$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: /O7METTGpNsyQ/xjION9AvDYC+Z03prL+R6QL2/Wc3o= Subject key identifier: 52:12:8F:ED:F9:50:CE:62:56:C9:07:8B:BF:8E:9C:35:53:AA:9F:3C Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 0833 Signing time: Sat 18 Oct 2025 16:12:52 +0000 Manifest this update: Sat 18 Oct 2025 16:12:51 +0000 Manifest next update: Sat 25 Oct 2025 16:12:51 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: NLc0fEjYjuFZtSCLdljp7uEX+44Kh+6wEuAZJs97zxA=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=) 3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Oct 18 16:12:51 2025 GMT Not After : Oct 25 16:12:51 2025 GMT Subject: CN=68f3bc84-7dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:94:5d:e0:73:56:27:26:79:f0:b8:a9:28: b6:87:47:86:2a:96:82:a4:10:b9:44:a6:39:c1:e7: 5b:30:c7:95:4e:64:44:51:50:17:4a:b7:6a:ac:e4: 7d:e7:61:77:54:80:98:ef:55:1b:ca:cf:d5:e9:95: 25:b5:d4:93:3d:36:20:0b:f4:f1:74:d0:b1:ed:2c: 83:d4:4f:92:2c:65:91:4e:f2:22:44:70:bb:08:fb: 5b:68:df:38:2c:20:f2:93:9c:3c:0c:36:f6:c2:77: c6:d2:e0:25:f1:a8:d6:5a:78:5a:ef:75:ae:7e:a1: ae:4c:3d:15:43:a0:b0:70:41:55:c7:4d:c8:1e:93: 69:6b:9f:86:54:2c:49:4c:ed:b6:90:22:40:5c:07: b1:d3:42:d9:fe:de:54:7b:45:4f:10:dd:33:4c:44: 18:f6:b2:77:dd:53:91:31:5d:6b:a4:53:44:8d:20: 0c:50:7a:17:59:84:d5:6d:6d:4d:ab:6e:7a:0b:30: 88:60:fa:fe:35:d4:da:14:fc:43:62:e9:89:df:80: df:14:cb:4b:51:8e:ee:38:09:92:e9:01:72:e9:6e: ad:25:66:4a:0b:3d:bd:c1:29:b7:c2:d9:f4:cf:a5: d8:cd:40:71:f0:8a:e3:57:36:90:78:64:95:96:8a: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:12:8F:ED:F9:50:CE:62:56:C9:07:8B:BF:8E:9C:35:53:AA:9F:3C X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8c:ec:86:a3:28:5f:9f:48:40:d7:6d:4a:c5:96:84:c4:87: a9:b0:61:9f:56:ff:e6:41:c7:a2:37:b2:8d:3c:7c:e5:68:3a: 0a:dc:9f:dc:a7:ad:a1:d5:9a:8b:54:74:66:78:a2:3c:72:1a: d9:91:22:c8:44:f7:14:c5:5e:64:db:fc:30:ea:fe:a2:83:49: 41:73:93:6e:d0:c2:26:97:5e:e8:f2:7e:73:19:36:e6:ff:ca: cd:83:93:01:65:80:2f:e3:39:01:7e:57:93:56:a6:9e:74:fb: 91:70:b5:9e:60:6f:b6:ae:08:3c:d5:a6:9a:6f:0a:b2:d3:f8: 98:fa:ae:f5:db:40:db:e0:c0:d8:00:05:7a:24:ae:9f:68:f9: 40:03:cc:59:2a:44:81:a2:9c:33:a6:ee:1f:d1:b2:71:8c:0a: 81:b1:dc:bf:26:70:1c:61:89:ff:6b:39:97:3e:00:ab:d9:8e: 16:a5:d5:8c:04:dd:8a:2d:7c:4e:16:7a:1b:20:08:28:1e:97: 7d:d9:9b:9e:b4:75:3d:aa:6e:3a:b0:5e:e1:ff:1f:21:8f:63: 10:ed:8f:71:86:87:0c:76:fd:f2:3f:e0:ea:5f:63:ad:30:7a: 23:6a:d3:9b:ec:3f:0f:a2:d4:7f:02:38:a6:9f:a5:f7:d0:cc: d5:49:7a:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjUxMDE4MTYxMjUxWhcNMjUxMDI1MTYxMjUxWjAYMRYwFAYD VQQDEw02OGYzYmM4NC03ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqOUXeBzVicmefC4qSi2h0eGKpaCpBC5RKY5wedbMMeVTmREUVAXSrdqrOR9 52F3VICY71Ubys/V6ZUltdSTPTYgC/TxdNCx7SyD1E+SLGWRTvIiRHC7CPtbaN84 LCDyk5w8DDb2wnfG0uAl8ajWWnha73WufqGuTD0VQ6CwcEFVx03IHpNpa5+GVCxJ TO22kCJAXAex00LZ/t5Ue0VPEN0zTEQY9rJ33VORMV1rpFNEjSAMUHoXWYTVbW1N q256CzCIYPr+NdTaFPxDYumJ34DfFMtLUY7uOAmS6QFy6W6tJWZKCz29wSm3wtn0 z6XYzUBx8IrjVzaQeGSVlopl2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFISj+35 UM5iVskHi7+OnDVTqp88MB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVjOyGoyhfn0hA121KxZaExIepsGGfVv/mQceiN7KNPHzlaDoK3J/c p62h1ZqLVHRmeKI8chrZkSLIRPcUxV5k2/ww6v6ig0lBc5Nu0MIml17o8n5zGTbm /8rNg5MBZYAv4zkBfleTVqaedPuRcLWeYG+2rgg81aaabwqy0/iY+q7120Db4MDY AAV6JK6faPlAA8xZKkSBopwzpu4f0bJxjAqBsdy/JnAcYYn/azmXPgCr2Y4WpdWM BN2KLXxOFnobIAgoHpd92ZuetHU9qm46sF7h/x8hj2MQ7Y9xhocMdv3yP+DqX2Ot MHojatOb7D8PotR/Ajimn6X30MzVSXo/ -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:12 2025 by rpki-client