$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: WOfSzj2sMkSVYRgI5lRbulUlzeJQKLREtdv+0zfvOkg= Subject key identifier: 49:CA:11:DB:20:C3:E6:AC:EC:F7:1E:3F:07:02:12:3F:7B:57:C5:F6 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0159 Signing time: Mon 03 Nov 2025 04:15:01 +0000 Manifest this update: Mon 03 Nov 2025 04:15:00 +0000 Manifest next update: Mon 10 Nov 2025 04:15:00 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: 67HXHIexru+HQznKCi13Oca4Xz1vRrLgzi2/yWtGblY=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 5: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Nov 3 04:15:00 2025 GMT Not After : Nov 10 04:15:00 2025 GMT Subject: CN=69082c44-f811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:2e:3b:dc:1c:87:b9:9e:f9:4c:56:b6:ba: f2:47:e5:be:f2:b9:7c:87:1e:38:17:03:3c:0b:19: eb:3a:f9:c4:73:ac:ba:ec:c0:2f:ed:45:08:42:d9: ba:85:b6:de:7b:5c:f4:24:1a:d7:88:ca:d9:ac:e4: e7:3d:d1:96:2d:a7:34:73:02:b7:89:d4:79:35:0a: 6c:18:37:5a:3b:8b:cb:21:80:3a:ec:9b:4f:f7:ad: 10:19:fb:09:44:3f:54:5d:4a:ce:46:d1:29:48:25: 9d:33:b2:36:4a:c7:0d:77:2a:c5:79:11:4c:a3:97: 1c:94:91:96:ee:0f:24:18:ca:37:8f:cc:68:93:39: 39:f0:db:ac:58:ef:1f:c1:1d:76:69:5a:60:0f:20: 63:75:e1:06:c1:c8:7e:fb:a4:55:25:c5:ae:22:48: 35:9f:1f:72:10:2c:b8:55:56:f2:13:52:7d:57:ca: 3d:56:a8:36:90:ad:0a:d2:c9:51:a7:6c:a8:d1:37: dc:98:c6:74:c5:16:45:84:fc:9e:f3:9c:f2:03:1f: 82:bc:00:2c:aa:d9:da:f1:a5:33:c3:e5:32:ef:2f: c8:8b:8d:63:7d:13:f0:37:6e:1c:56:fe:29:d7:26: 2d:01:36:ba:b8:74:fb:7f:0b:97:bb:aa:73:93:d3: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:11:DB:20:C3:E6:AC:EC:F7:1E:3F:07:02:12:3F:7B:57:C5:F6 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:71:04:d1:dc:43:a0:f0:22:ec:70:18:ba:e4:6c:7b:46:f1: 18:ff:4c:b4:f5:b8:1d:87:16:01:d8:56:79:ed:90:a1:7a:b9: 32:b2:37:66:ff:fb:b9:d6:30:ae:22:17:43:8e:d6:49:d8:0e: b6:03:fd:96:0e:f0:44:8a:8b:08:3e:ee:ce:78:38:f2:b7:d1: 66:4a:50:ee:70:04:be:67:93:61:b6:ab:ab:7e:59:69:7d:57: ec:ee:dc:3a:4d:28:c2:9e:35:15:f3:9b:c2:e7:d9:cf:21:22: 70:ae:f5:ae:3a:a5:2d:4d:ad:41:ff:51:6e:22:5e:5d:c5:e9: 2d:1b:4c:01:26:19:fe:66:2c:3d:d0:04:77:24:94:1e:e6:d7: 83:80:d4:22:d9:a6:6c:f0:88:fe:c6:78:28:3c:de:09:cc:52: 1e:38:bd:4f:67:81:98:0c:58:e2:a9:3f:9b:6b:67:bf:f6:ab: 9e:8e:c4:ac:0e:a2:71:b7:eb:0b:40:bd:7f:c3:0e:1f:ed:57: ed:50:cd:70:bf:c3:1b:7c:1b:fd:65:56:46:6f:a3:02:54:34: da:11:15:54:d0:2d:05:2b:ca:a3:ed:64:8d:77:69:b7:cc:a7: a9:19:0d:34:9d:84:e3:59:49:c6:00:a9:a0:e3:e8:ca:0c:10: 3e:e3:81:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUxMTAzMDQxNTAwWhcNMjUxMTEwMDQxNTAwWjAYMRYwFAYD VQQDEw02OTA4MmM0NC1mODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF0uO9wch7me+UxWtrryR+W+8rl8hx44FwM8CxnrOvnEc6y67MAv7UUIQtm6 hbbee1z0JBrXiMrZrOTnPdGWLac0cwK3idR5NQpsGDdaO4vLIYA67JtP960QGfsJ RD9UXUrORtEpSCWdM7I2SscNdyrFeRFMo5cclJGW7g8kGMo3j8xokzk58NusWO8f wR12aVpgDyBjdeEGwch++6RVJcWuIkg1nx9yECy4VVbyE1J9V8o9Vqg2kK0K0slR p2yo0TfcmMZ0xRZFhPye85zyAx+CvAAsqtna8aUzw+Uy7y/Ii41jfRPwN24cVv4p 1yYtATa6uHT7fwuXu6pzk9M4eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnKEdsg w+as7PcePwcCEj97V8X2MB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJcQTR3EOg8CLscBi65Gx7RvEY/0y09bgdhxYB2FZ57ZCherkysjdm //u51jCuIhdDjtZJ2A62A/2WDvBEiosIPu7OeDjyt9FmSlDucAS+Z5Nhtqurfllp fVfs7tw6TSjCnjUV85vC59nPISJwrvWuOqUtTa1B/1FuIl5dxektG0wBJhn+Ziw9 0AR3JJQe5teDgNQi2aZs8Ij+xngoPN4JzFIeOL1PZ4GYDFjiqT+ba2e/9quejsSs DqJxt+sLQL1/ww4f7VftUM1wv8MbfBv9ZVZGb6MCVDTaERVU0C0FK8qj7WSNd2m3 zKepGQ00nYTjWUnGAKmg4+jKDBA+44Ej -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:47 2025 by rpki-client