$ rpki-client -vvf rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft File: i0WgWBIZndhsv8hCI_2BqzMGJrk.mft (raw, json) Hash identifier: OpCAuczW6m3i0fwMEAfWQSW+dF8/zGtUF7PCDYMQhFA= Subject key identifier: 55:6C:F2:38:91:9C:0A:77:0E:1B:C7:04:79:4F:D0:93:D7:AC:F9:BE Authority key identifier: 8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9 Certificate issuer: /CN=A919762A/serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 07:50:38 +0000 Manifest this update: Mon 03 Nov 2025 07:50:38 +0000 Manifest next update: Mon 10 Nov 2025 07:50:38 +0000 Files and hashes: 1: i0WgWBIZndhsv8hCI_2BqzMGJrk.crl (hash: 2ndYkJI8pTLI/H8TKr2jd9QF2XSypc3bG94wOtYpAFk=) 2: 9724DB52944911F0BBB4490AC4F9AE02.roa (hash: lpN7ylnahjPKcKqzXzMQXkmAw/ItFEQm+gEhm6BkKOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919762A, serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9 Validity Not Before: Nov 3 07:50:38 2025 GMT Not After : Nov 10 07:50:38 2025 GMT Subject: CN=69085ece-3fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bc:07:50:a0:89:fb:cb:90:1d:39:16:b4:cc: bb:3f:61:bd:26:d2:ff:bd:3e:c2:ab:35:bd:bf:89: 1d:9b:49:bc:18:e9:21:1d:35:7d:65:8e:0a:88:3e: 49:9c:9d:70:d7:98:4f:67:db:1f:dd:f7:03:67:48: 42:1c:9f:fd:0a:10:f0:a7:e9:99:a9:68:8c:22:d9: 0c:f0:f9:4c:67:44:ea:2e:44:90:e7:3c:96:3a:40: 6e:de:88:3c:c8:12:c3:80:8a:3f:48:ae:c0:7a:47: dd:0b:b1:a0:34:6d:a9:f5:3f:8d:e3:83:ba:5a:20: af:4d:d5:65:79:09:5d:5b:7e:07:0e:99:d4:f1:c0: d3:82:de:92:2f:34:f1:e3:5a:3a:37:31:e0:b3:00: 6f:82:b8:ff:23:29:8c:71:71:e7:22:55:e2:9a:a9: 85:bd:fb:83:c0:5a:80:bd:b8:1c:a1:bf:b3:7d:74: 5e:d5:a3:e5:86:65:45:b2:ab:d3:a2:dd:6c:c7:6c: 6f:22:63:e0:e6:f0:11:90:8e:d5:95:f7:7e:af:5b: ce:9e:75:19:b3:ec:74:07:e7:cf:0c:fa:8a:e9:04: d1:e7:ff:10:84:5b:20:8d:a8:3d:bf:b9:b8:9b:2f: 71:78:36:4a:d2:b9:61:86:22:a3:0a:e0:7a:f7:37: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:F2:38:91:9C:0A:77:0E:1B:C7:04:79:4F:D0:93:D7:AC:F9:BE X509v3 Authority Key Identifier: keyid:8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:65:a4:e6:b4:5e:9d:a0:7c:15:80:01:73:a8:8f:38:aa:13: b3:b8:40:e7:e3:02:04:ac:25:0e:81:50:6f:77:c0:42:b4:de: 92:74:62:ff:ce:68:10:41:96:de:22:5b:d1:16:eb:04:96:93: e0:b6:f1:36:cf:75:41:52:50:5c:0b:e2:aa:7f:b6:d2:96:fb: 7e:0e:4f:a9:0a:e8:aa:f7:fc:9e:30:93:3f:17:b4:09:da:2b: d0:61:8e:8c:29:f8:46:9f:d1:35:dc:d5:f7:2c:98:3b:66:a0: 91:e2:ea:45:b8:7f:8a:26:0e:5f:a1:96:92:e0:3c:47:7c:5b: 85:13:12:1b:c6:b0:94:33:0e:e4:fa:d0:f4:8b:f4:7f:15:07: bd:ff:b6:af:e9:b8:77:02:02:89:32:17:fa:60:6e:ab:74:fd: e2:6a:fd:a4:24:20:d7:2c:4f:4d:10:78:79:0e:0f:15:18:c9: e5:51:4b:91:53:78:4e:61:f7:86:84:68:c8:6d:c3:09:b2:38: 6f:c5:e6:3d:29:d9:9b:c3:ed:22:07:7a:13:25:45:81:02:c0: fc:41:d8:4e:31:d8:36:d4:7f:e6:20:0b:3c:c9:fc:1a:b2:ec: 36:ff:ef:df:8e:d8:23:cd:87:f0:07:7a:2d:07:a2:b1:15:62: 8d:cd:37:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzYyQTExMC8GA1UEBRMoOEI0NUEwNTgxMjE5OUREODZDQkZDODQyMjNGRDgxQUIz MzA2MjZCOTAeFw0yNTExMDMwNzUwMzhaFw0yNTExMTAwNzUwMzhaMBgxFjAUBgNV BAMTDTY5MDg1ZWNlLTNmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnvAdQoIn7y5AdORa0zLs/Yb0m0v+9PsKrNb2/iR2bSbwY6SEdNX1ljgqIPkmc nXDXmE9n2x/d9wNnSEIcn/0KEPCn6ZmpaIwi2Qzw+UxnROouRJDnPJY6QG7eiDzI EsOAij9IrsB6R90LsaA0ban1P43jg7paIK9N1WV5CV1bfgcOmdTxwNOC3pIvNPHj Wjo3MeCzAG+CuP8jKYxxceciVeKaqYW9+4PAWoC9uByhv7N9dF7Vo+WGZUWyq9Oi 3WzHbG8iY+Dm8BGQjtWV936vW86edRmz7HQH588M+orpBNHn/xCEWyCNqD2/ubib L3F4NkrSuWGGIqMK4Hr3N8c3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVWzyOJGc CncOG8cEeU/Qk9es+b4wHwYDVR0jBBgwFoAUi0WgWBIZndhsv8hCI/2BqzMGJrkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NjJBLzRDOENFMUMwOTQ0 OTExRjA4QjBEQzEwOUM0RjlBRTAyL2kwV2dXQklabmRoc3Y4aENJXzJCcXpNR0py ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTBXZ1dCSVpuZGhzdjhoQ0lfMkJxek1HSnJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NjJBLzRDOENFMUMwOTQ0OTExRjA4QjBEQzEwOUM0RjlBRTAyL2kwV2dXQklabmRo c3Y4aENJXzJCcXpNR0pyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5lpOa0Xp2gfBWAAXOojziqE7O4QOfjAgSsJQ6BUG93wEK03pJ0Yv/O aBBBlt4iW9EW6wSWk+C28TbPdUFSUFwL4qp/ttKW+34OT6kK6Kr3/J4wkz8XtAna K9Bhjowp+Eaf0TXc1fcsmDtmoJHi6kW4f4omDl+hlpLgPEd8W4UTEhvGsJQzDuT6 0PSL9H8VB73/tq/puHcCAokyF/pgbqt0/eJq/aQkINcsT00QeHkODxUYyeVRS5FT eE5h94aEaMhtwwmyOG/F5j0p2ZvD7SIHehMlRYECwPxB2E4x2DbUf+YgCzzJ/Bqy 7Db/79+O2CPNh/AHei0HorEVYo3NNw4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:59 2025 by rpki-client