$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: XJDCszN8kcmDr9d5vIQCaLwk40UGoq0fGfszRRPlq+E= Subject key identifier: 93:B0:CA:38:05:DB:22:33:26:83:16:83:C3:BF:48:76:EF:ED:5C:05 Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 34DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 34D2 Signing time: Sat 18 Oct 2025 15:18:25 +0000 Manifest this update: Sat 18 Oct 2025 15:18:24 +0000 Manifest next update: Sat 25 Oct 2025 15:18:24 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: 4gDnERPdp7/qxPzwZIs1pI0xdQS+yQVdAOpEIBWMJxY=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13533 (0x34dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Oct 18 15:18:24 2025 GMT Not After : Oct 25 15:18:24 2025 GMT Subject: CN=68f3afc1-eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:44:e8:45:c4:87:b1:9d:02:cf:a7:4a:03: 78:49:9a:dd:8b:96:3c:81:ac:9c:40:a6:89:12:ab: 5a:0e:97:9c:da:c0:c5:e2:66:b8:47:36:44:fb:68: 95:61:5a:70:91:e6:65:0e:1d:ec:99:59:bc:46:95: 06:80:71:b7:d1:6f:fa:cc:80:1e:ff:55:c5:46:9b: ee:f3:98:4a:9f:5b:7b:07:be:8f:96:ce:60:14:47: e2:fc:59:98:0e:34:06:c6:da:6a:ea:2d:ff:ed:50: 08:99:96:93:df:18:47:00:15:eb:35:73:90:99:50: e2:5b:10:71:7a:75:fe:d9:d4:5c:6d:63:6a:8d:f0: c2:9f:86:c5:ec:28:38:ba:11:97:16:63:11:a0:d2: ee:3b:d4:eb:48:6b:2c:21:92:49:cd:aa:70:82:75: 4f:d3:ff:74:17:e2:85:b9:e7:54:6a:92:bb:9f:f8: 1e:fd:22:0f:87:1c:82:94:84:d1:d8:00:9b:dc:4d: 01:06:57:4d:82:a5:a4:9d:68:89:2e:fe:f6:90:e1: 85:5c:c6:40:45:8f:f8:9f:37:4f:d3:f6:a7:04:29: 61:d2:88:84:a6:35:70:74:e1:8f:fb:da:4a:88:5d: 98:1a:67:fa:da:68:6a:c1:04:45:35:fb:11:e2:5a: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:CA:38:05:DB:22:33:26:83:16:83:C3:BF:48:76:EF:ED:5C:05 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:49:a7:f5:ed:d4:4d:f6:e7:5f:14:1d:e3:9f:32:ca:6d:b5: 85:5d:57:3f:c2:91:05:29:4e:68:0d:0a:03:0c:ff:46:48:69: e2:a5:f4:d9:da:f7:da:48:3e:95:4e:b4:2a:81:01:27:5f:4f: 93:0f:1d:15:40:f2:98:64:57:31:aa:27:16:ba:11:10:fd:27: 96:8d:bc:81:27:aa:91:b2:ac:70:08:38:6e:88:f1:b6:a1:d7: d4:76:99:37:99:cd:3d:b5:dd:a2:ba:55:3d:2f:cf:21:1a:b5: 3d:2b:51:ba:c1:5a:25:c8:94:fe:90:9c:78:fb:5e:d9:00:80: 33:2f:0e:fb:d9:5d:52:76:9f:ee:69:64:a7:a2:02:d9:24:e3: 82:24:27:cd:03:66:3c:e7:2f:0a:33:e5:4d:b8:61:ea:5b:79: fb:dd:02:ad:71:d2:c4:c2:a9:43:48:82:7a:13:40:a4:60:5d: f3:38:1b:2e:c7:be:79:98:03:c9:22:17:d6:7f:be:cc:3c:03: 0a:01:f5:d7:10:8d:16:f4:73:82:9e:2d:7f:92:a4:c6:f3:15: 64:58:cb:8b:60:b7:d6:22:13:c9:ed:27:e8:cc:d0:8e:16:af: e3:6e:10:aa:95:d5:4f:85:ef:d0:33:79:64:62:3c:d1:a2:cd: f7:94:84:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUxMDE4MTUxODI0WhcNMjUxMDI1MTUxODI0WjAYMRYwFAYD VQQDEw02OGYzYWZjMS1lYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ9E6EXEh7GdAs+nSgN4SZrdi5Y8gaycQKaJEqtaDpec2sDF4ma4RzZE+2iV YVpwkeZlDh3smVm8RpUGgHG30W/6zIAe/1XFRpvu85hKn1t7B76Pls5gFEfi/FmY DjQGxtpq6i3/7VAImZaT3xhHABXrNXOQmVDiWxBxenX+2dRcbWNqjfDCn4bF7Cg4 uhGXFmMRoNLuO9TrSGssIZJJzapwgnVP0/90F+KFuedUapK7n/ge/SIPhxyClITR 2ACb3E0BBldNgqWknWiJLv72kOGFXMZARY/4nzdP0/anBClh0oiEpjVwdOGP+9pK iF2YGmf62mhqwQRFNfsR4lrR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOwyjgF 2yIzJoMWg8O/SHbv7VwFMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXSaf17dRN9udfFB3jnzLKbbWFXVc/wpEFKU5oDQoDDP9GSGnipfTZ 2vfaSD6VTrQqgQEnX0+TDx0VQPKYZFcxqicWuhEQ/SeWjbyBJ6qRsqxwCDhuiPG2 odfUdpk3mc09td2iulU9L88hGrU9K1G6wVolyJT+kJx4+17ZAIAzLw772V1Sdp/u aWSnogLZJOOCJCfNA2Y85y8KM+VNuGHqW3n73QKtcdLEwqlDSIJ6E0CkYF3zOBsu x755mAPJIhfWf77MPAMKAfXXEI0W9HOCni1/kqTG8xVkWMuLYLfWIhPJ7SfozNCO Fq/jbhCqldVPhe/QM3lkYjzRos33lIRP -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:31 2025 by rpki-client