$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: 7iJYi9zSxP5itrX1Lz6PQM4vf7B9BW4Wjr6raYfcLoQ= Subject key identifier: E7:4F:F1:4D:06:46:37:A7:16:85:BB:96:47:DF:19:05:8C:79:84:32 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0BB1 Signing time: Sat 18 Oct 2025 19:47:44 +0000 Manifest this update: Sat 18 Oct 2025 19:47:43 +0000 Manifest next update: Sat 25 Oct 2025 19:47:43 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: 46lnZk2CMRgOV6qAQFaAZZTkPzpKzzWN7jirWs6DBWA=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Oct 18 19:47:43 2025 GMT Not After : Oct 25 19:47:43 2025 GMT Subject: CN=68f3eedf-6f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:bc:51:68:d7:3b:88:a7:a2:88:3e:71:fe: 93:16:46:3b:ee:6c:21:9f:ae:8a:c7:35:63:3a:62: 37:f4:9d:cd:17:da:83:84:e2:5c:7e:25:dc:83:40: 40:a0:75:e8:87:cd:31:33:cb:04:80:bd:85:20:ed: 32:cd:30:f2:e3:79:af:c1:98:d2:50:31:17:cc:25: ea:ca:02:76:13:ca:c8:73:d6:90:77:78:82:26:2f: 1f:19:27:24:f0:94:ae:25:cf:24:3e:9a:d9:db:5e: 8c:31:8b:7e:5b:e1:7f:5e:b5:30:3e:4d:ba:20:0f: a6:d0:45:ae:f2:8b:db:a0:9c:1d:b6:30:28:11:91: 98:4e:5b:00:e9:9c:40:1b:c7:f0:48:ae:73:fc:2c: 02:f3:ca:1d:dd:31:84:1f:69:39:61:7e:1b:6c:78: 56:c9:19:39:d8:c5:8c:bf:ac:f6:ec:c3:6b:41:69: ce:b1:c9:3a:cb:70:ce:ad:64:62:8e:f9:85:f7:21: ce:c4:95:f5:0f:5d:66:90:e8:e3:41:60:d0:2f:d8: f5:0c:bb:4d:9f:91:20:0d:0e:31:9a:ed:3f:9b:a5: dd:cf:04:aa:ad:fa:01:fc:2f:ce:11:66:a5:d1:31: bc:ab:b8:6c:b4:be:c3:9d:96:ec:1d:ab:e4:36:c7: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4F:F1:4D:06:46:37:A7:16:85:BB:96:47:DF:19:05:8C:79:84:32 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:69:47:12:b5:5a:fc:df:71:86:d7:ef:1b:dc:13:94:4f:b4: 6d:e5:a7:1a:70:a4:bf:7e:88:9f:dc:a9:de:98:1b:de:6f:ef: 94:69:13:5f:a6:bf:fc:24:21:c0:0f:5d:dc:8a:85:0e:54:47: 28:35:9d:28:b5:fa:bc:ea:17:35:99:7c:b9:98:43:fd:63:6d: d9:7c:45:b6:1a:85:6a:82:46:44:aa:7f:e1:3d:19:68:3d:34: b1:75:68:de:af:3d:14:08:86:ea:6a:5a:7a:fd:7e:9c:67:71: 1a:96:cc:92:69:3b:39:32:a6:f3:20:f3:b5:1f:c1:8d:00:20: 92:59:92:1d:99:7e:82:1a:18:72:15:ef:78:69:ac:9c:cf:df: 70:39:2d:bc:cc:ff:82:19:92:be:44:22:6b:0a:f3:a6:6b:a4: cb:93:6f:7c:ed:e1:8f:f1:93:48:a0:8f:53:41:9b:4e:38:30: a6:52:64:a7:e6:7c:0b:df:cf:27:d9:72:9d:16:82:26:2c:7c: 96:d3:d9:27:a8:f1:db:7a:77:03:0e:93:02:d6:7c:e3:81:df: e8:9c:ec:84:b7:6c:e9:19:9b:a1:50:02:90:2f:d6:50:dd:86: ae:79:27:9a:fe:84:ae:a4:33:d3:5a:5a:f6:c1:fe:61:88:72: 27:1f:8a:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUxMDE4MTk0NzQzWhcNMjUxMDI1MTk0NzQzWjAYMRYwFAYD VQQDEw02OGYzZWVkZi02ZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZG8UWjXO4inoog+cf6TFkY77mwhn66KxzVjOmI39J3NF9qDhOJcfiXcg0BA oHXoh80xM8sEgL2FIO0yzTDy43mvwZjSUDEXzCXqygJ2E8rIc9aQd3iCJi8fGSck 8JSuJc8kPprZ216MMYt+W+F/XrUwPk26IA+m0EWu8ovboJwdtjAoEZGYTlsA6ZxA G8fwSK5z/CwC88od3TGEH2k5YX4bbHhWyRk52MWMv6z27MNrQWnOsck6y3DOrWRi jvmF9yHOxJX1D11mkOjjQWDQL9j1DLtNn5EgDQ4xmu0/m6XdzwSqrfoB/C/OEWal 0TG8q7hstL7DnZbsHavkNsewwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdP8U0G RjenFoW7lkffGQWMeYQyMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/aUcStVr833GG1+8b3BOUT7Rt5acacKS/foif3KnemBveb++UaRNf pr/8JCHAD13cioUOVEcoNZ0otfq86hc1mXy5mEP9Y23ZfEW2GoVqgkZEqn/hPRlo PTSxdWjerz0UCIbqalp6/X6cZ3EalsySaTs5MqbzIPO1H8GNACCSWZIdmX6CGhhy Fe94aaycz99wOS28zP+CGZK+RCJrCvOma6TLk2987eGP8ZNIoI9TQZtOODCmUmSn 5nwL388n2XKdFoImLHyW09knqPHbencDDpMC1nzjgd/onOyEt2zpGZuhUAKQL9ZQ 3YaueSea/oSupDPTWlr2wf5hiHInH4qx -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:57 2025 by rpki-client