$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: E5qB0i0PaGLTNmfyeJUqkfXNMrYjCkjHxKUj/xpoySY= Subject key identifier: 56:39:B2:DB:4A:8B:E8:1B:45:C9:E9:7F:AD:36:BF:EF:99:7E:0C:84 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 01D2 Signing time: Sun 19 Oct 2025 05:15:09 +0000 Manifest this update: Sun 19 Oct 2025 05:15:09 +0000 Manifest next update: Sun 26 Oct 2025 05:15:09 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: RGR4RSfbC2MvZleGEBumkGggm6cDLrDq4Ef++iQtgr8=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Oct 19 05:15:09 2025 GMT Not After : Oct 26 05:15:09 2025 GMT Subject: CN=68f473dd-98df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:3e:5e:a9:cf:7b:39:8c:42:02:88:c3:48: 73:44:44:1f:43:73:f8:87:5a:d3:bc:6b:74:e2:93: 53:4e:7e:22:05:b6:b6:63:81:04:a6:d0:67:d2:27: 1b:32:21:98:23:f6:81:59:06:61:b4:80:27:1f:36: a0:77:f4:71:21:09:bf:f2:1d:e3:50:12:af:79:ab: bf:cc:df:23:95:f4:62:4e:70:d1:0b:e0:d9:b9:d6: b7:c8:e2:f5:6f:0d:20:ca:3a:29:04:78:3b:49:37: d9:33:64:a2:88:16:51:e9:81:f0:0a:af:d4:b2:e5: 4f:19:93:b4:f6:74:c9:e7:d6:de:f6:23:de:03:a2: 0f:fe:d1:2e:92:46:df:91:b1:bb:c5:9e:9c:28:83: c6:29:9a:9e:ee:d8:e1:f6:b3:ac:d8:46:57:f3:7c: 03:19:12:00:2e:85:14:08:04:1f:c9:5d:33:e8:91: a7:0b:89:a4:ca:c1:a8:6c:e5:4e:c7:92:9f:c8:46: 32:ab:d6:cd:92:b5:3d:b1:54:f2:b9:f5:2d:67:6d: 50:92:5e:16:16:05:8b:54:aa:31:85:ba:94:9d:e2: 0f:36:c2:f4:35:de:f4:3b:ef:55:66:f8:a6:d8:4a: 18:3c:9d:eb:5a:40:c1:5d:8d:31:b8:28:20:79:e6: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:39:B2:DB:4A:8B:E8:1B:45:C9:E9:7F:AD:36:BF:EF:99:7E:0C:84 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:55:d7:bd:69:d7:7f:75:52:c4:35:cc:f9:87:02:1f:0e:81: dc:26:28:59:6c:05:65:6d:af:1a:8a:fe:56:2f:fd:27:5c:d5: e8:17:b4:46:21:15:45:27:27:f6:65:fa:bd:37:ab:e5:4f:56: df:5e:bf:38:f5:05:f0:c7:90:fd:e2:97:89:b3:22:73:ee:8d: 5e:40:00:eb:91:d6:3e:39:2c:5c:df:bd:32:33:2b:56:0f:27: 17:1f:a3:16:00:7c:a0:8a:a4:54:c7:36:43:d8:f5:17:bb:79: 44:e5:a6:a0:22:37:18:c5:94:75:db:4c:36:74:d9:a8:b6:d1: a6:25:24:de:95:55:76:bc:15:8d:4c:5f:b3:3e:a3:b1:1f:61: c3:ff:65:38:92:f6:2f:b4:4f:78:42:db:be:78:da:76:94:7a: c5:3c:b4:ec:f7:7a:19:58:c1:62:07:f7:be:fb:04:7f:77:20: c2:37:3a:76:dc:55:4c:86:02:ef:fa:c3:a4:7f:f5:39:ef:ac: 1c:2e:32:09:3b:f8:87:14:8e:ba:43:4a:e7:02:0e:ef:ec:86: 95:f2:d3:8f:8e:b1:84:dd:ef:38:6e:bc:b1:2f:20:64:88:e5: f9:f6:8b:a2:de:97:5c:6f:a4:55:a2:6c:d5:6d:f5:ae:f9:6b: 44:4c:ae:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUxMDE5MDUxNTA5WhcNMjUxMDI2MDUxNTA5WjAYMRYwFAYD VQQDEw02OGY0NzNkZC05OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMA+XqnPezmMQgKIw0hzREQfQ3P4h1rTvGt04pNTTn4iBba2Y4EEptBn0icb MiGYI/aBWQZhtIAnHzagd/RxIQm/8h3jUBKveau/zN8jlfRiTnDRC+DZuda3yOL1 bw0gyjopBHg7STfZM2SiiBZR6YHwCq/UsuVPGZO09nTJ59be9iPeA6IP/tEukkbf kbG7xZ6cKIPGKZqe7tjh9rOs2EZX83wDGRIALoUUCAQfyV0z6JGnC4mkysGobOVO x5KfyEYyq9bNkrU9sVTyufUtZ21Qkl4WFgWLVKoxhbqUneIPNsL0Nd70O+9VZvim 2EoYPJ3rWkDBXY0xuCggeeag4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY5sttK i+gbRcnpf602v++ZfgyEMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSVde9add/dVLENcz5hwIfDoHcJihZbAVlba8aiv5WL/0nXNXoF7RG IRVFJyf2Zfq9N6vlT1bfXr849QXwx5D94peJsyJz7o1eQADrkdY+OSxc370yMytW DycXH6MWAHygiqRUxzZD2PUXu3lE5aagIjcYxZR120w2dNmottGmJSTelVV2vBWN TF+zPqOxH2HD/2U4kvYvtE94Qtu+eNp2lHrFPLTs93oZWMFiB/e++wR/dyDCNzp2 3FVMhgLv+sOkf/U576wcLjIJO/iHFI66Q0rnAg7v7IaV8tOPjrGE3e84bryxLyBk iOX59oui3pdcb6RVomzVbfWu+WtETK7w -----END CERTIFICATE-----Generated at Sun Oct 19 19:07:07 2025 by rpki-client