$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: wUkee7B85W03KZYxPZL0Ey5okmPmivYBZ+WuqvPRda4= Subject key identifier: 65:0D:7D:CF:44:86:0E:30:11:45:A8:1E:6A:89:6C:51:6C:94:D2:70 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 16C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 16A9 Signing time: Wed 22 Oct 2025 17:00:14 +0000 Manifest this update: Wed 22 Oct 2025 17:00:13 +0000 Manifest next update: Wed 29 Oct 2025 17:00:13 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: peaVN1NF1zg6jv/17KmL75sHWs/g6/jZmxPVds1ebVI=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: gYVrbtrIqWm9akFMSRfLyBApZQdsKZ/TGrfXdq2YQZg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: Oe0ZhNHc+oTi0v0pEyomCNHZHmLGtOgid/cHD2LWfB4=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: iK4wxE4X5dwuMQMPvFE//EwoDLAL1trl9tc0x5zzbqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5824 (0x16c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Oct 22 17:00:13 2025 GMT Not After : Oct 29 17:00:13 2025 GMT Subject: CN=68f90d9e-8b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:7a:45:14:a2:0d:8e:2e:eb:1d:14:78:62: 63:34:00:d5:9f:0b:8b:96:6c:28:32:36:55:ba:6c: 1d:b9:a0:93:6c:ce:68:b7:61:54:c4:fc:55:7f:93: ba:3d:05:15:3d:47:19:1a:03:10:5b:d5:a8:9d:8f: 53:06:4c:e2:37:14:72:65:a8:de:6a:5a:fe:86:71: 99:66:c9:16:b8:70:cf:fd:a9:f2:c1:dd:09:93:3e: c0:84:65:ef:5a:fc:e9:0c:60:fb:17:72:8e:10:f8: 3f:42:6d:5b:a5:da:e1:6c:24:2d:01:cc:cf:3e:b7: f7:4c:38:b5:a8:24:38:ce:e1:23:09:b2:ca:45:a0: 6c:55:76:c4:f9:e9:50:06:63:3b:d7:51:0d:3f:6a: e8:13:27:18:c0:60:60:59:39:b4:28:40:8c:12:c4: 7b:7b:b5:21:1e:10:c3:78:a2:91:b0:da:6e:81:ca: d6:c0:22:e6:bd:4c:9f:03:5b:9c:58:de:63:5d:c7: 7b:14:a7:e2:41:2d:c1:44:e6:ee:74:71:66:d7:8b: 4c:69:43:d9:cf:dd:83:be:bd:95:79:b5:0b:00:91: f6:c6:68:7e:48:65:3e:b9:98:48:b2:bc:53:88:78: 1a:7e:ad:97:d6:99:09:58:44:ae:83:02:69:37:61: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0D:7D:CF:44:86:0E:30:11:45:A8:1E:6A:89:6C:51:6C:94:D2:70 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:58:56:d4:66:a8:47:88:bb:95:2f:32:ae:ef:7f:07:13:b2: 50:ed:85:ef:42:bc:dc:18:cb:7a:63:6f:ef:3c:52:19:04:88: 5f:c5:08:39:34:bc:4a:88:2e:b7:62:d1:26:5c:ec:bc:08:35: 77:f9:29:e1:2f:20:ec:dc:06:e0:9c:53:05:08:40:6a:2c:90: 5a:4c:8c:d5:a4:ed:28:66:84:bf:e9:9f:ac:c9:b4:37:17:9c: e6:1f:3d:6b:3b:d8:24:48:da:16:48:3a:ee:af:ba:2f:0e:2a: e7:8f:18:fd:ec:19:b7:ef:6d:de:a5:72:b4:e1:4c:38:89:7a: a4:d6:a3:b8:a1:e3:b0:00:34:74:9b:f5:53:96:96:3b:00:66: a0:34:93:b1:c5:c5:4a:fe:ab:2c:d0:d1:b1:89:a4:5f:3f:65: 61:05:ee:22:cf:d9:6f:71:f7:75:82:c5:23:93:ed:20:6f:3d: aa:c9:b4:98:a3:aa:6e:27:51:6d:6a:ba:93:7e:78:88:ee:68: de:e8:c3:91:ee:49:7c:95:22:a6:35:f7:cf:4f:3d:13:89:60: 43:cb:7b:73:40:b1:52:1e:70:67:51:10:cf:60:52:95:b5:4a: c1:47:dc:d0:f7:83:c6:c6:00:5b:a5:9f:4f:7d:49:11:5d:09: 3b:92:86:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjUxMDIyMTcwMDEzWhcNMjUxMDI5MTcwMDEzWjAYMRYwFAYD VQQDEw02OGY5MGQ5ZS04YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXp6RRSiDY4u6x0UeGJjNADVnwuLlmwoMjZVumwduaCTbM5ot2FUxPxVf5O6 PQUVPUcZGgMQW9WonY9TBkziNxRyZajealr+hnGZZskWuHDP/anywd0Jkz7AhGXv WvzpDGD7F3KOEPg/Qm1bpdrhbCQtAczPPrf3TDi1qCQ4zuEjCbLKRaBsVXbE+elQ BmM711ENP2roEycYwGBgWTm0KECMEsR7e7UhHhDDeKKRsNpugcrWwCLmvUyfA1uc WN5jXcd7FKfiQS3BRObudHFm14tMaUPZz92Dvr2VebULAJH2xmh+SGU+uZhIsrxT iHgafq2X1pkJWESugwJpN2Gz/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUNfc9E hg4wEUWoHmqJbFFslNJwMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASWFbUZqhHiLuVLzKu738HE7JQ7YXvQrzcGMt6Y2/vPFIZBIhfxQg5 NLxKiC63YtEmXOy8CDV3+SnhLyDs3AbgnFMFCEBqLJBaTIzVpO0oZoS/6Z+sybQ3 F5zmHz1rO9gkSNoWSDrur7ovDirnjxj97Bm3723epXK04Uw4iXqk1qO4oeOwADR0 m/VTlpY7AGagNJOxxcVK/qss0NGxiaRfP2VhBe4iz9lvcfd1gsUjk+0gbz2qybSY o6puJ1FtarqTfniI7mje6MOR7kl8lSKmNffPTz0TiWBDy3tzQLFSHnBnURDPYFKV tUrBR9zQ94PGxgBbpZ9PfUkRXQk7koaN -----END CERTIFICATE-----Generated at Thu Oct 23 05:59:57 2025 by rpki-client