$ rpki-client -vvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft File: 0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json) Hash identifier: 529yF3iqA8yF7Z1AW5hlJJ7kyJE25elveXx/jJtOmw8= Subject key identifier: 72:8A:AB:E0:40:E2:35:7D:37:2E:76:3B:A9:56:46:57:42:35:03:EB Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 Certificate issuer: /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft Manifest number: 34CC Signing time: Mon 20 Oct 2025 15:01:24 +0000 Manifest this update: Mon 20 Oct 2025 15:01:24 +0000 Manifest next update: Mon 27 Oct 2025 15:01:24 +0000 Files and hashes: 1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: 17VQ7LrnOjOj6d5EjsKsHEhhWSSxoUjP0eBHltQyYiE=) 2: 1D790596F25D11EF8C5D7036C4F9AE02.roa (hash: 0c5mooek/SI4tHJlanxjMJ+LPip9Hy2VF66plGlTaFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E03C, serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Validity Not Before: Oct 20 15:01:24 2025 GMT Not After : Oct 27 15:01:24 2025 GMT Subject: CN=68f64ec4-b44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:40:20:03:8f:15:07:92:d2:2e:72:9a:0b:d9: 32:7b:39:b5:21:5c:75:fb:68:74:9a:f4:ef:5b:6e: 2d:dc:d4:67:fd:24:7c:e7:fd:0e:a7:fd:d6:c2:47: cc:02:34:52:27:32:f8:7d:17:7f:1d:3d:e3:a2:b4: b0:d4:90:d9:a2:14:c8:0d:94:99:68:b2:b8:2c:e4: c5:68:53:78:81:d4:81:35:4d:dd:6c:05:fa:a0:a7: 29:38:3b:57:b0:eb:bb:b8:91:5b:cf:1f:39:b4:79: 13:9a:33:a9:07:8f:10:f0:bb:82:dc:12:b7:29:d2: 6f:67:7e:e5:22:18:b1:7f:8d:20:62:f1:05:3e:dc: cd:51:eb:c5:4f:4d:3b:a3:5e:4e:d5:55:23:44:f8: 6a:17:61:93:b2:bd:62:e3:7b:b4:88:f9:0f:fb:b3: 7b:ae:bd:28:e3:db:05:cd:d3:8e:04:68:32:f3:21: d3:d5:05:8b:ae:94:5c:dd:23:67:db:6e:4b:8f:b8: a6:9d:b8:17:38:0c:ae:9c:e5:1e:72:de:46:15:bb: 68:19:11:5f:65:5e:aa:34:24:55:71:48:8a:d6:cb: e5:6a:00:b9:af:cf:1d:e6:32:28:ed:07:1b:47:68: 15:a6:f2:46:eb:60:ac:0d:e4:b4:03:39:49:af:71: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8A:AB:E0:40:E2:35:7D:37:2E:76:3B:A9:56:46:57:42:35:03:EB X509v3 Authority Key Identifier: keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:51:b3:c2:37:df:08:93:8a:a7:02:19:49:4d:18:6d:1c:d5: c3:f5:20:68:a4:04:cd:e1:3a:e6:ce:78:91:e4:cb:ca:bb:a7: ac:16:8a:86:e8:30:42:69:c9:5e:1e:7f:5b:a5:38:a4:aa:39: 88:99:ac:0f:55:67:75:ee:88:27:03:8f:23:51:3d:0e:60:ef: 8a:5f:f9:e2:43:09:b4:2f:41:3a:24:9d:1f:60:82:6c:21:33: 2c:97:0c:8f:43:54:5e:30:d2:92:84:a4:0a:ca:b6:ea:90:64: da:55:c0:91:f6:b3:8d:19:58:68:09:95:fb:59:ec:00:bf:fa: 1c:1b:46:5e:9f:b4:87:e2:88:3d:99:f7:1e:aa:a8:71:87:ba: 9d:6b:ef:53:5a:26:8a:2f:7f:0b:aa:cf:73:1f:a4:be:af:2b: ec:0a:e0:93:36:f5:d8:03:ce:55:7e:be:65:5c:52:d4:32:44: 3e:8c:52:0a:4f:09:8b:be:06:ae:6b:96:c9:f5:ee:23:57:5e: 48:63:fa:30:b6:eb:23:2b:23:86:bb:cd:e0:0f:4f:a1:b3:40: be:91:1d:32:74:21:54:b7:c1:58:14:4f:d7:02:01:6d:3c:88: b2:8c:9b:1b:9a:fb:76:ad:a3:9b:bf:28:c2:6c:c5:00:53:d8: d3:0c:55:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwM0MxMTAvBgNVBAUTKEQwOEMzNkUyNkYyNEZCOUQ1MTRGM0I0MEE4RTM3QTlB MDRCNTgwMjUwHhcNMjUxMDIwMTUwMTI0WhcNMjUxMDI3MTUwMTI0WjAYMRYwFAYD VQQDEw02OGY2NGVjNC1iNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40AgA48VB5LSLnKaC9kyezm1IVx1+2h0mvTvW24t3NRn/SR85/0Op/3WwkfM AjRSJzL4fRd/HT3jorSw1JDZohTIDZSZaLK4LOTFaFN4gdSBNU3dbAX6oKcpODtX sOu7uJFbzx85tHkTmjOpB48Q8LuC3BK3KdJvZ37lIhixf40gYvEFPtzNUevFT007 o15O1VUjRPhqF2GTsr1i43u0iPkP+7N7rr0o49sFzdOOBGgy8yHT1QWLrpRc3SNn 225Lj7imnbgXOAyunOUect5GFbtoGRFfZV6qNCRVcUiK1svlagC5r88d5jIo7Qcb R2gVpvJG62CsDeS0AzlJr3EA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKKq+BA 4jV9Ny52O6lWRldCNQPrMB8GA1UdIwQYMBaAFNCMNuJvJPudUU87QKjjepoEtYAl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTAzQy9CNkUwRjRBQTFE OUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01MVJUenRBcU9ONm1nUzFn Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBJdzI0bThrLTUxUlR6dEFxT042bWdTMWdDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTAzQy9CNkUwRjRBQTFEOUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01 MVJUenRBcU9ONm1nUzFnQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+UbPCN98Ik4qnAhlJTRhtHNXD9SBopATN4TrmzniR5MvKu6esFoqG 6DBCacleHn9bpTikqjmImawPVWd17ognA48jUT0OYO+KX/niQwm0L0E6JJ0fYIJs ITMslwyPQ1ReMNKShKQKyrbqkGTaVcCR9rONGVhoCZX7WewAv/ocG0Zen7SH4og9 mfceqqhxh7qda+9TWiaKL38Lqs9zH6S+ryvsCuCTNvXYA85Vfr5lXFLUMkQ+jFIK TwmLvgaua5bJ9e4jV15IY/owtusjKyOGu83gD0+hs0C+kR0ydCFUt8FYFE/XAgFt PIiyjJsbmvt2raObvyjCbMUAU9jTDFWm -----END CERTIFICATE-----Generated at Tue Oct 21 03:19:28 2025 by rpki-client