2b:33: f1:a2:ee:bd:19:96:fc:e7:83:a0:7d:61:9c:29:cf: bf:ea:58:94:25:84:60:c3:b1:b7:45:a6:68:82:eb: a4:88:23:99:68:b9:e6:08:0a:63:fa:a0:1c:94:b6: 34:a2:49:5e:87:26:4c:5d:60:20:23:22:6c:e5:09: 7c:08:f9:ba:39:e2:26:3f:d4:7c:30:9b:de:3d:c9: d3:70:38:00:57:56:1c:88:46:a4:76:83:0b:64:ff: bd:b7:53:c2:4d:69:6d:14:84:ae:4e:e4:0f:4f:14: d0:30:e4:6f:2f:2c:d5:e1:92:6f:0e:6c:09:b9:a9: 2e:48:d8:e3:14:6f:2b:03:5a:39:d4:6a:3f:35:04: cd:7f:da:e1:40:25:b9:c2:7e:8c:bd:8c:ec:4a:54: cf:45:9a:fe:da:67:1e:75:46:2d:fe:73:38:66:ba: f1:47:1f:ab:51:e4:18:6f:33:14:67:b0:37:9c:ef: d0:c5:b8:56:e4:d0:51:38:7d:cd:4c:02:69:3f:7a: d9:2a:3f:c2:09:f4:c6:dc:d0:70:85:4e:13:f3:54: 13:1e:54:38:bf:8c:43:ad:71:72:bc:ef:85:74:1d: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:77:8C:89:D5:ED:9A:52:3A:41:EC:6B:CC:50:93:28:29:08:67 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:7c:fc:e0:fc:df:c0:fd:06:53:58:c8:69:c5:8d:30:46:21: 24:cc:ec:2e:0f:30:0a:26:ca:7f:1f:a8:c8:cb:4c:4b:c5:f0: bb:24:7e:d1:31:69:8b:34:26:22:95:51:f1:35:c3:29:26:be: 05:12:1a:26:50:f2:39:2d:08:8c:cf:dd:64:50:e2:e6:f2:70: 54:f5:ba:1c:b4:e9:e3:5e:d4:99:3f:d8:67:48:b4:e9:be:5c: c2:44:68:de:4a:6d:06:90:0a:d6:b8:6e:c7:d5:46:cf:4d:9a: 2f:8f:c4:de:3c:59:44:b8:4d:94:21:9b:8d:7c:97:7b:22:3a: 41:76:fd:f2:91:b1:b1:b6:bf:7c:b5:5b:91:14:77:2a:a5:00: be:d0:8e:54:3e:17:cb:fa:0e:62:e5:00:2b:66:f1:ac:bd:a5: 69:57:39:33:8a:33:e7:20:1a:2e:e8:b5:54:ae:b4:4e:18:ff: 4c:fa:cc:38:be:92:8a:93:fc:f1:31:ef:73:26:22:13:35:d7: 0d:27:10:93:24:43:45:59:c6:f5:ae:ea:e9:ec:6f:a6:9b:60: ee:57:22:14:95:4e:c9:7e:3f:c7:2c:d5:83:d3:17:2f:42:6f: 82:1c:bf:7a:76:cb:67:01:8c:46:22:bf:af:12:15:e7:ab:b5: f1:df:75:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjUxMTA0MTkyNTMxWhcNMjUxMTExMTkyNTMxWjAYMRYwFAYD VQQDEw02OTBhNTMyYi1hMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gNj0fTXidM9+WNE48B8eg3W2lLDIIUAhuT+KzPxou69GZb854OgfWGcKc+/ 6liUJYRgw7G3RaZoguukiCOZaLnmCApj+qAclLY0oklehyZMXWAgIyJs5Ql8CPm6 OeImP9R8MJvePcnTcDgAV1YciEakdoMLZP+9t1PCTWltFISuTuQPTxTQMORvLyzV 4ZJvDmwJuakuSNjjFG8rA1o51Go/NQTNf9rhQCW5wn6MvYzsSlTPRZr+2mcedUYt /nM4ZrrxRx+rUeQYbzMUZ7A3nO/QxbhW5NBROH3NTAJpP3rZKj/CCfTG3NBwhU4T 81QTHlQ4v4xDrXFyvO+FdB1NaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN4d4yJ 1e2aUjpB7GvMUJMoKQhnMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrfPzg/N/A/QZTWMhpxY0wRiEkzOwuDzAKJsp/H6jIy0xLxfC7JH7R MWmLNCYilVHxNcMpJr4FEhomUPI5LQiMz91kUOLm8nBU9boctOnjXtSZP9hnSLTp vlzCRGjeSm0GkArWuG7H1UbPTZovj8TePFlEuE2UIZuNfJd7IjpBdv3ykbGxtr98 tVuRFHcqpQC+0I5UPhfL+g5i5QArZvGsvaVpVzkzijPnIBou6LVUrrROGP9M+sw4 vpKKk/zxMe9zJiITNdcNJxCTJENFWcb1rurp7G+mm2DuVyIUlU7Jfj/HLNWD0xcv Qm+CHL96dstnAYxGIr+vEhXnq7Xx33Uj -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:05 2025 by rpki-client