$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft File: Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json) Hash identifier: bZq8AgKnl7uoEZRnwL3hCyaegB7H8/2KjW+WZ/TPhKc= Subject key identifier: FE:34:AE:63:D6:EB:0F:13:B2:AC:86:FB:82:5A:27:26:66:D6:E6:AB Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft Manifest number: 65 Signing time: Wed 05 Nov 2025 07:13:08 +0000 Manifest this update: Wed 05 Nov 2025 07:13:08 +0000 Manifest next update: Wed 12 Nov 2025 07:13:08 +0000 Files and hashes: 1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: Fi8iXyOKJct0Y1dx3XWAOKPwpEsP0rV09p4Ev+gY1MM=) 2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=) 3: 874D690486F911F0AEE9D81BC4F9AE02.roa (hash: d/YokLZlSeyNxo7/k+XKoCvVYm4Hgi7kRhirRzPKQaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Validity Not Before: Nov 5 07:13:08 2025 GMT Not After : Nov 12 07:13:08 2025 GMT Subject: CN=690af904-885d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:2c:f7:b5:6e:aa:1a:fb:94:3d:20:ef:e6: b0:48:c9:06:39:b7:c2:d1:51:45:80:93:4d:88:e4: ef:01:45:1c:4e:c9:e5:ba:5f:9b:f0:9e:b2:cf:0d: ed:d8:ac:48:a2:d9:6a:3b:ac:27:9d:55:41:58:d9: ea:b1:12:e9:78:4f:be:af:24:22:9f:f2:45:d9:99: 73:91:c9:de:db:bf:8b:b0:ba:51:e8:11:50:c9:48: 46:fd:37:b9:ea:61:ea:77:92:e9:c6:b9:cf:28:75: a1:17:f1:75:81:e5:e4:e4:12:8a:68:94:df:83:27: d7:e4:a8:b0:60:74:a0:49:40:11:e1:c3:05:dd:ab: 83:68:4d:3a:00:79:14:9f:f5:58:42:c9:20:71:77: 59:97:32:66:42:ea:d7:e2:33:44:b9:80:24:cf:3f: 5d:1d:c8:1d:61:69:ba:ec:79:3a:ca:5c:03:15:d7: 21:4a:63:64:77:f6:b8:e9:5e:81:2c:24:99:fd:cb: 4d:5c:53:dd:69:f5:99:2f:42:ee:60:ae:e5:1f:92: 92:3c:3d:d2:22:96:65:9e:02:aa:a4:a4:b2:d0:98: 56:5c:47:f2:0b:79:a7:e3:06:0f:b6:04:ed:2e:72: db:e9:d9:71:4b:48:b0:b9:72:d2:25:8b:25:06:c5: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:34:AE:63:D6:EB:0F:13:B2:AC:86:FB:82:5A:27:26:66:D6:E6:AB X509v3 Authority Key Identifier: keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:26:66:e0:05:f8:8d:22:12:24:5d:18:b0:8b:40:eb:c2:4c: 1b:de:f5:c8:ed:70:bc:1f:3f:e5:97:ff:d6:37:3d:75:f8:71: 5a:97:b9:04:1f:aa:21:c9:26:c3:f9:80:29:60:e2:a2:8c:06: 99:45:a3:aa:be:29:ec:57:93:21:28:03:a4:6c:63:2e:f5:98: 45:c4:9e:d3:dd:f1:ad:32:48:38:a5:3f:d9:8b:84:8c:99:e5: d9:48:0c:39:b1:d4:46:ae:51:88:c5:2a:85:76:a3:8d:d6:00: e1:8a:ed:b3:10:16:a6:de:83:a6:e4:7d:fb:aa:1e:ba:22:e4: 8d:45:21:e7:1a:4d:ad:91:e1:13:a1:c7:d4:4e:20:4c:70:2d: b8:29:aa:64:27:3c:53:5f:e4:37:ba:03:7e:7d:7c:a9:8b:af: 96:ed:77:17:31:a8:f7:9f:52:d5:05:b8:73:06:c4:2d:29:b9: 47:8e:62:9b:ea:78:01:9e:3e:db:2f:18:45:d6:b1:cf:57:4f: 35:8b:30:f7:7a:0b:52:b1:d8:14:7a:79:b4:c3:f1:0f:04:0b: 78:93:cf:4c:6d:13:e5:61:7d:e7:bb:da:13:bb:75:a2:45:be: bb:c3:a7:68:a8:ed:99:c7:d3:90:8d:10:10:30:1a:9a:19:42: f4:22:84:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUI5RDExMC8GA1UEBRMoMjI1ODdDQzJDQjZGMzUxMDYzNzgzRkIxQ0ZEQTY2RTQ0 RTJFQ0FDMTAeFw0yNTExMDUwNzEzMDhaFw0yNTExMTIwNzEzMDhaMBgxFjAUBgNV BAMTDTY5MGFmOTA0LTg4NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNVSz3tW6qGvuUPSDv5rBIyQY5t8LRUUWAk02I5O8BRRxOyeW6X5vwnrLPDe3Y rEii2Wo7rCedVUFY2eqxEul4T76vJCKf8kXZmXORyd7bv4uwulHoEVDJSEb9N7nq Yep3kunGuc8odaEX8XWB5eTkEopolN+DJ9fkqLBgdKBJQBHhwwXdq4NoTToAeRSf 9VhCySBxd1mXMmZC6tfiM0S5gCTPP10dyB1habrseTrKXAMV1yFKY2R39rjpXoEs JJn9y01cU91p9ZkvQu5gruUfkpI8PdIilmWeAqqkpLLQmFZcR/ILeafjBg+2BO0u ctvp2XFLSLC5ctIliyUGxRNtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/jSuY9br DxOyrIb7glonJmbW5qswHwYDVR0jBBgwFoAUIlh8wstvNRBjeD+xz9pm5E4uysEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5QjlELzI0MDJGQjA4MUU2 MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJCamVELXh6OXBtNUU0dXlz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWxoOHdzdHZOUkJqZUQteHo5cG01RTR1eXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 QjlELzI0MDJGQjA4MUU2MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJC amVELXh6OXBtNUU0dXlzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYmZuAF+I0iEiRdGLCLQOvCTBve9cjtcLwfP+WX/9Y3PXX4cVqXuQQf qiHJJsP5gClg4qKMBplFo6q+KexXkyEoA6RsYy71mEXEntPd8a0ySDilP9mLhIyZ 5dlIDDmx1EauUYjFKoV2o43WAOGK7bMQFqbeg6bkffuqHroi5I1FIecaTa2R4ROh x9ROIExwLbgpqmQnPFNf5De6A359fKmLr5btdxcxqPefUtUFuHMGxC0puUeOYpvq eAGePtsvGEXWsc9XTzWLMPd6C1Kx2BR6ebTD8Q8EC3iTz0xtE+Vhfee72hO7daJF vrvDp2io7ZnH05CNEBAwGpoZQvQihD8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:20 2025 by rpki-client