$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: 3BCCE55tArPG1A+sOmyCKcIXeo6KLSaM7BXwIWrvu1I= Subject key identifier: 1C:4A:BC:8C:AB:B1:06:3D:38:15:19:E2:A9:D5:1F:41:7A:83:16:B5 Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0C5A Signing time: Sun 02 Nov 2025 18:37:10 +0000 Manifest this update: Sun 02 Nov 2025 18:37:09 +0000 Manifest next update: Sun 09 Nov 2025 18:37:09 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: ak2MdRUj6Vo58o900gGn9mtFKdpbrtQmcgBsDBYl9sk=) 2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: AlkpfpZwpFAFSNpnhnUShgrrcb/AfgC29z6/e4zKojg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Nov 2 18:37:09 2025 GMT Not After : Nov 9 18:37:09 2025 GMT Subject: CN=6907a4d6-41fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:90:7a:98:22:4c:94:8c:10:db:69:1d:da: 19:ec:99:c8:40:79:44:e6:b2:30:87:c0:5d:d4:8a: b9:a9:1c:8c:46:60:a8:de:bd:26:b2:f1:7d:76:94: 98:cc:6e:d1:34:d6:f7:a1:74:33:71:0b:53:2d:37: db:2d:c1:35:ac:93:04:74:73:4d:20:95:53:87:44: 37:61:fb:8b:1d:a4:5a:45:13:88:ae:02:4c:cf:c6: be:85:0a:0a:3c:0f:15:f8:e1:31:cc:bf:17:ab:0d: 19:32:dc:83:d2:3c:14:94:18:7b:52:9a:3b:96:14: 91:5f:8e:ae:fd:0b:6c:5c:87:df:15:0b:ff:1c:5d: 1d:05:ac:54:56:32:16:5f:90:ee:f5:19:49:b2:ef: 97:fb:f4:bc:93:d4:f1:b3:7c:3d:53:70:88:f0:5b: ed:69:23:4a:7c:ac:bb:10:1c:0b:37:a6:6d:86:e8: cd:8c:76:7c:b0:d0:b2:fd:b0:9c:a3:16:0a:ce:9a: bb:97:23:d6:70:18:c5:4d:42:6c:59:e7:00:5f:42: 2b:3a:1d:32:0a:4e:a0:b5:59:4e:e5:88:46:6c:d1: bb:bf:6d:c2:5f:19:91:f0:3d:e4:46:5c:52:aa:75: 89:12:eb:b4:ed:b0:9d:a6:de:39:ca:1f:10:85:c9: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4A:BC:8C:AB:B1:06:3D:38:15:19:E2:A9:D5:1F:41:7A:83:16:B5 X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:da:e1:0b:e4:e0:60:65:c2:df:09:78:07:0a:d5:99:f5:5e: 97:44:33:00:b4:f8:fc:18:10:22:a4:66:c0:5e:ae:a1:c7:dd: 13:c4:27:09:a2:d9:8d:80:0a:66:4f:15:4b:9b:7e:69:95:12: 47:35:3c:2e:f9:4c:c1:bc:81:7c:73:37:f9:0e:e8:7a:1e:00: e7:fd:53:46:53:ed:0f:f5:ce:66:62:1c:05:ff:b2:c0:13:dd: 12:7c:db:6c:24:0e:69:5e:21:7a:0e:7a:33:e8:ce:0d:00:7f: 6c:e1:31:08:c3:92:a2:b3:53:e7:9a:a7:37:e1:f6:db:d9:ce: 8c:63:49:f4:71:7c:d7:c2:8e:e6:a7:59:a1:bd:46:cd:a3:27: 87:1d:69:87:3e:f0:0b:62:45:4e:ec:b6:f3:2a:99:65:d3:80: b5:c1:0a:57:d6:02:0a:72:79:a3:89:6c:33:82:ff:dc:3a:dd: 7a:d2:96:77:62:b3:aa:28:01:c2:c9:de:16:fb:ad:4d:94:97: 6e:f6:f9:37:05:4b:5c:88:47:24:f8:f3:d7:f5:0b:7b:99:5e: 19:32:24:c0:26:1b:84:3e:0a:4b:60:5c:37:e9:72:d9:9a:0a: 69:6b:0c:7d:41:7e:53:fd:f7:0d:d9:88:e8:e3:2d:59:6b:1a: 73:f2:2a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjUxMTAyMTgzNzA5WhcNMjUxMTA5MTgzNzA5WjAYMRYwFAYD VQQDEw02OTA3YTRkNi00MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOiQepgiTJSMENtpHdoZ7JnIQHlE5rIwh8Bd1Iq5qRyMRmCo3r0msvF9dpSY zG7RNNb3oXQzcQtTLTfbLcE1rJMEdHNNIJVTh0Q3YfuLHaRaRROIrgJMz8a+hQoK PA8V+OExzL8Xqw0ZMtyD0jwUlBh7Upo7lhSRX46u/QtsXIffFQv/HF0dBaxUVjIW X5Du9RlJsu+X+/S8k9Txs3w9U3CI8FvtaSNKfKy7EBwLN6ZthujNjHZ8sNCy/bCc oxYKzpq7lyPWcBjFTUJsWecAX0IrOh0yCk6gtVlO5YhGbNG7v23CXxmR8D3kRlxS qnWJEuu07bCdpt45yh8QhckhAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxKvIyr sQY9OBUZ4qnVH0F6gxa1MB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb2uEL5OBgZcLfCXgHCtWZ9V6XRDMAtPj8GBAipGbAXq6hx90TxCcJ otmNgApmTxVLm35plRJHNTwu+UzBvIF8czf5Duh6HgDn/VNGU+0P9c5mYhwF/7LA E90SfNtsJA5pXiF6Dnoz6M4NAH9s4TEIw5Kis1Pnmqc34fbb2c6MY0n0cXzXwo7m p1mhvUbNoyeHHWmHPvALYkVO7LbzKpll04C1wQpX1gIKcnmjiWwzgv/cOt160pZ3 YrOqKAHCyd4W+61NlJdu9vk3BUtciEck+PPX9Qt7mV4ZMiTAJhuEPgpLYFw36XLZ mgppawx9QX5T/fcN2Yjo4y1Zaxpz8ipl -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:13 2025 by rpki-client