$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json) Hash identifier: UGaYMvRSjQlE4+HphFzZ34NRh77YoDc9vDVyyGU/kN8= Subject key identifier: CD:B0:3A:29:4B:35:42:EC:69:21:77:B8:AE:81:95:41:67:01:02:4D Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 055C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft Manifest number: 054F Signing time: Sun 19 Oct 2025 01:12:18 +0000 Manifest this update: Sun 19 Oct 2025 01:12:17 +0000 Manifest next update: Sun 26 Oct 2025 01:12:17 +0000 Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: UC4C+lqNwNZWw4y5qNeZ0iIlL4H0Smx1746omVIJBHk=) 2: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: knZ5ekXVEf4sYcirbL+CCT4b4jXdUdcrAEg+dwXTAho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1372 (0x55c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: Oct 19 01:12:17 2025 GMT Not After : Oct 26 01:12:17 2025 GMT Subject: CN=68f43af1-9fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:70:fa:ec:38:e8:31:3b:91:67:ca:71:0e: e8:be:58:e2:e0:63:18:34:19:9b:30:d0:79:1b:17: a9:4a:71:a1:25:93:14:b5:15:54:88:eb:7c:fb:f1: b4:d6:53:02:67:06:1d:0e:a8:6c:d7:92:00:a7:a0: 7c:57:09:76:bd:8a:0d:77:78:14:49:34:d6:2c:af: 09:7a:0b:5f:2d:57:c8:c1:0e:ba:6f:d9:d1:04:f6: b7:0b:f8:d2:65:fd:c7:07:07:8c:dc:c0:d7:64:af: 55:64:f7:4e:dd:75:0b:ec:07:66:98:d7:1c:28:67: 60:77:c7:7c:22:32:4b:81:53:bf:3c:f3:0c:52:a6: 75:41:d0:8b:44:75:b5:ed:cd:de:09:2a:c0:8f:eb: 49:2e:60:8d:1a:81:26:e2:6b:8f:4b:00:36:63:96: 51:89:23:a7:88:c7:ef:11:f7:12:2f:35:4f:16:4d: 75:4d:f8:39:7a:1a:50:78:03:a2:34:b6:63:ef:aa: 2e:e9:10:97:43:7a:53:c2:5f:e9:9f:90:bf:54:b8: 4a:85:60:6c:38:3a:59:95:fb:a4:aa:68:58:dc:c4: 40:19:a3:35:95:70:57:04:5a:37:c5:13:16:64:14: 46:04:d1:c3:e5:7f:18:37:01:61:a8:49:d0:05:e9: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B0:3A:29:4B:35:42:EC:69:21:77:B8:AE:81:95:41:67:01:02:4D X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e1:99:a8:69:0a:19:a3:fe:82:35:05:26:e5:5b:1d:df:08: 70:0a:88:fc:f9:65:f2:bd:39:8d:e6:a1:8f:51:de:93:79:97: 6c:56:b2:79:18:0a:e7:bb:8e:d9:63:e8:46:67:38:01:9c:f2: d5:71:9a:ac:a8:54:52:cb:a0:ce:5d:84:35:19:fc:65:db:02: 7d:f9:e2:50:c3:0d:3b:0c:39:3d:4b:36:42:91:bd:2f:b2:7e: 77:99:6d:fa:93:f7:fb:03:71:06:c0:f3:4d:d8:f8:8f:e7:60: 46:e9:2f:76:c4:21:2c:42:48:82:28:a3:19:80:6d:c2:a6:65: 91:a0:f4:2d:29:5a:f2:2b:e3:92:15:d7:1c:e6:2f:c2:49:e6: 32:a0:6a:e9:c6:b3:82:37:ed:82:8c:77:35:b0:70:33:8b:e1: 97:39:8f:6c:fb:97:73:cf:20:13:66:19:f8:24:7d:15:70:cf: ef:30:1d:31:e7:fe:1b:10:2f:e8:dd:f2:05:9a:7b:9c:ce:6d: cd:7f:5d:05:77:90:22:cd:c2:10:b5:3f:28:32:27:f7:11:0a: c9:9a:7f:3b:89:d8:2d:b6:31:b7:d4:57:15:91:1d:80:47:a3: 6a:a9:a7:d0:6a:a0:23:7b:e9:6b:5a:d7:7e:73:19:88:79:8a: a2:3b:ab:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjUxMDE5MDExMjE3WhcNMjUxMDI2MDExMjE3WjAYMRYwFAYD VQQDEw02OGY0M2FmMS05ZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWBw+uw46DE7kWfKcQ7ovlji4GMYNBmbMNB5GxepSnGhJZMUtRVUiOt8+/G0 1lMCZwYdDqhs15IAp6B8Vwl2vYoNd3gUSTTWLK8JegtfLVfIwQ66b9nRBPa3C/jS Zf3HBweM3MDXZK9VZPdO3XUL7AdmmNccKGdgd8d8IjJLgVO/PPMMUqZ1QdCLRHW1 7c3eCSrAj+tJLmCNGoEm4muPSwA2Y5ZRiSOniMfvEfcSLzVPFk11Tfg5ehpQeAOi NLZj76ou6RCXQ3pTwl/pn5C/VLhKhWBsODpZlfukqmhY3MRAGaM1lXBXBFo3xRMW ZBRGBNHD5X8YNwFhqEnQBemQlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2wOilL NULsaSF3uK6BlUFnAQJNMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT4ZmoaQoZo/6CNQUm5Vsd3whwCoj8+WXyvTmN5qGPUd6TeZdsVrJ5 GArnu47ZY+hGZzgBnPLVcZqsqFRSy6DOXYQ1Gfxl2wJ9+eJQww07DDk9SzZCkb0v sn53mW36k/f7A3EGwPNN2PiP52BG6S92xCEsQkiCKKMZgG3CpmWRoPQtKVryK+OS Fdcc5i/CSeYyoGrpxrOCN+2CjHc1sHAzi+GXOY9s+5dzzyATZhn4JH0VcM/vMB0x 5/4bEC/o3fIFmnuczm3Nf10Fd5AizcIQtT8oMif3EQrJmn87idgttjG31FcVkR2A R6NqqafQaqAje+lrWtd+cxmIeYqiO6tH -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:47 2025 by rpki-client