$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json) Hash identifier: b/tVaxYnu0+meI7KIJbg9g43pvfFz+IiRGF0CmoQAl4= Subject key identifier: CB:FD:31:F7:B1:4B:F5:B3:B9:D4:D2:23:F4:89:D6:A8:C8:C9:14:6E Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5 Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft Manifest number: 06F7 Signing time: Tue 04 Nov 2025 23:14:16 +0000 Manifest this update: Tue 04 Nov 2025 23:14:16 +0000 Manifest next update: Tue 11 Nov 2025 23:14:16 +0000 Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: h+dOhV38IxX2Pg3GCQDA1Gsux9KQFhHyaCw0qand/rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5 Validity Not Before: Nov 4 23:14:16 2025 GMT Not After : Nov 11 23:14:16 2025 GMT Subject: CN=690a88c8-f61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:59:4b:3f:3e:a7:3b:dc:8b:f1:f7:0c:1a: 9d:3f:5e:17:9e:c1:ed:4e:91:fa:02:6b:e3:57:c3: f1:d5:d0:6a:be:43:df:8d:22:06:0f:fc:72:5b:72: b8:8c:c9:12:5d:24:12:9f:ab:91:7d:79:a0:ac:d7: d4:6e:84:45:53:0b:73:c3:72:dc:ec:4d:9b:7f:a1: 79:01:49:28:ac:3d:6c:ff:fd:54:6b:11:f1:b1:7a: be:0e:3c:8d:89:71:71:fd:f6:c1:c2:ff:94:df:d0: ad:f9:b9:5f:ca:ce:9d:3e:84:9c:3b:8b:53:8e:84: 15:26:57:68:73:b7:0b:f1:fe:76:ab:3c:33:ff:7c: f2:b3:ef:2a:a0:3b:2a:bd:d8:f5:4e:ba:c3:1a:a3: 06:e4:a7:9e:f3:f8:ed:50:76:3f:7e:ed:94:60:a1: 67:3b:45:20:c6:67:bb:e9:27:37:8d:08:1f:63:3b: c9:2b:83:7b:13:1c:dd:e5:a0:11:75:3b:ff:df:87: 77:cd:5e:02:d9:d8:31:0f:35:77:72:de:6d:ed:eb: 25:e5:00:40:ee:c5:d7:36:4e:f2:26:a5:27:b0:77: 5f:7b:8b:d5:83:f5:bf:4b:04:72:0a:81:75:9b:3c: 53:3d:8b:7c:5c:02:83:c6:aa:29:70:3e:1b:fb:d1: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FD:31:F7:B1:4B:F5:B3:B9:D4:D2:23:F4:89:D6:A8:C8:C9:14:6E X509v3 Authority Key Identifier: keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:be:6f:3b:9e:df:b1:63:f1:84:0c:81:d8:a8:8d:4e:d4:35: 0f:e2:e5:df:ec:b7:41:a9:63:05:11:85:13:9b:e1:15:b5:3f: b5:1d:98:5f:0d:e7:04:84:aa:25:29:f4:20:6c:46:02:36:09: 2d:ef:86:14:1f:92:5b:86:b7:36:5e:25:40:7f:53:ae:82:f0: f3:bd:2b:02:8e:90:4b:d7:a5:0b:15:92:49:4a:84:0b:a0:f1: 3b:40:06:80:ad:b3:e8:9f:ff:fe:3f:de:a5:08:c7:58:db:6b: ac:e7:a5:b2:b5:38:fc:e2:2d:65:86:18:74:f2:3e:eb:72:d6: ee:36:50:e1:bf:4c:c2:95:68:a5:ba:35:04:d6:a2:ee:24:65: c9:5e:54:08:02:70:03:7e:a3:9b:a7:de:b8:94:c3:48:a6:24: 9b:49:be:42:1a:6b:d8:f5:a4:e6:22:0d:46:0e:1e:40:13:9e: 18:d8:f8:95:2f:fb:8b:06:91:67:ab:a0:fe:9b:25:a0:60:ef: c1:0b:46:d5:2e:25:9c:d0:7c:81:6a:46:44:fc:87:9a:93:65: 61:eb:bb:30:a3:fe:1e:d7:73:2a:f5:00:75:f1:9b:80:ff:0b: 42:3c:4c:ad:8e:02:fd:30:68:e4:d2:f1:17:a9:b0:e9:aa:8c: a1:29:2d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDg5MzEyMTgwNUY5NDE0N0QzN0RDQzZENzRCNjM3ODQ2 RjcyMzk3QzUwHhcNMjUxMTA0MjMxNDE2WhcNMjUxMTExMjMxNDE2WjAYMRYwFAYD VQQDEw02OTBhODhjOC1mNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYxZSz8+pzvci/H3DBqdP14XnsHtTpH6AmvjV8Px1dBqvkPfjSIGD/xyW3K4 jMkSXSQSn6uRfXmgrNfUboRFUwtzw3Lc7E2bf6F5AUkorD1s//1UaxHxsXq+DjyN iXFx/fbBwv+U39Ct+blfys6dPoScO4tTjoQVJldoc7cL8f52qzwz/3zys+8qoDsq vdj1TrrDGqMG5Kee8/jtUHY/fu2UYKFnO0Ugxme76Sc3jQgfYzvJK4N7Exzd5aAR dTv/34d3zV4C2dgxDzV3ct5t7esl5QBA7sXXNk7yJqUnsHdfe4vVg/W/SwRyCoF1 mzxTPYt8XAKDxqopcD4b+9FfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv9Mfex S/WzudTSI/SJ1qjIyRRuMB8GA1UdIwQYMBaAFIkxIYBflBR9N9zG10tjeEb3I5fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZIMDMzTWJYUzJONFJ2Y2ps OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lURWhnRi1VRkgwMzNNYlhTMk40UnZjamw4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZI MDMzTWJYUzJONFJ2Y2psOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIvm87nt+xY/GEDIHYqI1O1DUP4uXf7LdBqWMFEYUTm+EVtT+1HZhf DecEhKolKfQgbEYCNgkt74YUH5Jbhrc2XiVAf1OugvDzvSsCjpBL16ULFZJJSoQL oPE7QAaArbPon//+P96lCMdY22us56WytTj84i1lhhh08j7rctbuNlDhv0zClWil ujUE1qLuJGXJXlQIAnADfqObp964lMNIpiSbSb5CGmvY9aTmIg1GDh5AE54Y2PiV L/uLBpFnq6D+myWgYO/BC0bVLiWc0HyBakZE/Ieak2Vh67swo/4e13Mq9QB18ZuA /wtCPEytjgL9MGjk0vEXqbDpqoyhKS2Z -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:21 2025 by rpki-client