$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json) Hash identifier: 8kw3EFPNhpxSyXd3qboG5SDwsa3br8A5gBW4UYCFvRI= Subject key identifier: 63:33:ED:1A:1D:20:CB:12:55:B8:2E:29:C2:E6:A2:58:DD:88:20:81 Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft Manifest number: 07BE Signing time: Tue 04 Nov 2025 21:24:24 +0000 Manifest this update: Tue 04 Nov 2025 21:24:24 +0000 Manifest next update: Tue 11 Nov 2025 21:24:24 +0000 Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: y3yYiuFH7Ad5vsEKi5kpiRgLyBiKF0/AXs3xyIyujcw=) 2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: NR1SVCvj30A6pQwNp2dHbCZu3umNoMEReinsxF/kIrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Validity Not Before: Nov 4 21:24:24 2025 GMT Not After : Nov 11 21:24:24 2025 GMT Subject: CN=690a6f08-31a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:17:24:b3:95:31:51:c2:57:c0:5e:d4:22: fa:7f:1d:ec:bd:bf:2b:75:8d:43:18:74:b7:e0:b3: 43:77:49:1b:70:b6:65:73:4a:2f:98:45:e6:86:42: bb:0f:32:4c:bb:ff:b8:4d:00:11:e8:01:7e:09:09: b0:4a:01:96:f8:a9:17:35:b6:00:73:60:73:61:0b: 4b:ee:20:9a:0f:91:d7:90:89:88:9e:c4:99:39:32: 56:c3:9f:63:32:12:8f:31:92:6d:92:e4:12:63:85: 2d:78:c0:1e:54:ec:6c:3b:be:27:ad:cc:15:36:e5: e9:5b:99:c1:a4:aa:da:12:47:b7:b3:b6:df:db:52: f1:6a:7a:1e:27:2b:45:77:5e:80:d1:74:e6:ef:92: 93:ce:3d:5f:85:53:69:e3:ec:e9:32:87:2b:73:c5: f6:3c:ed:65:52:50:8c:c2:66:c3:dd:cd:e1:6b:30: 02:1d:db:f1:af:98:55:b6:87:94:7f:b5:ed:da:03: a6:94:52:03:53:18:b5:b8:8f:fd:dc:26:bc:8a:1c: 1e:4e:38:73:73:d1:d2:19:d3:45:bb:0f:53:82:b2: 7c:7d:30:bc:6d:9c:15:93:b3:5c:87:b6:3c:17:c8: 14:71:93:f7:d3:84:a2:34:b1:d6:ac:0e:fd:7b:a6: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:33:ED:1A:1D:20:CB:12:55:B8:2E:29:C2:E6:A2:58:DD:88:20:81 X509v3 Authority Key Identifier: keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b2:38:4a:61:ea:9a:af:83:c2:1d:97:8a:f5:41:9a:12:a7: 3d:9c:27:df:a9:24:a7:ba:19:6d:55:c0:05:3a:d5:10:d1:6b: 2c:3e:07:0b:49:98:47:72:16:4f:82:2d:b8:07:fe:d3:a0:a8: 92:ed:a0:96:40:5a:65:e4:b8:7f:fd:04:0b:aa:e9:a9:bd:5f: 04:00:8d:da:5d:4d:6b:f8:d2:b8:e6:8e:57:f2:d9:55:94:80: 19:fb:e7:9c:36:69:6e:c5:d9:0a:bf:f2:6a:ab:4b:c9:25:e9: ee:ff:cc:77:00:e7:18:a7:67:3d:d5:75:b0:c9:17:ff:7f:d5: bd:ea:81:67:e9:aa:1e:8e:36:1b:92:b8:af:7f:ea:62:b9:95: e3:12:c1:a5:ca:5e:c5:07:1e:ce:9c:ee:00:5a:dc:48:8c:4b: c7:64:a0:b5:d6:9b:de:af:1a:e2:c3:4a:61:bd:18:2b:e2:0d: 35:a0:f3:10:7f:76:92:27:de:a9:89:4f:92:6d:ef:1c:e9:1f: ed:d0:50:cf:a1:18:af:23:42:fb:6f:e2:f0:36:74:71:57:d0: d7:1f:15:7d:47:bb:3c:65:43:fc:47:61:9e:6d:f3:c8:e4:06: 6b:a0:70:5d:11:69:62:6a:cc:4a:f3:48:b4:22:a6:72:85:1d: 21:4f:99:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD QTNGNzlBNkIwHhcNMjUxMTA0MjEyNDI0WhcNMjUxMTExMjEyNDI0WjAYMRYwFAYD VQQDEw02OTBhNmYwOC0zMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4h0XJLOVMVHCV8Be1CL6fx3svb8rdY1DGHS34LNDd0kbcLZlc0ovmEXmhkK7 DzJMu/+4TQAR6AF+CQmwSgGW+KkXNbYAc2BzYQtL7iCaD5HXkImInsSZOTJWw59j MhKPMZJtkuQSY4UteMAeVOxsO74nrcwVNuXpW5nBpKraEke3s7bf21LxanoeJytF d16A0XTm75KTzj1fhVNp4+zpMocrc8X2PO1lUlCMwmbD3c3hazACHdvxr5hVtoeU f7Xt2gOmlFIDUxi1uI/93Ca8ihweTjhzc9HSGdNFuw9TgrJ8fTC8bZwVk7Nch7Y8 F8gUcZP304SiNLHWrA79e6YtMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMz7Rod IMsSVbguKcLmoljdiCCBMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5 MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4 VzBXTlp1T2NZTW5LUDNtbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGsjhKYeqar4PCHZeK9UGaEqc9nCffqSSnuhltVcAFOtUQ0WssPgcL SZhHchZPgi24B/7ToKiS7aCWQFpl5Lh//QQLqumpvV8EAI3aXU1r+NK45o5X8tlV lIAZ++ecNmluxdkKv/Jqq0vJJenu/8x3AOcYp2c91XWwyRf/f9W96oFn6aoejjYb krivf+piuZXjEsGlyl7FBx7OnO4AWtxIjEvHZKC11pverxriw0phvRgr4g01oPMQ f3aSJ96piU+Sbe8c6R/t0FDPoRivI0L7b+LwNnRxV9DXHxV9R7s8ZUP8R2GebfPI 5AZroHBdEWliasxK80i0IqZyhR0hT5ne -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:39 2025 by rpki-client