$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json) Hash identifier: D2gm1iud33p++hEy9uJMyrroZtgAPYsvTYeDl6LsTW8= Subject key identifier: 9E:2A:7E:02:C5:52:37:93:AA:C7:BE:5A:0F:1A:1C:09:D2:54:0E:F8 Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft Manifest number: 4D Signing time: Wed 05 Nov 2025 07:30:43 +0000 Manifest this update: Wed 05 Nov 2025 07:30:42 +0000 Manifest next update: Wed 12 Nov 2025 07:30:42 +0000 Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: G5j1OqIUP4pmQH2tFmXzvtDo8IihIjb8zfoNHJWPBhc=) 2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: WRJujiiFl5+2lSEzqzn6bhm3g2H9MHSY7ug8yl3Oc8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Nov 5 07:30:42 2025 GMT Not After : Nov 12 07:30:42 2025 GMT Subject: CN=690afd22-9120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:a4:3e:26:b0:c5:cf:ba:64:fa:7a:36:5d: 24:50:36:ba:2b:c6:e8:74:3e:0d:9a:c5:96:47:db: 2f:d2:5b:a1:40:02:30:2a:b2:9b:3c:7b:d9:c3:a2: 24:e6:7a:6c:08:d1:01:cd:02:54:62:82:bc:7b:cd: 94:6f:ba:af:1f:6c:96:8a:ac:b8:de:bc:c4:5f:b3: 9f:58:a5:ab:ab:71:06:75:69:ee:a4:a9:2f:8b:b7: 1b:8b:ad:42:58:7e:37:2b:5a:04:9c:29:ef:62:da: 14:73:96:f3:9e:16:ca:cd:84:fe:c3:f2:9e:7a:1b: e5:58:48:07:88:ba:db:48:f0:9f:0d:87:43:c3:2e: 8f:2f:be:9b:c8:e2:52:be:7c:fb:a1:73:d7:31:2f: 04:0e:52:05:8b:bb:ae:ee:46:e6:8b:79:28:26:a7: 6c:fb:14:c3:b3:47:93:03:c8:f0:8c:af:5b:e9:1e: a0:49:a1:4a:28:18:8a:ef:79:a0:ed:dc:ee:07:4a: 8f:f7:a3:12:7c:b9:24:fb:21:9a:45:c6:c9:f8:ad: 0f:f7:11:1e:08:9f:c6:d2:d4:cd:e7:4d:0c:2c:a8: fc:6b:54:52:02:0f:ca:11:a8:0e:3f:e1:7b:e9:3e: 8a:36:05:bb:b4:47:36:d0:e8:68:f0:b5:36:f2:ba: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2A:7E:02:C5:52:37:93:AA:C7:BE:5A:0F:1A:1C:09:D2:54:0E:F8 X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7e:41:9a:4d:4d:dc:b3:d8:4f:3b:4c:15:cd:7b:27:da:f2: da:86:a7:e7:a2:7c:fb:42:58:0b:2c:08:58:14:bf:f0:d3:51: 48:38:29:22:d3:12:c5:9d:54:23:49:9f:29:2f:ca:d4:26:2d: f3:56:eb:d2:e9:5b:15:98:39:8b:db:79:3f:9e:7a:c2:f7:4d: 88:ce:8c:49:18:50:e0:af:51:08:fd:d9:49:c2:0a:94:a5:9c: f4:6c:a3:f3:27:b1:f9:5c:65:e0:7a:f3:f5:38:35:49:35:60: 9b:b1:0a:c7:d0:e6:55:e6:cd:88:aa:7a:50:1b:ed:11:09:9b: b9:5f:5f:76:7f:4f:f0:c8:05:a8:0d:70:43:35:32:d3:75:89: 8e:8b:1e:2d:8b:fa:2f:6d:97:54:a1:d7:9c:73:28:1c:aa:7b: 6d:7d:38:7d:62:a9:73:c5:a0:c7:b9:fd:73:38:82:24:e8:12: 3a:5b:ea:6a:cd:63:70:69:6a:af:9b:b9:36:6f:94:1b:ac:ee: dc:ef:77:b8:e7:7f:b2:ee:42:0c:d8:ea:57:b2:01:be:88:ae: 74:b7:97:3b:22:57:35:88:f9:12:b0:e2:a7:7d:bc:3e:49:20: 51:ad:70:e6:0a:ed:43:a0:a8:5f:64:25:dc:42:9e:8e:5c:39: f7:13:42:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJEQjQ4NzI0OTgz NTRCNEFGRDAeFw0yNTExMDUwNzMwNDJaFw0yNTExMTIwNzMwNDJaMBgxFjAUBgNV BAMTDTY5MGFmZDIyLTkxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU36Q+JrDFz7pk+no2XSRQNrorxuh0Pg2axZZH2y/SW6FAAjAqsps8e9nDoiTm emwI0QHNAlRigrx7zZRvuq8fbJaKrLjevMRfs59YpaurcQZ1ae6kqS+LtxuLrUJY fjcrWgScKe9i2hRzlvOeFsrNhP7D8p56G+VYSAeIuttI8J8Nh0PDLo8vvpvI4lK+ fPuhc9cxLwQOUgWLu67uRuaLeSgmp2z7FMOzR5MDyPCMr1vpHqBJoUooGIrveaDt 3O4HSo/3oxJ8uST7IZpFxsn4rQ/3ER4In8bS1M3nTQwsqPxrVFICD8oRqA4/4Xvp Poo2Bbu0RzbQ6GjwtTbyugktAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnip+AsVS N5Oqx75aDxocCdJUDvgwHwYDVR0jBBgwFoAUaMIYjATCDkkjq7YttIckmDVLSv0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzVCMUMxRkFFNDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYU1JWWpBVENEa2tqcTdZdHRJY2ttRFZMU3YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtr anE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9+QZpNTdyz2E87TBXNeyfa8tqGp+eifPtCWAssCFgUv/DTUUg4KSLT EsWdVCNJnykvytQmLfNW69LpWxWYOYvbeT+eesL3TYjOjEkYUOCvUQj92UnCCpSl nPRso/MnsflcZeB68/U4NUk1YJuxCsfQ5lXmzYiqelAb7REJm7lfX3Z/T/DIBagN cEM1MtN1iY6LHi2L+i9tl1Sh15xzKByqe219OH1iqXPFoMe5/XM4giToEjpb6mrN Y3Bpaq+buTZvlBus7tzvd7jnf7LuQgzY6leyAb6IrnS3lzsiVzWI+RKw4qd9vD5J IFGtcOYK7UOgqF9kJdxCno5cOfcTQmM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:41 2025 by rpki-client