$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: 9WyAaQEoy9S8KXQadcAhwI4trUctLkD8khRNNPp7uj8= Subject key identifier: 57:1F:9B:5A:AF:5C:72:7D:D6:86:16:5E:DD:A3:92:80:61:35:53:8D Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 04D9 Signing time: Sun 19 Oct 2025 01:35:25 +0000 Manifest this update: Sun 19 Oct 2025 01:35:24 +0000 Manifest next update: Sun 26 Oct 2025 01:35:24 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: /eXhEL3tSpFXpe0V1sSqEqgxKoxSCjuB7WJUJiypg4c=) 2: F9343F063B0911EC82AE0828C4F9AE02.roa (hash: pIsS/aAz3NlTfiRznLCHJWwJfZnRVJbtBleuPSnoEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Oct 19 01:35:24 2025 GMT Not After : Oct 26 01:35:24 2025 GMT Subject: CN=68f4405d-c2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:84:69:83:05:37:f4:c0:ad:ab:6b:c1:4d: 3f:5e:e7:dc:d1:ec:ab:05:e6:9f:dc:79:4e:2a:d8: e1:29:fd:8f:1c:b4:db:52:50:5f:00:f7:1f:62:3c: 75:2a:2d:75:0e:9d:57:55:1a:19:8d:75:4f:17:46: 0d:ba:cf:08:09:e8:55:bb:a6:d4:81:ae:87:fb:0f: b3:83:3d:2e:6e:84:a7:19:7d:0e:b7:ba:f0:ba:9d: c7:1b:a6:a6:de:7f:1f:97:70:7b:2d:ea:93:dd:d0: 26:9f:35:aa:02:a2:0f:39:8b:56:1b:6c:d2:a9:c1: 61:36:f4:ae:f3:f5:69:9b:5a:04:4c:84:23:c5:d3: 74:c4:bb:28:28:69:2c:b6:4c:52:75:da:b4:12:cd: 3b:d5:1d:3f:9d:43:e7:39:82:31:66:4c:60:48:d8: 1d:47:53:b4:17:e8:0d:69:79:9f:7a:3b:37:e5:f6: de:70:3a:38:2b:72:3a:2a:d7:8b:f9:c6:18:04:3f: f7:93:5b:1a:2b:29:4d:41:7a:33:d0:40:f0:a3:13: ff:83:a6:cf:8d:76:67:9d:e8:91:6c:e7:7f:0b:8a: b3:f3:9f:c7:7f:41:45:a6:53:0d:f0:cb:2e:6f:ad: 93:45:53:ae:f4:3c:50:33:90:b1:ed:cc:19:62:d6: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1F:9B:5A:AF:5C:72:7D:D6:86:16:5E:DD:A3:92:80:61:35:53:8D X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:8e:c0:09:b7:cc:31:13:1d:12:bb:c5:a2:7b:cb:a0:a5:00: 0c:c8:04:a0:33:ea:8c:29:77:83:71:bf:3d:08:d6:12:72:72: 91:68:5f:27:e3:5e:a6:2f:ca:d1:ed:4b:0f:c7:ee:52:cc:86: 05:19:88:5a:1e:b1:5e:9e:20:32:dc:fe:f9:e1:50:bc:27:52: c9:12:02:41:b2:d2:f8:c6:b9:c8:d8:da:ee:90:45:96:8d:7a: fb:16:4f:2b:32:de:2b:a0:29:8f:26:b7:3e:2d:45:d2:22:03: e6:77:cc:8e:06:0a:5f:0d:69:c1:bc:de:ff:d8:6f:65:c3:e5: 28:4e:91:06:2d:eb:ba:ba:06:ec:4d:ff:c5:1c:77:8e:b6:b2: ef:b6:c8:03:96:e8:6a:2f:62:58:fb:d9:fa:f8:7b:a8:d7:ff: 70:d7:f7:c8:00:02:18:4a:7d:b3:ec:32:87:e1:f5:3a:5e:33: c4:a9:24:84:e7:29:0e:41:a8:0e:21:36:44:86:9f:60:13:8a: 8f:8a:78:1a:c2:87:94:90:56:d8:49:db:8e:aa:cc:fc:79:3a: 36:ed:c0:64:ef:ac:31:c5:85:1b:e4:77:90:92:d2:c1:f6:d7: 71:1a:c3:97:8b:76:48:aa:aa:79:67:32:3c:3a:65:7a:72:3b: 3a:b9:45:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUxMDE5MDEzNTI0WhcNMjUxMDI2MDEzNTI0WjAYMRYwFAYD VQQDEw02OGY0NDA1ZC1jMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lyEaYMFN/TAratrwU0/Xufc0eyrBeaf3HlOKtjhKf2PHLTbUlBfAPcfYjx1 Ki11Dp1XVRoZjXVPF0YNus8ICehVu6bUga6H+w+zgz0uboSnGX0Ot7rwup3HG6am 3n8fl3B7LeqT3dAmnzWqAqIPOYtWG2zSqcFhNvSu8/Vpm1oETIQjxdN0xLsoKGks tkxSddq0Es071R0/nUPnOYIxZkxgSNgdR1O0F+gNaXmfejs35fbecDo4K3I6KteL +cYYBD/3k1saKylNQXoz0EDwoxP/g6bPjXZnneiRbOd/C4qz85/Hf0FFplMN8Msu b62TRVOu9DxQM5Cx7cwZYtaHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcfm1qv XHJ91oYWXt2jkoBhNVONMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0jsAJt8wxEx0Su8Wie8ugpQAMyASgM+qMKXeDcb89CNYScnKRaF8n 416mL8rR7UsPx+5SzIYFGYhaHrFeniAy3P754VC8J1LJEgJBstL4xrnI2NrukEWW jXr7Fk8rMt4roCmPJrc+LUXSIgPmd8yOBgpfDWnBvN7/2G9lw+UoTpEGLeu6ugbs Tf/FHHeOtrLvtsgDluhqL2JY+9n6+Huo1/9w1/fIAAIYSn2z7DKH4fU6XjPEqSSE 5ykOQagOITZEhp9gE4qPingawoeUkFbYSduOqsz8eTo27cBk76wxxYUb5HeQktLB 9tdxGsOXi3ZIqqp5ZzI8OmV6cjs6uUWL -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:00 2025 by rpki-client