$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: yZCHeiX4CWdxFOCxnBPZwXTl5UAiP3OsujR6XqZQ/sE= Subject key identifier: F7:88:89:9A:74:11:A4:59:B4:A6:BE:DB:11:54:54:4D:4B:FA:39:9A Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2DD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2DB5 Signing time: Sat 18 Oct 2025 15:41:44 +0000 Manifest this update: Sat 18 Oct 2025 15:41:44 +0000 Manifest next update: Sat 25 Oct 2025 15:41:44 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: c97iqVNv5sCVrZFpKRldOZpKaZPrQGQgIrNEE1/E7RQ=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: hRzik5kXimOwUS6S1oWYsWN9k919CD3fLtMBHNWUanA=) 3: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: Pdk6bT7HhSqGJ2GX150nm/IL+DXi5SGrlxiId38sTmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11733 (0x2dd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Oct 18 15:41:44 2025 GMT Not After : Oct 25 15:41:44 2025 GMT Subject: CN=68f3b538-90dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fe:f9:bc:04:ff:49:7d:4c:5f:d5:9a:5e:86: ac:f7:0a:51:e0:da:d0:63:29:06:33:f3:a1:cf:43: 60:65:d3:e4:71:ec:d7:c5:8f:c3:96:80:3c:27:38: 98:26:8c:d5:12:e1:7f:3f:26:73:65:2c:6d:54:45: 26:5d:a4:57:ca:3f:d5:67:d2:17:98:e2:e7:bf:d9: 84:34:e0:d2:9d:49:23:b7:07:49:f0:f0:02:62:5e: 5d:1c:99:b4:db:57:33:45:d3:29:e1:74:28:03:6e: 34:5d:93:20:9b:67:bd:95:6a:05:bc:f4:37:f8:99: f6:a9:ef:fb:18:7b:0c:1d:a4:92:07:c2:a2:58:f3: 03:6e:5b:06:85:28:4e:5b:a8:f8:2c:c4:ae:bc:fb: 00:1e:4f:c3:df:07:3a:e3:f2:84:ac:4c:52:29:a4: 29:96:f6:d3:aa:76:44:8d:67:49:1a:ac:4f:9e:68: c5:78:3a:a2:3d:9e:94:3f:1b:2a:33:90:68:1c:c8: 82:1c:aa:9f:7c:08:ee:fa:3d:76:f2:2f:80:e0:52: 8d:9d:17:ae:1d:82:2c:fc:ab:cd:b3:f4:e5:df:3d: 0f:8e:cc:91:37:48:59:26:fd:02:ca:51:38:dc:62: 5c:f6:f0:c9:56:f6:68:23:d8:61:7f:22:a0:a1:97: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:89:9A:74:11:A4:59:B4:A6:BE:DB:11:54:54:4D:4B:FA:39:9A X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:13:b0:f2:18:d9:c1:fc:79:e2:48:bd:91:bf:a7:b3:bc:20: c5:31:93:65:45:b2:1b:54:c5:bf:e5:db:7b:62:d0:1f:4d:32: ee:89:5d:be:61:28:f2:8b:51:88:43:19:a4:26:9f:99:ee:d7: c1:26:71:6d:9d:df:8c:f9:74:67:8f:6d:85:20:58:bd:dd:ca: 4e:d5:00:61:a9:e4:41:a2:23:93:79:b4:1e:a1:45:0f:22:5f: c3:a5:95:65:fb:b1:72:06:b7:75:6e:85:6e:d6:09:5f:ae:0c: 14:2b:f8:9b:a3:1c:4a:7e:c4:a3:89:6d:fb:2c:4c:2b:5d:6c: 75:aa:a2:e1:0a:4d:36:48:25:b1:87:55:28:c9:3f:92:ff:c3: 09:e6:11:98:be:95:6a:6f:d7:39:e9:2c:0e:fc:a4:fe:c8:46: c5:b5:fe:5f:72:bb:74:98:e5:7d:ee:a6:53:87:94:9b:1d:eb: ec:45:46:e4:28:96:e6:44:8b:28:56:9d:ce:52:99:0b:65:cc: 27:d3:ce:95:1f:f1:74:35:db:70:e9:28:ca:75:b8:f6:1e:cf: 38:d0:78:68:45:9a:6e:38:c7:e5:0c:b5:28:ec:a1:3b:b7:9a: da:f7:10:83:06:83:c5:91:b6:01:5f:c3:e6:95:c4:69:73:73: fd:e9:cd:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUxMDE4MTU0MTQ0WhcNMjUxMDI1MTU0MTQ0WjAYMRYwFAYD VQQDEw02OGYzYjUzOC05MGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8P75vAT/SX1MX9WaXoas9wpR4NrQYykGM/Ohz0NgZdPkcezXxY/DloA8JziY JozVEuF/PyZzZSxtVEUmXaRXyj/VZ9IXmOLnv9mENODSnUkjtwdJ8PACYl5dHJm0 21czRdMp4XQoA240XZMgm2e9lWoFvPQ3+Jn2qe/7GHsMHaSSB8KiWPMDblsGhShO W6j4LMSuvPsAHk/D3wc64/KErExSKaQplvbTqnZEjWdJGqxPnmjFeDqiPZ6UPxsq M5BoHMiCHKqffAju+j128i+A4FKNnReuHYIs/KvNs/Tl3z0PjsyRN0hZJv0CylE4 3GJc9vDJVvZoI9hhfyKgoZfqhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeIiZp0 EaRZtKa+2xFUVE1L+jmaMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFE7DyGNnB/HniSL2Rv6ezvCDFMZNlRbIbVMW/5dt7YtAfTTLuiV2+ YSjyi1GIQxmkJp+Z7tfBJnFtnd+M+XRnj22FIFi93cpO1QBhqeRBoiOTebQeoUUP Il/DpZVl+7FyBrd1boVu1glfrgwUK/iboxxKfsSjiW37LEwrXWx1qqLhCk02SCWx h1UoyT+S/8MJ5hGYvpVqb9c56SwO/KT+yEbFtf5fcrt0mOV97qZTh5SbHevsRUbk KJbmRIsoVp3OUpkLZcwn086VH/F0Ndtw6SjKdbj2Hs840HhoRZpuOMflDLUo7KE7 t5ra9xCDBoPFkbYBX8PmlcRpc3P96c2e -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:00 2025 by rpki-client