$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json) Hash identifier: dP2yLMtAjpForGlsGZW99rPNvOJFBdESFo7FjbOFA4g= Subject key identifier: E2:59:B2:C9:38:28:25:B3:83:E9:E7:43:68:D8:35:14:92:6F:00:4E Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft Manifest number: 0F Signing time: Sun 19 Oct 2025 11:32:29 +0000 Manifest this update: Sun 19 Oct 2025 11:32:29 +0000 Manifest next update: Sun 26 Oct 2025 11:32:29 +0000 Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: g5BsuwpUx7XuDh7Yh4WZ30xoatRh08KUKbJsOtXac7U=) 2: 2037C39497AD11F0A7426829C4F9AE02.roa (hash: EeQroM7h0HiM3TepBIA0OkKXFhjGOzZPkF8XVUpit7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Validity Not Before: Oct 19 11:32:29 2025 GMT Not After : Oct 26 11:32:29 2025 GMT Subject: CN=68f4cc4d-8606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:1d:3a:bc:5b:23:bb:58:a4:cc:1e:66:85: 8f:33:25:6f:bd:3d:3b:15:ec:96:d8:37:b2:4b:eb: 69:59:c7:2d:f6:ef:cc:9d:89:09:46:e8:bd:25:22: 6c:ae:e9:ee:a7:16:97:2a:34:cb:78:99:42:2e:90: 53:8c:41:8f:2a:12:e3:8d:21:70:ed:09:9c:f5:2c: ab:88:d1:ef:84:97:b0:9d:ab:3e:2a:9a:ec:55:1e: 38:53:12:6f:01:ea:68:96:6a:0b:a3:97:65:76:3b: 28:9f:50:b8:57:82:1e:89:d1:2e:d8:e3:d1:88:01: 5e:f7:b4:ac:f8:90:39:bf:cc:59:8e:37:41:e7:12: 70:af:ef:49:2f:f4:09:de:4a:86:56:74:ca:f1:ab: 12:c8:fe:b5:66:91:01:59:29:9d:ba:7d:65:70:ec: 5c:3e:d2:92:65:33:32:6c:45:87:ca:f7:06:b6:1a: ce:af:c4:fd:15:3f:ab:36:98:8a:b8:2b:72:93:3d: 5f:29:24:de:fc:0e:49:1c:e6:b8:11:42:db:8e:ec: be:2a:77:fe:6b:4f:35:e8:11:da:f4:d9:90:73:2e: 31:29:f1:30:2f:5c:73:33:95:71:47:c6:01:07:d8: 9d:e5:ff:54:8d:5c:cf:5f:54:41:e9:72:2c:99:9b: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:59:B2:C9:38:28:25:B3:83:E9:E7:43:68:D8:35:14:92:6F:00:4E X509v3 Authority Key Identifier: keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6f:02:7b:ff:49:0b:2f:a0:9c:16:54:d3:00:0f:1c:6c:dd: 6f:48:eb:4e:a6:5c:73:45:89:48:13:1e:f3:00:6b:29:4e:88: 11:24:a3:fa:5b:4a:7e:c9:17:13:fe:16:f7:0c:1f:68:87:5d: 52:2b:e4:3a:6f:ee:fb:98:59:01:62:6b:b9:3d:69:12:69:05: df:d3:b4:d3:4a:fb:83:9b:0f:7c:35:a7:dd:9e:ae:7e:90:e6: a8:78:bd:5a:88:76:ea:48:7c:b0:cb:4f:a2:8b:ca:4f:85:47: c2:c8:8a:c6:37:85:7d:b4:ce:77:f5:e7:8b:7a:12:06:77:22: 0c:07:9a:4d:b5:e8:7a:cf:85:e9:b3:dd:97:69:d1:8b:dc:34: 53:39:ba:57:a1:a9:9b:a5:4c:9c:2d:eb:eb:4e:21:7c:29:94: 43:03:a9:f6:d4:72:ad:3a:f8:b7:ee:6f:4f:2d:1a:9f:66:6d: d6:5e:12:80:a9:aa:76:73:b2:18:c9:75:69:8b:51:9d:bb:0f: bf:58:2b:26:47:b9:9b:cf:08:ec:01:56:82:63:8c:46:74:e8: 10:f3:56:aa:86:53:56:83:a2:9c:fc:ab:51:c7:64:02:06:29: e0:f9:da:4d:21:4b:2b:ca:52:68:c3:7e:64:02:11:3d:51:f5: ac:21:cf:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUY3MjExMC8GA1UEBRMoOEE1MUVBNThDNDVDMkY0NDYwRTNBQjEzRUI2QTY3NDU0 NjVEQUY4QjAeFw0yNTEwMTkxMTMyMjlaFw0yNTEwMjYxMTMyMjlaMBgxFjAUBgNV BAMTDTY4ZjRjYzRkLTg2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxkB06vFsju1ikzB5mhY8zJW+9PTsV7JbYN7JL62lZxy3278ydiQlG6L0lImyu 6e6nFpcqNMt4mUIukFOMQY8qEuONIXDtCZz1LKuI0e+El7Cdqz4qmuxVHjhTEm8B 6miWagujl2V2OyifULhXgh6J0S7Y49GIAV73tKz4kDm/zFmON0HnEnCv70kv9Ane SoZWdMrxqxLI/rVmkQFZKZ26fWVw7Fw+0pJlMzJsRYfK9wa2Gs6vxP0VP6s2mIq4 K3KTPV8pJN78Dkkc5rgRQtuO7L4qd/5rTzXoEdr02ZBzLjEp8TAvXHMzlXFHxgEH 2J3l/1SNXM9fVEHpciyZm8DlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4lmyyTgo JbOD6edDaNg1FJJvAE4wHwYDVR0jBBgwFoAUilHqWMRcL0Rg46sT62pnRUZdr4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRjcyLzgwOUNDNEJBOTdB QzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWxIcVdNUmNMMFJnNDZzVDYycG5SVVpkcjRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RjcyLzgwOUNDNEJBOTdBQzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBS ZzQ2c1Q2MnBuUlVaZHI0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5vAnv/SQsvoJwWVNMADxxs3W9I606mXHNFiUgTHvMAaylOiBEko/pb Sn7JFxP+FvcMH2iHXVIr5Dpv7vuYWQFia7k9aRJpBd/TtNNK+4ObD3w1p92ern6Q 5qh4vVqIdupIfLDLT6KLyk+FR8LIisY3hX20znf154t6EgZ3IgwHmk216HrPhemz 3Zdp0YvcNFM5ulehqZulTJwt6+tOIXwplEMDqfbUcq06+Lfub08tGp9mbdZeEoCp qnZzshjJdWmLUZ27D79YKyZHuZvPCOwBVoJjjEZ06BDzVqqGU1aDopz8q1HHZAIG KeD52k0hSyvKUmjDfmQCET1R9awhzyA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:34:19 2025 by rpki-client