$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: PL5K1E4tf82B2WMiWirW0qumMspUUANDUdXspVDMG38= Subject key identifier: A2:54:47:D1:E1:F6:4D:85:08:6A:5C:C0:C3:A2:0A:62:8A:5D:56:A1 Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 172E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 1724 Signing time: Mon 20 Oct 2025 16:59:07 +0000 Manifest this update: Mon 20 Oct 2025 16:59:07 +0000 Manifest next update: Mon 27 Oct 2025 16:59:07 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: pxNKMhUFfIvPCqXghJ4lYC1+d2Wo0jVNa7qMEAaTcZc=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5934 (0x172e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Oct 20 16:59:07 2025 GMT Not After : Oct 27 16:59:07 2025 GMT Subject: CN=68f66a5b-6d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:93:b3:5e:71:f7:78:b8:2e:a2:e6:1b:54: f9:0f:6d:56:9a:24:2b:05:9e:15:ee:32:ea:ae:29: 67:d5:57:2f:ba:cf:30:1c:50:51:f0:8a:10:94:9d: 88:dd:b5:cb:24:bd:cd:61:d7:42:3f:c9:90:71:94: 4a:4d:94:7c:e1:31:74:68:45:32:94:81:1f:7e:05: 38:0d:a8:08:2b:38:ab:2a:05:05:9b:22:52:5e:2a: 47:41:59:2f:0d:72:5d:c4:b8:40:2d:dd:f3:42:f5: 46:d0:c1:a3:6b:68:d3:54:6a:65:d0:3f:77:a4:1d: 05:72:a2:10:83:ab:d0:8c:85:9d:4c:cd:95:66:a4: 8e:e2:73:25:d6:c0:5e:d1:4f:75:c3:3d:ff:0e:70: d5:8d:7f:88:b1:fa:22:d8:45:e3:ab:e5:a2:6b:20: 4d:11:6a:70:61:c3:6b:b1:af:90:12:8b:ea:cc:65: fb:6f:b5:68:fb:8b:15:cd:4e:8e:52:d3:a9:93:e7: a6:3c:65:e1:f3:67:19:0c:6f:5c:73:d4:0f:5c:15: eb:7b:50:95:6b:93:67:34:dd:b3:98:4a:e8:ab:67: 83:b3:40:7d:41:a8:b5:a7:c5:80:a7:0f:a1:54:0c: 95:47:3a:a9:ea:0e:c0:9b:ec:86:a3:a5:5c:bb:ed: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:47:D1:E1:F6:4D:85:08:6A:5C:C0:C3:A2:0A:62:8A:5D:56:A1 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cc:ed:79:f7:08:0f:ef:c3:44:3e:a2:db:90:a2:d4:7e:67: 25:99:2d:55:4f:e2:92:9c:64:8b:37:22:07:83:89:a9:49:c8: 80:1e:c8:f4:0f:fa:c6:6d:6f:5d:cc:08:1e:df:1c:11:ee:41: e3:73:b6:9d:b5:4b:25:b3:5a:34:b4:91:8d:d2:9b:9a:fa:15: bb:4a:55:71:dc:a9:81:e1:0c:df:76:67:1e:05:0b:d5:71:8a: 6d:13:fe:77:43:f4:94:66:5e:57:c0:94:26:6b:34:7d:43:09: 4e:95:74:7a:9f:f4:ae:24:90:49:81:46:3d:15:35:8e:c9:d6: 90:d4:bb:6d:ee:c2:a8:dd:af:71:c2:a9:5a:d0:75:cb:d5:26: 86:50:c0:88:44:36:35:54:d1:40:ed:f1:26:ed:20:7b:34:f9: d5:6e:aa:08:88:5d:9a:a1:b7:84:a5:a3:7d:2f:b5:cc:04:41: 5d:9d:6a:f9:ba:12:17:04:62:12:73:dc:0a:20:1e:a8:91:95: b0:f5:75:cc:84:ef:84:6e:01:1b:20:f4:55:d5:35:7d:67:c4: 97:df:81:27:e3:96:51:2d:4d:c9:26:4d:c0:d3:61:55:57:32: 5d:6d:a4:83:e2:f1:6c:73:d1:bf:74:99:ea:7c:63:f2:ad:9b: f7:7a:1d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUxMDIwMTY1OTA3WhcNMjUxMDI3MTY1OTA3WjAYMRYwFAYD VQQDEw02OGY2NmE1Yi02ZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jqTs15x93i4LqLmG1T5D21WmiQrBZ4V7jLqriln1Vcvus8wHFBR8IoQlJ2I 3bXLJL3NYddCP8mQcZRKTZR84TF0aEUylIEffgU4DagIKzirKgUFmyJSXipHQVkv DXJdxLhALd3zQvVG0MGja2jTVGpl0D93pB0FcqIQg6vQjIWdTM2VZqSO4nMl1sBe 0U91wz3/DnDVjX+Isfoi2EXjq+WiayBNEWpwYcNrsa+QEovqzGX7b7Vo+4sVzU6O UtOpk+emPGXh82cZDG9cc9QPXBXre1CVa5NnNN2zmEroq2eDs0B9Qai1p8WApw+h VAyVRzqp6g7Am+yGo6Vcu+1HbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJUR9Hh 9k2FCGpcwMOiCmKKXVahMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMzO159wgP78NEPqLbkKLUfmclmS1VT+KSnGSLNyIHg4mpSciAHsj0 D/rGbW9dzAge3xwR7kHjc7adtUsls1o0tJGN0pua+hW7SlVx3KmB4QzfdmceBQvV cYptE/53Q/SUZl5XwJQmazR9QwlOlXR6n/SuJJBJgUY9FTWOydaQ1Ltt7sKo3a9x wqla0HXL1SaGUMCIRDY1VNFA7fEm7SB7NPnVbqoIiF2aobeEpaN9L7XMBEFdnWr5 uhIXBGISc9wKIB6okZWw9XXMhO+EbgEbIPRV1TV9Z8SX34En45ZRLU3JJk3A02FV VzJdbaSD4vFsc9G/dJnqfGPyrZv3eh0i -----END CERTIFICATE-----Generated at Mon Oct 20 19:14:18 2025 by rpki-client