$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: Yw5b1Myt7B47EwGrlbvCeolNeidrjIqDt9vYVTBsq5w= Subject key identifier: D6:8D:DC:CA:C3:4C:4C:1A:14:9E:65:8C:CE:34:5B:78:2B:E5:A6:E6 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 07D8 Signing time: Sat 18 Oct 2025 22:28:26 +0000 Manifest this update: Sat 18 Oct 2025 22:28:25 +0000 Manifest next update: Sat 25 Oct 2025 22:28:25 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: WPzrtQq4LmuHpesEinlwHnD1EUTHgWVwJJ6BJPpKFfE=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Oct 18 22:28:25 2025 GMT Not After : Oct 25 22:28:25 2025 GMT Subject: CN=68f4148a-e9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:3c:10:bd:e5:3c:d0:a3:78:01:fa:bb:73: 3a:fc:61:e4:1c:71:72:54:7b:52:b1:2d:a9:a9:a4: 7b:e5:f4:6b:1b:0c:91:d6:b6:f7:6b:fb:da:dd:47: 37:f8:c8:6f:af:da:9d:2d:0d:94:fb:28:34:2d:86: e9:e8:80:35:67:38:9d:a9:28:d7:06:c9:82:2d:6d: cc:6b:04:47:57:ef:ac:a4:b1:09:57:5e:43:e7:a4: a6:3b:12:57:17:22:b6:dc:39:37:f6:da:a5:51:36: 1c:1f:3b:e7:9b:ed:8d:98:b2:3c:07:e4:62:26:f5: a7:5d:0f:4e:36:7d:62:02:ab:34:a0:31:84:93:eb: aa:e9:30:3f:2f:79:16:45:ac:68:d8:78:c9:4c:ec: 60:3d:b7:46:a6:b0:f3:26:60:73:31:80:11:d6:10: 3b:eb:5c:6d:03:4d:eb:61:b6:3b:09:90:34:8a:26: 62:84:d7:2b:ce:a5:b2:f5:1e:f6:76:d6:cc:68:24: 7e:2a:ae:bf:e8:53:2c:5b:87:b0:b7:db:0e:d6:ca: 11:a6:6c:05:a8:52:b9:de:22:a7:f8:9e:78:b6:39: 2d:87:85:21:48:3e:41:70:ec:ad:28:65:99:a6:57: 03:7e:29:d0:b1:ff:7a:69:c3:af:cf:f3:b1:32:28: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8D:DC:CA:C3:4C:4C:1A:14:9E:65:8C:CE:34:5B:78:2B:E5:A6:E6 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c8:f5:91:48:39:42:bf:27:da:3f:ae:e9:e1:03:1d:e0:a6: 54:bb:a9:22:af:55:20:fa:ca:ad:03:4f:32:b9:ff:3f:1c:f6: c4:d4:a8:0b:55:57:95:95:de:ac:2e:34:ab:a8:76:5d:00:f0: 21:9e:b5:b1:a3:64:43:d7:e1:f0:91:3c:40:8a:ba:6e:91:c1: b1:7a:a2:2b:6a:c3:87:1b:0e:4f:bb:8a:8f:07:82:60:7c:0a: 46:0e:87:14:ac:70:7e:4c:22:69:63:14:79:17:a6:66:8f:e9: d7:d3:03:c3:f1:80:b4:0c:45:b3:bc:a1:b6:4c:05:67:51:86: d5:b3:63:65:93:dc:40:07:2c:15:42:c7:90:39:16:db:e5:5c: 47:66:76:74:2b:e5:5b:2c:27:7a:1c:f6:24:6e:43:3d:24:ea: a2:5b:8a:bd:8e:e2:eb:b0:97:73:c2:a9:df:45:32:1b:e3:f7: fb:af:a4:c5:e6:4e:1f:34:1c:be:51:2b:d5:6a:bb:c4:f8:0b: 1a:3a:dc:02:05:39:c0:a2:0f:6c:0b:f5:c2:55:e9:b1:79:b5: 1c:76:89:25:89:3b:5a:dd:56:76:12:d2:68:2f:d0:aa:68:5b: 2c:ed:95:e0:06:1d:3c:ac:72:99:7c:a1:5c:30:eb:e7:67:c8: a3:10:2d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUxMDE4MjIyODI1WhcNMjUxMDI1MjIyODI1WjAYMRYwFAYD VQQDEw02OGY0MTQ4YS1lOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/48EL3lPNCjeAH6u3M6/GHkHHFyVHtSsS2pqaR75fRrGwyR1rb3a/va3Uc3 +Mhvr9qdLQ2U+yg0LYbp6IA1ZzidqSjXBsmCLW3MawRHV++spLEJV15D56SmOxJX FyK23Dk39tqlUTYcHzvnm+2NmLI8B+RiJvWnXQ9ONn1iAqs0oDGEk+uq6TA/L3kW Raxo2HjJTOxgPbdGprDzJmBzMYAR1hA761xtA03rYbY7CZA0iiZihNcrzqWy9R72 dtbMaCR+Kq6/6FMsW4ewt9sO1soRpmwFqFK53iKn+J54tjkth4UhSD5BcOytKGWZ plcDfinQsf96acOvz/OxMiiYWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaN3MrD TEwaFJ5ljM40W3gr5abmMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxyPWRSDlCvyfaP67p4QMd4KZUu6kir1Ug+sqtA08yuf8/HPbE1KgL VVeVld6sLjSrqHZdAPAhnrWxo2RD1+HwkTxAirpukcGxeqIrasOHGw5Pu4qPB4Jg fApGDocUrHB+TCJpYxR5F6Zmj+nX0wPD8YC0DEWzvKG2TAVnUYbVs2Nlk9xABywV QseQORbb5VxHZnZ0K+VbLCd6HPYkbkM9JOqiW4q9juLrsJdzwqnfRTIb4/f7r6TF 5k4fNBy+USvVarvE+AsaOtwCBTnAog9sC/XCVemxebUcdokliTta3VZ2EtJoL9Cq aFss7ZXgBh08rHKZfKFcMOvnZ8ijEC1b -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:32 2025 by rpki-client