$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: 0x7CIqpDB7RKcXNbHADxCMi6F/DuavsHP0lcRkc3y98= Subject key identifier: 05:96:B4:5A:31:50:92:6A:EB:5F:86:27:AB:C9:9B:FE:29:2A:01:03 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 046E Signing time: Wed 05 Nov 2025 00:25:00 +0000 Manifest this update: Wed 05 Nov 2025 00:25:00 +0000 Manifest next update: Wed 12 Nov 2025 00:25:00 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: Jg2Cu8gsRrrVJi6Sj4CwLFPRWJiafAKjH3yphGMtK9U=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 6: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Nov 5 00:25:00 2025 GMT Not After : Nov 12 00:25:00 2025 GMT Subject: CN=690a995c-f0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:28:c3:16:7f:23:e5:a8:c5:5a:1f:e4:85: 15:98:a5:e7:ab:07:7a:c8:5f:aa:d4:1f:b5:66:c1: 3f:ca:db:00:a4:e3:bc:07:d0:c7:f0:d9:d3:6e:4b: 7d:f4:de:6e:92:59:5e:5d:b2:03:23:02:e4:0a:af: ea:17:ed:27:bd:d2:e6:cf:f9:7f:b7:69:f6:2d:21: 6e:59:b2:bd:2d:fa:08:e9:59:d1:98:46:d7:73:3e: f3:4f:2b:c1:2a:8d:d4:9f:25:f0:0f:47:ac:0d:5c: c7:0a:bf:1a:0c:48:84:ab:f7:0a:e0:91:15:70:06: aa:fd:28:5c:10:b3:a7:8b:60:20:7a:e8:c8:50:b6: a4:a0:9a:27:2a:1c:36:08:14:7d:07:1f:42:56:78: 43:76:01:4c:9b:1d:da:f2:5b:2f:0f:77:05:88:ce: f6:e2:11:9c:c1:e8:9d:84:0e:54:f7:0f:e1:79:43: 46:b0:6b:13:49:83:12:04:9c:02:c6:bf:56:6c:b9: 4a:f7:7f:bf:33:b1:f8:2b:14:25:73:45:09:b2:80: 34:82:cc:3b:6f:ea:61:03:e7:2f:d8:89:67:e7:d7: 5e:11:06:58:19:9d:f6:b1:92:92:fb:5c:36:af:de: e6:25:ed:bb:98:4b:f7:26:b5:b9:77:4e:db:66:11: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:96:B4:5A:31:50:92:6A:EB:5F:86:27:AB:C9:9B:FE:29:2A:01:03 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5d:d7:93:fc:55:50:ce:ac:84:65:f7:e7:a6:b6:eb:de:07: c5:4d:b5:1e:62:fd:52:29:cb:e7:e4:d0:e3:2f:1d:63:35:a2: 79:6e:0a:69:55:4e:88:f4:bd:b8:4b:ff:e2:3a:fb:af:35:36: 9c:b9:d8:da:ab:7a:18:05:d8:a9:c5:b8:e6:8b:54:48:09:64: 65:37:ca:8f:2c:77:0b:c7:7f:67:5b:45:72:f4:a2:7c:b7:30: 96:f8:1a:ae:85:17:02:ba:90:6e:b5:bc:65:3f:a7:c9:0f:bd: c6:ac:52:1d:79:98:2f:4a:2c:f1:c7:93:15:5f:7f:32:46:18: e3:61:55:d2:dd:e8:f9:0b:b0:08:96:72:1d:6a:62:57:a4:4d: c7:cf:e4:0d:df:da:ed:ea:01:7b:64:74:81:b4:f2:c4:b2:b4: ab:a3:a2:b9:9d:ce:97:25:07:72:c4:77:1e:d7:9c:83:78:6d: db:04:d0:cb:94:1b:ba:3a:59:a8:e2:95:8f:13:90:ab:2d:19: 67:86:e8:65:a1:7c:2b:e4:4c:09:ef:82:9b:ce:59:81:b6:d0: 90:f7:aa:59:42:29:7f:42:c5:c6:bc:30:41:f2:22:c5:e0:da: c5:3c:f7:65:cd:87:c2:02:94:f0:4c:a8:b6:f3:4a:ee:03:2b: 7f:53:f7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUxMTA1MDAyNTAwWhcNMjUxMTEyMDAyNTAwWjAYMRYwFAYD VQQDEw02OTBhOTk1Yy1mMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NEowxZ/I+WoxVof5IUVmKXnqwd6yF+q1B+1ZsE/ytsApOO8B9DH8NnTbkt9 9N5uklleXbIDIwLkCq/qF+0nvdLmz/l/t2n2LSFuWbK9LfoI6VnRmEbXcz7zTyvB Ko3UnyXwD0esDVzHCr8aDEiEq/cK4JEVcAaq/ShcELOni2AgeujIULakoJonKhw2 CBR9Bx9CVnhDdgFMmx3a8lsvD3cFiM724hGcweidhA5U9w/heUNGsGsTSYMSBJwC xr9WbLlK93+/M7H4KxQlc0UJsoA0gsw7b+phA+cv2Iln59deEQZYGZ32sZKS+1w2 r97mJe27mEv3JrW5d07bZhGaKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWWtFox UJJq61+GJ6vJm/4pKgEDMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWXdeT/FVQzqyEZffnprbr3gfFTbUeYv1SKcvn5NDjLx1jNaJ5bgpp VU6I9L24S//iOvuvNTacudjaq3oYBdipxbjmi1RICWRlN8qPLHcLx39nW0Vy9KJ8 tzCW+BquhRcCupButbxlP6fJD73GrFIdeZgvSizxx5MVX38yRhjjYVXS3ej5C7AI lnIdamJXpE3Hz+QN39rt6gF7ZHSBtPLEsrSro6K5nc6XJQdyxHce15yDeG3bBNDL lBu6Olmo4pWPE5CrLRlnhuhloXwr5EwJ74KbzlmBttCQ96pZQil/QsXGvDBB8iLF 4NrFPPdlzYfCApTwTKi280ruAyt/U/fo -----END CERTIFICATE-----Generated at Wed Nov 5 11:24:54 2025 by rpki-client