$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: KYrxOzbzageN2FQ2X2bSgqbdPQL4H9a0nf3wqjwaaZM= Subject key identifier: 19:F1:A6:5D:6B:D7:EE:50:6C:0B:73:E4:C1:E8:32:47:2D:A2:C2:1A Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 060A Signing time: Sun 19 Oct 2025 00:29:19 +0000 Manifest this update: Sun 19 Oct 2025 00:29:19 +0000 Manifest next update: Sun 26 Oct 2025 00:29:19 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: C3F8aBH2h7BVGzujOzl2eHTCsbCdme6U5mcPPoyI1t0=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: PfaYVep9sxHm2ekMoNsSTDKRElztgb9iT+RAJOOQJNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Oct 19 00:29:19 2025 GMT Not After : Oct 26 00:29:19 2025 GMT Subject: CN=68f430df-68cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:ef:3a:b5:73:ed:cc:ef:b0:73:54:8e:42: a9:a7:f1:b0:db:25:53:02:89:aa:6d:e4:e9:94:a8: fd:61:f8:f0:15:2c:af:fc:0c:54:28:f8:cc:c1:bf: df:a1:b6:aa:59:3d:2b:08:a3:1b:e2:29:e8:93:e2: dc:3d:e0:aa:78:bb:35:2b:1c:be:ac:db:1d:4d:b9: 2a:1d:70:60:bd:47:62:62:69:fb:f6:b3:7c:e3:37: 9e:36:5f:d3:e3:d9:36:4c:47:61:7e:84:e7:61:3e: 57:8b:bf:cc:82:dd:58:5a:03:0c:be:9f:33:70:ac: 04:79:97:ce:c9:da:a4:10:a0:ac:d2:58:e3:0f:6a: 57:41:5e:b3:5c:e1:e7:d5:9a:0e:66:5d:84:88:7c: 51:1f:90:6a:d9:d5:38:95:dc:d2:7c:99:e9:4b:81: 04:90:06:d9:0c:45:a8:38:71:bb:03:13:d6:42:7f: 95:d7:8e:a6:61:f9:87:d5:7e:3e:13:30:e9:08:48: af:e7:34:df:8c:e4:ad:8e:53:69:4c:89:06:24:82: f5:4f:01:bc:ad:b8:19:2f:59:f8:3d:e8:aa:5a:3c: a1:3e:2f:49:52:c4:23:32:42:20:fe:8b:22:b6:59: aa:a8:1e:cc:3a:12:ef:4f:4b:c7:21:27:c2:8c:21: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F1:A6:5D:6B:D7:EE:50:6C:0B:73:E4:C1:E8:32:47:2D:A2:C2:1A X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e8:2b:de:9f:4e:dc:35:3b:73:fe:34:bd:b5:13:37:6b:04: 90:33:c7:64:4f:32:86:d7:55:6b:cc:6c:5c:d9:ba:cb:4c:15: d8:22:8c:7a:e4:a4:96:67:62:43:d4:ac:94:31:b2:f2:fc:aa: 32:b7:fa:35:7c:22:d8:5c:aa:85:ef:2a:37:03:27:2e:dd:57: b0:5e:36:dd:9a:cc:d2:db:ed:51:8f:a8:3c:cf:ba:99:ec:ad: 79:3c:cb:c2:b2:55:c9:70:69:86:30:e4:81:d8:5f:fe:d2:2f: 4b:f5:e8:3b:32:ab:0c:d6:8f:3e:ad:f5:1e:6d:4e:1d:92:02: 2e:c4:c3:b1:d8:b5:29:35:87:f0:ab:51:41:86:51:94:fb:2a: e5:b5:44:f5:b0:02:d7:1d:ed:8d:d6:b4:a7:f4:62:c2:61:be: 90:f5:62:8a:6d:ac:6d:57:f5:f5:6c:c7:81:49:75:1c:b1:f4: 04:56:21:76:e6:f4:06:1b:fd:08:e8:81:7f:46:aa:72:72:16: 21:c2:b4:c0:b0:d7:77:41:f9:b9:44:a5:18:f2:5c:b0:ff:78: d8:a4:2e:f3:c7:69:21:ae:75:64:93:c2:73:be:85:f7:2a:57: 21:9f:16:29:6b:e4:03:b5:92:01:a7:f1:b3:71:b6:3c:6c:51: f5:6c:7f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUxMDE5MDAyOTE5WhcNMjUxMDI2MDAyOTE5WjAYMRYwFAYD VQQDEw02OGY0MzBkZi02OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwTvOrVz7czvsHNUjkKpp/Gw2yVTAomqbeTplKj9YfjwFSyv/AxUKPjMwb/f obaqWT0rCKMb4inok+LcPeCqeLs1Kxy+rNsdTbkqHXBgvUdiYmn79rN84zeeNl/T 49k2TEdhfoTnYT5Xi7/Mgt1YWgMMvp8zcKwEeZfOydqkEKCs0ljjD2pXQV6zXOHn 1ZoOZl2EiHxRH5Bq2dU4ldzSfJnpS4EEkAbZDEWoOHG7AxPWQn+V146mYfmH1X4+ EzDpCEiv5zTfjOStjlNpTIkGJIL1TwG8rbgZL1n4PeiqWjyhPi9JUsQjMkIg/osi tlmqqB7MOhLvT0vHISfCjCGoHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnxpl1r 1+5QbAtz5MHoMkctosIaMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA96Cven07cNTtz/jS9tRM3awSQM8dkTzKG11VrzGxc2brLTBXYIox6 5KSWZ2JD1KyUMbLy/Koyt/o1fCLYXKqF7yo3Aycu3VewXjbdmszS2+1Rj6g8z7qZ 7K15PMvCslXJcGmGMOSB2F/+0i9L9eg7MqsM1o8+rfUebU4dkgIuxMOx2LUpNYfw q1FBhlGU+yrltUT1sALXHe2N1rSn9GLCYb6Q9WKKbaxtV/X1bMeBSXUcsfQEViF2 5vQGG/0I6IF/RqpychYhwrTAsNd3Qfm5RKUY8lyw/3jYpC7zx2khrnVkk8JzvoX3 KlchnxYpa+QDtZIBp/GzcbY8bFH1bH8g -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:10 2025 by rpki-client