$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: ei2fnBY1Xt8SENqmS+hW2JYGGgLtsU8nyOMDp9sjx4o= Subject key identifier: 08:09:EA:F0:1E:01:5A:3D:BD:06:1D:9F:92:EA:55:D9:25:E7:4E:3B Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: 0A Signing time: Sun 19 Oct 2025 11:38:36 +0000 Manifest this update: Sun 19 Oct 2025 11:38:35 +0000 Manifest next update: Sun 26 Oct 2025 11:38:35 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: fz5X8pVh8+iMhM6ooAmxYdgtUBsljFtlO5R2jX0JFwY=) 2: 16B4A78CA40B11F089BAB06CC4F9AE02.roa (hash: VPaGjYCY/yBPqdHyuHravwWJ2fLNhQCH9lpAYkaXN4s=) 3: E802ABD6A40B11F0B922EA6DC4F9AE02.roa (hash: 2u8PzTJSh2BMJmgnVEbZTxTzv071sLkcL+Ih47BKb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Oct 19 11:38:35 2025 GMT Not After : Oct 26 11:38:35 2025 GMT Subject: CN=68f4cdbb-b65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:dd:4c:a9:2b:4d:e7:e3:a5:7c:3f:ce:c6: 70:14:82:12:2b:2b:47:c6:5f:12:90:9b:e4:9c:86: 49:c0:9e:38:67:f0:b0:a4:3b:b3:c0:fc:ca:2e:42: f8:70:8d:3a:75:fb:8d:b8:35:96:d5:47:03:df:26: 59:e2:90:ef:ba:de:61:fe:48:4b:c8:51:3f:f4:24: 24:7a:df:54:04:9a:68:24:5e:49:11:09:a2:4c:67: 03:2c:00:1f:e6:1d:61:34:c4:bc:41:a3:83:07:28: 1f:15:a2:f2:4c:b0:57:13:fd:22:b4:73:35:7b:d7: fd:dc:d6:85:69:4a:74:61:99:51:44:60:e7:3e:0e: 98:e6:02:de:98:9c:2f:ef:06:a1:c4:a1:9f:3d:52: 8e:2f:9e:bf:db:a9:be:86:c8:02:f0:84:e1:89:79: 20:76:02:a0:f9:ea:d6:77:23:97:76:df:50:f2:3a: 56:ed:e7:27:1a:84:c0:c6:26:7e:3f:da:ce:43:87: 71:69:84:3e:25:1b:ac:77:1f:5d:f3:fb:0f:01:45: e4:0d:bd:28:2c:1f:ac:ea:c8:aa:23:02:ed:09:61: a0:f1:58:03:e8:62:1f:34:96:6a:20:e3:89:e8:dc: 5f:4f:6e:49:f4:de:0c:94:28:ce:cd:74:a1:0f:5d: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:09:EA:F0:1E:01:5A:3D:BD:06:1D:9F:92:EA:55:D9:25:E7:4E:3B X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8b:68:26:49:fa:85:fa:ad:b5:35:3a:d8:55:49:6e:b1:b6: dd:7b:27:5b:6d:40:49:9d:4c:fb:8b:a6:1b:32:1f:3a:db:84: cf:5e:7a:5d:2c:2a:c5:9e:99:e6:e9:e5:88:c2:ba:dd:68:5e: 90:7c:ca:88:2a:74:50:a0:c0:7e:ff:45:e4:9f:75:24:3a:53: 05:f5:40:23:48:27:cf:61:9f:9d:b6:f6:37:2c:45:78:4f:a1: 4d:4b:2d:bd:59:e8:e2:79:bb:f4:85:2e:d9:1b:fc:a6:c8:80: 8a:f3:b9:d7:8b:d8:87:00:4c:6c:45:52:26:c4:df:fb:8a:bc: 19:84:f5:39:52:9d:30:f9:3a:b2:02:95:10:f7:c6:cc:8c:49: 9e:29:25:2a:76:d6:05:7f:94:4e:89:72:5b:0b:0d:dc:34:8c: 27:2b:51:54:eb:73:81:92:09:40:fd:4c:e9:ad:a6:ba:5d:73: 06:20:ca:9e:0a:81:6a:4a:7b:39:e2:04:79:99:49:82:b1:39: 94:cf:ac:48:48:22:be:7e:42:e8:ab:23:86:28:6e:43:d9:6e: 04:74:81:97:85:c0:63:af:40:94:53:8c:0b:57:e0:df:26:b7: e1:cb:96:18:0d:dd:14:8f:71:b2:17:09:a4:b3:a3:1a:98:04: 9b:6f:a9:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNTEwMTkxMTM4MzVaFw0yNTEwMjYxMTM4MzVaMBgxFjAUBgNV BAMTDTY4ZjRjZGJiLWI2NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJrN1MqStN5+OlfD/OxnAUghIrK0fGXxKQm+SchknAnjhn8LCkO7PA/MouQvhw jTp1+424NZbVRwPfJlnikO+63mH+SEvIUT/0JCR631QEmmgkXkkRCaJMZwMsAB/m HWE0xLxBo4MHKB8VovJMsFcT/SK0czV71/3c1oVpSnRhmVFEYOc+DpjmAt6YnC/v BqHEoZ89Uo4vnr/bqb6GyALwhOGJeSB2AqD56tZ3I5d231DyOlbt5ycahMDGJn4/ 2s5Dh3FphD4lG6x3H13z+w8BReQNvSgsH6zqyKojAu0JYaDxWAPoYh80lmog44no 3F9Pbkn03gyUKM7NdKEPXV6PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCAnq8B4B Wj29Bh2fkupV2SXnTjswHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp bjFSR0QxUU5zV1QwWjRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAaLaCZJ+oX6rbU1OthVSW6xtt17J1ttQEmdTPuLphsyHzrbhM9eel0s KsWemebp5YjCut1oXpB8yogqdFCgwH7/ReSfdSQ6UwX1QCNIJ89hn5229jcsRXhP oU1LLb1Z6OJ5u/SFLtkb/KbIgIrzudeL2IcATGxFUibE3/uKvBmE9TlSnTD5OrIC lRD3xsyMSZ4pJSp21gV/lE6JclsLDdw0jCcrUVTrc4GSCUD9TOmtprpdcwYgyp4K gWpKezniBHmZSYKxOZTPrEhIIr5+QuirI4YobkPZbgR0gZeFwGOvQJRTjAtX4N8m t+HLlhgN3RSPcbIXCaSzoxqYBJtvqVE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:55:07 2025 by rpki-client