$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: OzSQb8mcFZBc4Q9ckZKCEfeZSY5NStjSMLP5cLbwAXU= Subject key identifier: 4B:6A:45:DA:DC:91:25:C8:6D:DA:40:C9:8E:FA:21:84:EB:1F:22:0A Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0AFC Signing time: Sat 18 Oct 2025 20:18:27 +0000 Manifest this update: Sat 18 Oct 2025 20:18:27 +0000 Manifest next update: Sat 25 Oct 2025 20:18:27 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: sGtsScn19/iQ6mtjkncGzIeiAv0M2eVdzCly52TnVt4=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: 89pX8L61+7/doNBHrf2hbiHhbWGDIaRrzWG5JEfI2wc=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: xmLzVeIZmzkbeElNyJqCqgJSwLYX+MndAV0BI8RRNy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Oct 18 20:18:27 2025 GMT Not After : Oct 25 20:18:27 2025 GMT Subject: CN=68f3f613-8fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:b5:b0:1e:aa:1e:93:fc:c3:c8:92:49:99: 60:9b:19:aa:1d:a7:07:56:9e:8e:4b:6d:14:a9:bb: 4a:1e:3b:f0:e9:c1:34:28:6a:bb:76:98:d2:f7:b3: c7:75:5c:4a:01:5e:8b:e0:57:89:b2:96:c1:06:93: 9c:20:14:e1:a8:79:44:d4:b8:3d:9e:58:71:43:98: 28:23:bb:94:d6:e5:62:76:ae:1a:c8:2f:8e:e2:85: ae:b5:03:fb:5e:63:ab:a2:33:b7:13:fd:f7:1c:be: 25:13:52:2d:1b:cf:5e:e0:4b:04:7d:a2:12:17:6d: ca:e1:ee:8a:dd:89:b0:3c:ec:27:5b:1d:2b:90:07: 0a:b2:7d:88:0d:ea:ac:18:55:74:7f:6d:35:e0:ef: 4e:42:13:25:e4:28:06:e1:8c:de:94:ca:aa:e5:13: 5e:19:7a:18:66:8b:56:79:fa:ad:5e:1e:c5:1d:66: 5d:eb:0d:a9:f6:bb:89:4f:c1:9e:c8:ae:49:35:29: f1:f9:e3:23:9f:3d:78:6b:f4:12:02:41:c8:3b:a4: a5:94:04:e9:48:ec:65:47:a1:b9:ef:6f:fc:d6:33: 28:0d:32:02:a8:90:6a:1b:dd:04:ff:70:bc:50:a4: 17:5a:d2:e4:e9:bb:da:d9:9a:c7:af:b6:9d:81:18: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6A:45:DA:DC:91:25:C8:6D:DA:40:C9:8E:FA:21:84:EB:1F:22:0A X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:80:b5:19:e6:99:6c:d8:6b:8c:56:31:a4:4c:47:d2:60:45: 38:8f:f6:7c:88:17:ce:a5:8c:d1:08:28:c4:9a:81:7f:52:0b: b8:75:0a:24:19:cf:35:12:02:8d:2a:8f:6d:7a:16:ac:6c:40: c6:36:f2:e6:4a:4f:29:a6:49:36:75:90:23:07:4b:4f:e9:30: 2d:5d:18:cc:9d:58:95:c9:ae:81:73:ae:a2:43:9d:a0:eb:20: 9d:90:24:94:7f:06:83:a9:bb:93:7a:f4:50:e7:fe:e3:1e:14: 0e:ac:83:d8:70:b7:45:6b:f5:20:5d:41:61:26:2f:fb:38:ab: d7:2d:53:2d:19:e5:e2:f8:4d:4f:75:69:e5:2d:e8:27:f5:1c: be:01:39:ab:1f:04:25:48:12:f4:59:10:4d:bd:ce:a8:e7:17: 5a:e0:dd:f7:94:4c:10:10:06:02:ae:b5:a6:47:93:24:20:f5: ec:0c:37:9a:9d:8d:be:8e:3b:f1:05:bb:33:90:38:fb:6f:a8: 09:b6:8c:e9:0e:85:12:1a:19:da:3b:b7:22:6f:07:3c:6d:b7: a2:c8:fd:2f:29:ea:9f:7a:e0:66:2b:94:c7:5b:43:92:b3:f7: 34:1f:1d:0e:87:6d:83:73:72:98:23:c6:2a:dd:a5:95:d9:96: 11:3b:80:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjUxMDE4MjAxODI3WhcNMjUxMDI1MjAxODI3WjAYMRYwFAYD VQQDEw02OGYzZjYxMy04ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOO1sB6qHpP8w8iSSZlgmxmqHacHVp6OS20UqbtKHjvw6cE0KGq7dpjS97PH dVxKAV6L4FeJspbBBpOcIBThqHlE1Lg9nlhxQ5goI7uU1uVidq4ayC+O4oWutQP7 XmOrojO3E/33HL4lE1ItG89e4EsEfaISF23K4e6K3YmwPOwnWx0rkAcKsn2IDeqs GFV0f2014O9OQhMl5CgG4YzelMqq5RNeGXoYZotWefqtXh7FHWZd6w2p9ruJT8Ge yK5JNSnx+eMjnz14a/QSAkHIO6SllATpSOxlR6G572/81jMoDTICqJBqG90E/3C8 UKQXWtLk6bva2ZrHr7adgRgQdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtqRdrc kSXIbdpAyY76IYTrHyIKMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhgLUZ5pls2GuMVjGkTEfSYEU4j/Z8iBfOpYzRCCjEmoF/Ugu4dQok Gc81EgKNKo9tehasbEDGNvLmSk8ppkk2dZAjB0tP6TAtXRjMnViVya6Bc66iQ52g 6yCdkCSUfwaDqbuTevRQ5/7jHhQOrIPYcLdFa/UgXUFhJi/7OKvXLVMtGeXi+E1P dWnlLegn9Ry+ATmrHwQlSBL0WRBNvc6o5xda4N33lEwQEAYCrrWmR5MkIPXsDDea nY2+jjvxBbszkDj7b6gJtozpDoUSGhnaO7cibwc8bbeiyP0vKeqfeuBmK5THW0OS s/c0Hx0Oh22Dc3KYI8Yq3aWV2ZYRO4B6 -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:07 2025 by rpki-client