$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: pFmjQtWLwDnJa6NWaxgvsWh8BtK5F1GLJIM2ZL9unsc= Subject key identifier: 04:45:2C:91:96:B3:8E:FF:C0:71:75:58:9F:49:61:33:1B:F1:CD:F8 Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 1736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 172C Signing time: Tue 04 Nov 2025 16:43:14 +0000 Manifest this update: Tue 04 Nov 2025 16:43:13 +0000 Manifest next update: Tue 11 Nov 2025 16:43:13 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: pJjG4Ey2WAlsSlKKqsrLbfyjmkgLCnWKQk1WQzG2uRM=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5942 (0x1736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Nov 4 16:43:13 2025 GMT Not After : Nov 11 16:43:13 2025 GMT Subject: CN=690a2d21-4d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:b3:02:a3:65:bc:32:f2:76:8b:97:6b:b2: 14:83:fd:b2:94:28:a6:d4:c8:ef:01:34:a7:dc:79: 8b:4f:3c:ff:cc:c2:6e:4d:fc:8f:9f:53:d5:6c:38: 1e:32:d2:91:40:83:8a:90:db:1c:37:1e:27:c3:88: 5d:5a:3c:7d:e6:af:c0:59:bb:86:e6:5a:70:a2:23: cf:dc:05:df:49:26:1b:f7:c4:e9:d0:a5:d8:30:c7: 61:e6:0e:5b:9b:00:8d:58:f3:6a:61:32:b6:2b:88: 75:44:11:b1:ca:2e:74:ce:d9:0c:86:4a:a5:d6:33: 63:83:0e:86:9d:a6:9f:99:da:c1:35:9f:fc:93:8e: 5d:81:e0:32:37:18:2a:ac:20:8e:a4:0d:c3:13:a0: ef:6d:7c:d1:ea:ff:ed:89:d3:5a:8d:d5:b8:8d:f2: 47:f8:52:3b:65:fa:34:5e:cd:df:33:85:7c:f8:87: 17:ff:59:ff:d1:8c:d0:68:b3:fa:70:0d:f3:d1:e2: e7:bf:8b:24:1a:e4:14:cb:fc:b2:78:ba:81:d9:11: c0:ff:3a:43:e5:7e:f4:64:b5:b0:93:1a:41:38:f9: de:22:44:52:56:b5:ed:0c:f7:45:20:14:22:4d:04: a6:a6:17:9c:41:b9:d6:1f:f7:09:83:8f:c9:83:e3: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:45:2C:91:96:B3:8E:FF:C0:71:75:58:9F:49:61:33:1B:F1:CD:F8 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e6:ea:2d:08:d1:86:55:e5:92:e5:ef:a6:59:97:6d:e2:5a: 6a:9c:fc:61:94:fc:57:07:be:99:20:dc:f2:c6:71:75:61:f5: 10:f8:1d:31:7e:27:fb:c3:f4:5b:86:40:e5:a6:e0:d2:cd:d5: 31:89:ad:79:a7:22:5f:6a:84:47:b2:72:10:ac:bf:a5:92:d9: 89:16:d9:af:12:1a:1a:ce:cc:5e:c0:aa:0d:88:ef:1f:39:ae: fb:e7:da:4d:24:ee:9f:bb:ac:64:c5:c5:62:1a:40:84:a2:ec: d5:0d:0c:e7:3d:87:e7:ff:7e:0a:e2:d6:96:fa:00:3c:d9:dc: cc:9a:d0:cb:c5:08:1d:38:73:52:af:54:1f:68:df:64:d3:e3: f1:54:2c:7f:e0:c6:48:76:49:eb:c1:fa:aa:8c:a6:b6:43:58: e6:0e:18:44:03:a9:d1:e3:13:b8:c2:72:c6:ee:35:22:41:74: 71:40:88:ba:6a:2d:ba:3e:84:2b:5f:c2:55:37:04:fe:7a:0c: 1f:3e:14:8b:fd:54:15:57:65:18:b4:1c:a6:cf:3f:6c:0c:7d: ee:4b:b5:91:cd:da:a7:05:2e:8d:0a:c6:e7:94:1d:6b:37:00: a2:3e:2e:4c:63:c1:4e:71:51:f2:39:fc:59:32:53:bd:cf:47: 02:72:3b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUxMTA0MTY0MzEzWhcNMjUxMTExMTY0MzEzWjAYMRYwFAYD VQQDEw02OTBhMmQyMS00ZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnF2zAqNlvDLydouXa7IUg/2ylCim1MjvATSn3HmLTzz/zMJuTfyPn1PVbDge MtKRQIOKkNscNx4nw4hdWjx95q/AWbuG5lpwoiPP3AXfSSYb98Tp0KXYMMdh5g5b mwCNWPNqYTK2K4h1RBGxyi50ztkMhkql1jNjgw6GnaafmdrBNZ/8k45dgeAyNxgq rCCOpA3DE6DvbXzR6v/tidNajdW4jfJH+FI7Zfo0Xs3fM4V8+IcX/1n/0YzQaLP6 cA3z0eLnv4skGuQUy/yyeLqB2RHA/zpD5X70ZLWwkxpBOPneIkRSVrXtDPdFIBQi TQSmphecQbnWH/cJg4/Jg+OzJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARFLJGW s47/wHF1WJ9JYTMb8c34MB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5uotCNGGVeWS5e+mWZdt4lpqnPxhlPxXB76ZINzyxnF1YfUQ+B0x fif7w/RbhkDlpuDSzdUxia15pyJfaoRHsnIQrL+lktmJFtmvEhoazsxewKoNiO8f Oa7759pNJO6fu6xkxcViGkCEouzVDQznPYfn/34K4taW+gA82dzMmtDLxQgdOHNS r1QfaN9k0+PxVCx/4MZIdknrwfqqjKa2Q1jmDhhEA6nR4xO4wnLG7jUiQXRxQIi6 ai26PoQrX8JVNwT+egwfPhSL/VQVV2UYtBymzz9sDH3uS7WRzdqnBS6NCsbnlB1r NwCiPi5MY8FOcVHyOfxZMlO9z0cCcjuZ -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:38 2025 by rpki-client