$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: KFmMRAcqa6WN7TS2TCZpuipQ+Q7SxWAAgPgbJdH0TUs= Subject key identifier: 09:05:E0:1B:39:85:AD:E7:AF:39:41:6E:8C:FF:7C:F0:4B:9C:0E:AE Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: AC Signing time: Mon 03 Nov 2025 06:08:48 +0000 Manifest this update: Mon 03 Nov 2025 06:08:47 +0000 Manifest next update: Mon 10 Nov 2025 06:08:47 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: Qp/36spdP9EUAUgy+Zg2Ta5JboH897aW39eBYYVB6lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Nov 3 06:08:47 2025 GMT Not After : Nov 10 06:08:47 2025 GMT Subject: CN=690846f0-9573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:7a:72:a9:bf:f4:aa:45:60:f3:00:6b:1e: 72:99:dd:0f:8a:e2:7b:25:d2:de:10:ed:08:6f:9b: 1e:77:0b:e1:ca:f1:0f:f6:71:12:4e:33:6b:91:bb: 55:3a:fb:d7:58:b3:a5:45:15:62:e8:14:e7:77:61: b6:93:fe:73:ed:dd:43:26:c7:f8:ef:93:e8:ca:16: 4b:65:4b:9f:d9:84:4f:6b:1c:e9:2e:74:97:3a:0b: 20:95:59:e1:c0:62:f6:d4:64:3b:dd:e9:2d:2d:27: 42:54:1f:97:9e:fe:64:d4:a1:4b:a7:de:10:06:4e: b0:40:df:70:ac:ce:e6:a2:7a:6b:e7:b3:fb:79:ac: 2a:10:ba:c2:b9:1e:87:80:0c:fa:76:de:e3:8c:88: 6f:9b:56:75:92:22:2b:5a:c0:19:e9:67:4a:ff:34: 17:ae:bf:a0:68:07:7f:a1:9a:e6:c0:4f:32:33:b2: c9:5e:e2:7c:d1:1f:9e:54:85:99:68:29:4b:f9:d0: 11:4b:17:84:e6:e2:f5:ff:ad:46:b2:ae:ec:0f:e7: 23:da:be:a0:dc:51:2e:f9:91:fd:4b:e2:0d:d3:a5: 58:38:4d:62:c7:52:99:89:fb:9f:d0:a3:08:0b:7a: b7:8a:fb:25:36:58:2c:fe:98:4b:79:d5:f5:73:c1: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:E0:1B:39:85:AD:E7:AF:39:41:6E:8C:FF:7C:F0:4B:9C:0E:AE X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7d:b7:2d:db:e7:b9:96:1a:80:8c:ca:80:12:4d:79:e7:05: 37:ff:f3:e0:56:2e:20:fd:67:93:ed:68:af:52:cf:29:32:5c: 47:6f:c7:86:e6:dc:56:47:d8:47:da:d6:65:45:d3:e9:15:2d: 80:1d:0b:6b:1b:30:92:39:8c:6b:dd:f4:77:64:9b:55:92:65: 93:c2:ee:44:cc:d1:b0:11:2a:b0:85:b8:f5:ea:6c:48:de:77: a3:ee:30:0f:8c:f0:be:10:d4:8c:6b:40:ea:d4:b9:2d:3d:31: d9:45:eb:33:ef:88:6d:b7:f7:ce:1c:88:24:3c:bc:6d:15:6e: 8c:1e:8b:ff:dd:a3:fc:d1:11:36:ee:14:06:0b:a9:7a:59:77: 32:31:11:b5:aa:17:6d:f7:3b:b4:6a:8a:c2:8b:03:0d:53:17: 17:85:c1:83:e5:a5:d6:cd:64:0d:fd:0f:9a:7b:0c:9e:b5:43: 4a:7b:46:eb:9b:50:40:44:95:2d:5b:5f:c5:bb:e3:3d:34:24: 47:d1:f9:27:9b:0d:63:74:9a:69:71:ea:00:22:c3:34:0c:05: d3:d8:90:fc:80:29:c1:a9:ef:fa:7d:d0:3c:54:0c:6c:ce:a0: 4e:67:4a:0b:60:00:be:e3:a0:97:53:b7:20:0b:26:da:28:9e: 75:7f:69:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUxMTAzMDYwODQ3WhcNMjUxMTEwMDYwODQ3WjAYMRYwFAYD VQQDEw02OTA4NDZmMC05NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ56cqm/9KpFYPMAax5ymd0PiuJ7JdLeEO0Ib5sedwvhyvEP9nESTjNrkbtV OvvXWLOlRRVi6BTnd2G2k/5z7d1DJsf475PoyhZLZUuf2YRPaxzpLnSXOgsglVnh wGL21GQ73ektLSdCVB+Xnv5k1KFLp94QBk6wQN9wrM7monpr57P7eawqELrCuR6H gAz6dt7jjIhvm1Z1kiIrWsAZ6WdK/zQXrr+gaAd/oZrmwE8yM7LJXuJ80R+eVIWZ aClL+dARSxeE5uL1/61Gsq7sD+cj2r6g3FEu+ZH9S+IN06VYOE1ix1KZifuf0KMI C3q3ivslNlgs/phLedX1c8HtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkF4Bs5 ha3nrzlBboz/fPBLnA6uMB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBfbct2+e5lhqAjMqAEk155wU3//PgVi4g/WeT7WivUs8pMlxHb8eG 5txWR9hH2tZlRdPpFS2AHQtrGzCSOYxr3fR3ZJtVkmWTwu5EzNGwESqwhbj16mxI 3nej7jAPjPC+ENSMa0Dq1LktPTHZResz74htt/fOHIgkPLxtFW6MHov/3aP80RE2 7hQGC6l6WXcyMRG1qhdt9zu0aorCiwMNUxcXhcGD5aXWzWQN/Q+aewyetUNKe0br m1BARJUtW1/Fu+M9NCRH0fknmw1jdJppceoAIsM0DAXT2JD8gCnBqe/6fdA8VAxs zqBOZ0oLYAC+46CXU7cgCybaKJ51f2k0 -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:50 2025 by rpki-client