$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: ZyKEsiz8rhiLJQMbt/bPwEzYDe9dER8COCA1GOvcEZg= Subject key identifier: C2:09:71:C0:E9:A4:E1:BF:42:6A:EA:50:B7:1C:AF:23:7F:F1:99:4E Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: 0105 Signing time: Mon 03 Nov 2025 05:01:41 +0000 Manifest this update: Mon 03 Nov 2025 05:01:40 +0000 Manifest next update: Mon 10 Nov 2025 05:01:40 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: +3uGMfXZhU/s/eOcUvFLYBwvq+0kthOhcAYYyZk/QCE=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Nov 3 05:01:40 2025 GMT Not After : Nov 10 05:01:40 2025 GMT Subject: CN=69083735-df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:a0:0c:6d:cc:f7:44:f4:3d:11:c6:72:74: 89:a8:91:80:fe:ce:7e:97:e7:04:a6:14:e9:4a:d7: db:33:2a:23:3a:ca:e3:66:8e:42:56:d4:e3:56:ee: 0c:26:23:ca:69:55:6f:fd:36:1b:77:ff:22:be:04: b2:37:2f:e8:70:9c:51:92:39:19:cf:0c:11:06:2f: 56:32:24:67:51:08:8e:31:db:76:56:2b:42:9b:cc: 24:2a:54:00:99:0d:95:b3:94:9f:2c:ea:a5:48:59: ea:ed:11:83:01:eb:73:0b:26:b4:67:11:bb:b2:18: 56:a0:b3:f5:5d:f5:e2:b4:1e:e9:24:78:18:ef:32: 59:ed:8b:c8:97:94:e0:ad:23:7a:c0:7c:cb:b2:97: 33:e3:e8:97:57:0a:a8:69:e0:36:b6:43:8e:fc:50: ba:ab:ac:19:f5:3f:84:05:2c:0c:d1:08:86:79:ec: e8:12:b6:98:5e:75:1b:5b:68:3f:f3:84:93:51:40: 24:6f:be:b2:be:f8:28:51:90:24:06:7a:99:88:cb: 5f:e4:33:45:b9:af:45:e0:7d:90:d0:81:6f:f7:60: 67:46:85:76:10:49:e3:f0:9b:1d:c5:55:1d:d4:4c: 6d:e0:08:72:f6:12:7e:63:3a:e8:8d:35:53:71:39: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:71:C0:E9:A4:E1:BF:42:6A:EA:50:B7:1C:AF:23:7F:F1:99:4E X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ef:ce:16:74:42:6b:72:46:5c:2d:71:c5:bf:ce:ff:6b:e2: e5:c0:f4:71:dd:ae:21:08:cf:68:ef:51:02:98:47:ee:33:d6: 09:b3:e6:bc:16:52:bc:c3:fb:5d:6e:f1:35:76:30:62:3d:1d: 8b:3b:35:0f:6b:ba:52:d0:6e:a5:26:26:b4:f3:60:ba:69:27: 76:46:6e:49:0f:3b:eb:02:01:65:1c:a9:1c:19:56:e7:15:75: 31:b3:2a:81:50:ba:a5:1f:71:67:74:66:e9:c8:51:80:15:3f: 8f:a2:b5:0e:eb:a8:9d:34:37:aa:40:77:03:6b:9f:30:02:7b: f1:0c:0c:62:5d:80:a1:de:1f:0b:87:77:28:87:34:05:a2:7c: 0d:2c:0e:08:1c:73:f9:e9:1b:5c:37:cd:f0:e2:58:91:a5:77: c8:b1:9f:0f:9c:e4:86:5e:5a:5a:30:fa:d1:b7:a3:18:3e:0f: e5:94:1a:64:7f:a9:85:ba:b8:2d:84:ae:de:26:37:58:9c:b6: ae:51:a7:3a:60:cc:a8:01:49:2f:a1:54:cb:30:3f:d5:57:21: 46:30:8c:37:89:f1:3e:18:dd:fc:62:fa:74:ec:7c:b3:5d:23: 2d:09:d4:09:b7:ae:ee:1d:40:b6:88:da:dc:51:0d:70:bb:aa: 7c:7c:0d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUxMTAzMDUwMTQwWhcNMjUxMTEwMDUwMTQwWjAYMRYwFAYD VQQDEw02OTA4MzczNS1kZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSmgDG3M90T0PRHGcnSJqJGA/s5+l+cEphTpStfbMyojOsrjZo5CVtTjVu4M JiPKaVVv/TYbd/8ivgSyNy/ocJxRkjkZzwwRBi9WMiRnUQiOMdt2VitCm8wkKlQA mQ2Vs5SfLOqlSFnq7RGDAetzCya0ZxG7shhWoLP1XfXitB7pJHgY7zJZ7YvIl5Tg rSN6wHzLspcz4+iXVwqoaeA2tkOO/FC6q6wZ9T+EBSwM0QiGeezoEraYXnUbW2g/ 84STUUAkb76yvvgoUZAkBnqZiMtf5DNFua9F4H2Q0IFv92BnRoV2EEnj8JsdxVUd 1Ext4Ahy9hJ+YzrojTVTcTkLcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIJccDp pOG/QmrqULccryN/8ZlOMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy784WdEJrckZcLXHFv87/a+LlwPRx3a4hCM9o71ECmEfuM9YJs+a8 FlK8w/tdbvE1djBiPR2LOzUPa7pS0G6lJia082C6aSd2Rm5JDzvrAgFlHKkcGVbn FXUxsyqBULqlH3FndGbpyFGAFT+PorUO66idNDeqQHcDa58wAnvxDAxiXYCh3h8L h3cohzQFonwNLA4IHHP56RtcN83w4liRpXfIsZ8PnOSGXlpaMPrRt6MYPg/llBpk f6mFurgthK7eJjdYnLauUac6YMyoAUkvoVTLMD/VVyFGMIw3ifE+GN38Yvp07Hyz XSMtCdQJt67uHUC2iNrcUQ1wu6p8fA22 -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:51 2025 by rpki-client