$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: PZX5KCOBplvb+Les9bZHAYS44ANMV+Lpfl68jkRXtIQ= Subject key identifier: F0:55:66:52:08:81:CA:41:3B:FD:F6:9B:03:A3:44:08:15:D8:11:3D Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: A5 Signing time: Sun 19 Oct 2025 09:26:15 +0000 Manifest this update: Sun 19 Oct 2025 09:26:14 +0000 Manifest next update: Sun 26 Oct 2025 09:26:14 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: 5yu7ZoCYxUmcgXo1Tb7MC0gFSAz8SjbUWS0+pvojpeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Oct 19 09:26:14 2025 GMT Not After : Oct 26 09:26:14 2025 GMT Subject: CN=68f4aeb6-f905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:5e:94:32:a1:f5:ef:dc:ba:c5:1c:b9:ad: 90:8d:9c:3d:97:cd:e4:e1:4c:c4:89:ec:79:4f:73: 02:26:7a:23:38:9e:ac:20:79:76:fe:55:c7:15:ac: 5a:57:5d:d8:0f:90:de:db:96:e9:40:4a:43:4c:c1: f0:d3:a9:4f:12:8d:a7:07:91:dc:6b:41:ae:13:a3: fc:c4:12:88:50:84:71:bb:1d:58:2e:66:f5:55:1f: 6f:c3:75:8a:ca:49:c4:3d:a2:31:2e:ff:e8:22:3f: 1d:d0:98:2d:65:45:8f:7e:2b:44:40:a7:ea:75:49: 90:fe:89:48:e4:24:dd:93:f0:62:2b:e5:0e:cf:af: 1c:fd:3b:01:ee:c3:66:b8:fd:95:24:62:ce:6e:4f: b0:aa:fc:a9:60:f3:4a:2f:eb:c0:5a:57:98:03:f1: 8d:be:ba:ee:0d:05:4f:ae:15:7a:5a:1d:f8:f0:37: 97:87:d2:b5:21:19:f5:15:ed:82:a4:30:b9:7d:48: 8e:71:c6:3e:e4:95:a8:45:c5:2a:5f:ff:1d:74:7e: 49:ab:7a:22:d4:20:2f:b8:d3:0c:77:4f:0b:07:6d: e6:a7:fa:1a:ef:6e:00:89:1a:78:d2:16:f5:ff:18: 8f:91:7e:dc:51:84:95:c3:b0:57:6b:10:ee:98:1b: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:55:66:52:08:81:CA:41:3B:FD:F6:9B:03:A3:44:08:15:D8:11:3D X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5c:65:0f:22:e4:f0:84:59:69:6e:c6:f5:d6:f3:96:1a:48: 32:ed:9a:30:e4:49:c6:6f:bb:f7:99:87:2c:70:3b:65:9e:34: 37:8f:3c:79:10:23:47:a4:60:1e:ff:b0:0c:7b:e4:b4:a0:9b: 54:50:c5:40:14:69:3a:84:b5:12:18:84:ee:79:98:c0:d6:55: b4:0f:51:e0:66:88:51:14:41:f5:c3:12:bc:b6:f6:35:5a:cd: 27:a9:85:95:1a:a1:ec:79:35:b9:8c:dc:4e:50:74:d4:87:bf: db:a8:72:45:13:94:19:57:4f:b1:fd:cf:40:04:3a:e1:45:d0: dd:26:20:ae:44:4f:b7:74:f8:4b:1d:fe:80:8b:09:00:98:8b: 79:c1:a3:e2:83:51:3d:c8:e9:7b:f7:8a:f4:a7:cb:7f:52:91: fa:5e:1f:83:d8:1b:7e:67:4e:e1:c8:22:5f:9a:a2:4f:39:c8: 3b:1b:fb:25:01:2d:a2:68:8d:34:c4:e9:ec:05:f7:48:1f:eb: 51:b4:3a:75:06:26:f5:0f:95:3f:e7:a7:dd:c2:79:37:d8:02: ae:2a:8c:48:be:2a:ed:c8:c9:e1:5c:21:49:34:e6:ff:7d:63: 8a:d2:03:81:55:6a:c1:8f:ac:43:a9:c2:2a:ff:12:df:14:73: a2:6f:1b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUxMDE5MDkyNjE0WhcNMjUxMDI2MDkyNjE0WjAYMRYwFAYD VQQDEw02OGY0YWViNi1mOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrxelDKh9e/cusUcua2QjZw9l83k4UzEiex5T3MCJnojOJ6sIHl2/lXHFaxa V13YD5De25bpQEpDTMHw06lPEo2nB5Hca0GuE6P8xBKIUIRxux1YLmb1VR9vw3WK yknEPaIxLv/oIj8d0JgtZUWPfitEQKfqdUmQ/olI5CTdk/BiK+UOz68c/TsB7sNm uP2VJGLObk+wqvypYPNKL+vAWleYA/GNvrruDQVPrhV6Wh348DeXh9K1IRn1Fe2C pDC5fUiOccY+5JWoRcUqX/8ddH5Jq3oi1CAvuNMMd08LB23mp/oa724AiRp40hb1 /xiPkX7cUYSVw7BXaxDumBsIrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBVZlII gcpBO/32mwOjRAgV2BE9MB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARXGUPIuTwhFlpbsb11vOWGkgy7Zow5EnGb7v3mYcscDtlnjQ3jzx5 ECNHpGAe/7AMe+S0oJtUUMVAFGk6hLUSGITueZjA1lW0D1HgZohRFEH1wxK8tvY1 Ws0nqYWVGqHseTW5jNxOUHTUh7/bqHJFE5QZV0+x/c9ABDrhRdDdJiCuRE+3dPhL Hf6AiwkAmIt5waPig1E9yOl794r0p8t/UpH6Xh+D2Bt+Z07hyCJfmqJPOcg7G/sl AS2iaI00xOnsBfdIH+tRtDp1Bib1D5U/56fdwnk32AKuKoxIvirtyMnhXCFJNOb/ fWOK0gOBVWrBj6xDqcIq/xLfFHOibxsx -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:40 2025 by rpki-client